> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
The best CISOs are in a place where they are business leaders
Personal information stolen in cyber-raid
Abuse security group connection tracking to maintain persistence even when security group rules are changed.
Marketing database exposed in June attack
Twitter confirms a spear-phishing attack caused the recent account takeover
Chart of the IAM unique ID prefixes.
WannaCry, NotPetya and Cloud Hopper attackers are punished
Remote music festival among multiple 5G R&D projects to receive UK government funding
In this post I will discuss some testing techniques for internal red teams to identify privacy issues in services and infrastructure, most importantly a simple three step approach that might uncover interesting results.
Background story First, let me share a story from the past. When I did my master...
WPBQ Radio host The Cipher Voice arrested on cyber-stalking charges
Mimecast acquires Chicago email and messaging security company MessageControl
Prevent Kali Linux, ParrotOS, and Pentoo Linux from throwing GuardDuty alerts by modifying the User Agent string when using the AWS CLI.
Thunderbolt-based attacks are generally limited to high profile targets
Deceptikons has been operating for nearly a decade
When stealing IAM credentials from an EC2 instance you can avoid a GuardDuty detection by using VPC Endpoints.
McAfee reveals “Operation North Star” campaign
German giant admits attack targeted subsidiary
Finally I got to writing some basic tooling for invoking the Firefox debugging API to send commands to the browser and read the responses. This can be useful for grabbing cookies in the post-exploitation phase.
It works for Windows and macOS, should also work on Linux.
This technique is probably mos...
US drugstore chain removes facial recognition technology from 200 stores
(ISC)² names Global Knowledge as its official training provider in the UK