> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
SD card hidden in peanut butter sandwich allegedly used by couple in data dead drop
Online sexual predator manipulated at least 50 kids into creating sexually explicit images
Tabnabbing is a web application security vulnerability that can be used to perform phishing attacks, so its important to be aware of it as a developer and penetration tester.
It is easy to mitigate and in this short video we cover both attacks and mitigations.
Thanks for reading and happy hacking!
@...
Patient information deleted in hacking attack on New Mexico hospital
A number of Android OS variants are sending large amounts of user data to developers and third parties without opt outs
This post is part of a series about Offensive BPF that I’m working on to learn about BPF to understand attacks and defenses. Click the “ebpf” tag to see all relevant posts.
In the previous posts I spend time learning about bpftrace which is quite powerful. This post is focused on basics and using ex...
Some sectors have seen increases of 300% or more
Trio indicted for alleged multi-year plot
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware and detection engineering.
Click the “ebpf” tag to see all relevant posts.
In the last few posts, we talked about a bpftrace and how attackers can use it to their advan...
Ryuk player has a history of targeting healthcare organizations
Black student allegedly posed as rival fraternity to upload racist party invite to social media
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware and detection engineering. Click the “ebpf” tag to see all relevant posts.
In the last post we talked about a basic bpftrace script to install a BPF program that runs c...
Personal data of hundreds of thousands of BrewDog customers and shareholders exposed for 18 months
Court halts million-dollar scam that promised victims a financial windfall in exchange for a fee
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in August:
Articles
Access Portal RDP Connection Recommendations
AT&T USB800 modem connects and disconnects from Firebox
Known Issues
Built-in mobile VPN client can...
Attackers are also becoming more effective at compromise
FCA took lender to court in first case of its kind
This post is part of a series about Offensive BPF that I’m working on to learn about BPF to understand attacks and defenses, click the “ebpf” tag to see all relevant posts.
I’m learning BPF to understand how its use will impact offensive security, malware, and detection engineering.
One offsec idea...
Attacks back on the increase after Q2 dip
Feedzai’s list of top 5 fraud scams features SMS phishing attacks for the first time