> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Researchers successfully bypassed an iPhone's Apply Pay lock screen to perform contactless payments
Ransomware drives increasing awareness of threat levels
Over the last few years eBPF has gained a lot of traction in the Linux community and beyond.
eBPF’s offensive usage is also slowly getting more attention. So, I decided to dive into the topic from a red teaming point of view to learn about it to raise awareness and share the journey.
Similar to the...
Researchers reveal serious design implementation issue
Group-IB boss faces 20-year jail term if found guilty
Today we’re pleased to announce the new WatchGuard Technologies status page.
People across the globe trust WatchGuard’s products and services to keep their users, devices, and networks secure. We understand it can be frustrating when things aren’t working as expected and you don’t have any insights...
Personal information of hundreds of thousands of PORTpass users allegedly viewable in plain text
Critical infrastructure companies may be required to report cyber-attacks to federal government
Deux salons majeurs viennent d’avoir lieu en France : le Forum International de la Cybersécurité (Lille) et le salon Global Industrie (Lyon).
Â
Le sujet de la cybersécurité industrielle est à l’intersection des [...] Lire la suite
The video-sharing site outlined its updated medical misinformation policy in a blog post published earlier today
Seattle’s Samaritan Center and Philadelphia’s Horizon House warn PHI may have been exposed
Credits John
Github: https://github.com/johnjhacking
Robert Willis:
Twitter: https://twitter.com/rej_ex
Identification The Wedding websites that can be created with The Knot have many components built in. Among some of the functions included the ability to send out RSVP invites to friends or family....
85% are more concerned about a ransomware attack than other cyber-threats, according to Fortinet survey
The UK's ICO received an average of 13,925 reports of nuisance calls, texts and emails per month in the first half 2021
Credits John Github: https://github.com/johnjhacking
SickCodes
Twitter: https://twitter.com/sickcodes
Identification During research, I stumbled upon a TestRail application. While using Burp Suite to look at various requests and responses of the application, I noticed a files.md5 path:
It seemed fai...
Best practice advice will help to reduce corporate attack surface
Researchers claim misconfigurations are also rife in cloud infrastructure
Summary In this advisory we are disclosing a vmap/vmalloc use-after-free vulnerability within the Android ION allocator, that impacts most Android devices that utilize ION. The exploitability of the vulnerability depends on how the various kernel drivers use the allocated ION buffers, the version of...
Malware steals info from Active Directory Federation Services servers
Giant Group initiates total system shutdown after “sophisticated” attack