> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Vendor spots increase in BEC and new ransomware families
BT Security announces vendor partners including McAfee, Fortinet, Microsoft and IBM
Today I’m gonna talk about a class of application security issues I ran across a few times over the years. In particular, let’s discuss race conditions when it comes to files with sensitive content and permissions.
Race conditions can allow an adversary to gain access to sensitive information on mac...
Five-year history of Magecart-like gang uncovered by Group-IB
Researchers spot Beijing’s hand in botnet-for-hire campaign
During an assessment you may find AWS IAM credentials. Use these tactics to identify the principal of the keys.
Misinformation and fake domains are causing concern among American cybersecurity professionals
Family of Android apps uses freebie lure to distribute novel ad fraud botnet
In this post, we’ll show you how to test your smart contracts with the Echidna fuzzer. In particular, you’ll see how to: Find a bug we discovered during the Set Protocol audit using a variation of differential fuzzing, and Specify and check useful properties for your own smart contract libraries. An...
Vacationer charged with conspiring to pay employee $1m to infect company with ransomware
New Zealand’s stock exchange was placed on hold due to “connectivity issues” a day after a DDoS attack
The Ultimate OSCP Preparation Guide [DEPRECATED] Update Notes This guide is now deprecated due to exam revisions made by Offensive Security on January 11, 2022.
I published this guide on August 17th, of 2020. Offensive Security no longer requires the buffer overflow, and to pass this exam, you’ll ha...
Vulnerabilities in TLS and a 10-year-old botnet are the most common findings from penetration tests
The tv set up boxes are vulnerable to remote takeover, enabling cyber-criminals to launch attacks
Leverage file read and SSRF vulnerabilities to steam IAM credentials and event data from Lambda.
Persistent Chinese attempts to obfuscate raises threat levels
Secure-D found 19.2 million suspicious transactions from Tecno W2 handsets
These days business decisions and feature development often is influenced heavily by telemetry information. Telemetry is baked into the programs, services and applications we use.
Companies are hungry for telemetry because with machine learning and Deep Neural Networks “data is the new oil”.
Telemet...
Bitdefender claims hackers-for-hire stole IP from architectural firm
Malware attack halts online classes in Rialto after FBI issues cybersecurity warning to schools