> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Students given personal data of disabled Delaware residents to use in college project
Louisiana university’s research arm wins $25m cybersecurity contract to build digital dome
Prevent Kali Linux, ParrotOS, and Pentoo Linux from throwing GuardDuty alerts by modifying the User Agent string when using the AWS CLI.
Maharashtra devises cyber-safety training program for young Indian women
A quarter of employees admit to clicking on a link in a phishing email
When stealing IAM credentials from an EC2 instance you can avoid a GuardDuty detection by using VPC Endpoints.
FTC details COVID-19 related scams and asks for power to obtain refunds for victims
Ransomware attack on service provider the cause of the breach
Finally I got to writing some basic tooling for invoking the Firefox debugging API to send commands to the browser and read the responses. This can be useful for grabbing cookies in the post-exploitation phase.
It works for Windows and macOS, should also work on Linux.
This technique is probably mos...
Duo stole IP over 10-year period for China, alleges DoJ
Although female workforce is growing, inequities remain
Previously I talked about remotely debugging Chrome, and we also covered the latest Microsoft Edge browser along the way.
These features allow an adversary to gain access to authentication tokens and cookies. See MITRE ATT&CK Technique T1539: Steal Web Session Cookie as well for this.
What about...
Kaspersky uncovers multi-platform toolset used in data theft and ransomware
Accenture and Vodafone Business team up to bring cybersecurity services to Europe
A technique on Windows that is less known is how to do basic port-proxying.
Proxying ports is useful when a process binds on one (maybe only the local) interface and you want to expose that endpoint on another network interface.
Let’s say you have an existing process that listens only on the loopbac...
Fortinet acquires Secure Access Service Edge (SASE) cloud provider OPAQ Networks
Texas college launches project to beef up the cybersecurity of smart buildings
Smart contract authors can now express security properties in the same language they use to write their code (Solidity) and our new tool, manticore-verifier, will automatically verify those invariants. Even better, Echidna and Manticore share the same format for specifying property tests. In other w...
Increased reliance on digital services has led to a huge rise in online fraud
TCA is a global, non-profit association that works to enable a secure, connected future