> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware and detection engineering.
Click the “ebpf” tag to see all relevant posts.
In the last few posts, we talked about a bpftrace and how attackers can use it to their advan...
Adam Steltzner links lessons he learned from his work with the Mars rover to all industries, including cyber
Lisa Forte advocates a six-step plan to ensure cyber breach preparedness
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware and detection engineering. Click the “ebpf” tag to see all relevant posts.
In the last post we talked about a basic bpftrace script to install a BPF program that runs c...
Hungarian gang laundered funds to the Caribbean
Full year on track to be a record-breaker
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in August:
Articles
Access Portal RDP Connection Recommendations
AT&T USB800 modem connects and disconnects from Firebox
Known Issues
Built-in mobile VPN client can...
Amazon-owned gaming company loses 125GB of data
DHS and NIST release roadmap on reducing risks related to advancement of quantum computing technology
This post is part of a series about Offensive BPF that I’m working on to learn about BPF to understand attacks and defenses, click the “ebpf” tag to see all relevant posts.
I’m learning BPF to understand how its use will impact offensive security, malware, and detection engineering.
One offsec idea...
Man locked up for claiming on Facebook that he paid someone with COVID-19 to lick grocery store items
Working group creates guidelines and a tiered classification system to spot and flag suspicious content
Over the last few years eBPF has gained a lot of traction in the Linux community and beyond.
eBPF’s offensive usage is also slowly getting more attention. So, I decided to dive into the topic from a red teaming point of view to learn about it to raise awareness and share the journey.
Similar to the...
A panel of experts discuss how security teams should react to the shift to digital during COVID-19
Louis Theroux details some of the dangers posed by technology, including mis and disinformation
Today we’re pleased to announce the new WatchGuard Technologies status page.
People across the globe trust WatchGuard’s products and services to keep their users, devices, and networks secure. We understand it can be frustrating when things aren’t working as expected and you don’t have any insights...
UK experts say it’s time to start over with employee device policies
New variant is exploiting Atlassian Confluence vulnerability
Deux salons majeurs viennent d’avoir lieu en France : le Forum International de la Cybersécurité (Lille) et le salon Global Industrie (Lyon).
Le sujet de la cybersécurité industrielle est à l’intersection des [...] Lire la suite
Path traversal flaw found in recently updated version