> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Family tree developer misconfigures Elasticsearch server
Alleged cyber-criminal becomes first Cypriot national to be extradited from Cyprus to the US
Previously I talked about remotely debugging Chrome, and we also covered the latest Microsoft Edge browser along the way.
These features allow an adversary to gain access to authentication tokens and cookies. See MITRE ATT&CK Technique T1539: Steal Web Session Cookie as well for this.
What about...
Researchers discover new malware based on Xerxes banking Trojan
HelpSystems signs definitive merger agreement with publicly traded GlobalSCAPE
A technique on Windows that is less known is how to do basic port-proxying.
Proxying ports is useful when a process binds on one (maybe only the local) interface and you want to expose that endpoint on another network interface.
Let’s say you have an existing process that listens only on the loopbac...
Index launched to capture trends and changes in data protection sector
The UK government admits to not carrying out a DPIA
Smart contract authors can now express security properties in the same language they use to write their code (Solidity) and our new tool, manticore-verifier, will automatically verify those invariants. Even better, Echidna and Manticore share the same format for specifying property tests. In other w...
Scam discovered by litigation firm Griffin Law
Greater transparency will help uncover discrimination and aid collective bargaining
WizCase discovers five platforms with misconfigured cloud servers
ONS report also says consumer-reported offenses remained flat
Twitter reveals true extent of celebrity account hijacking campaign
German law deemed insufficient at protecting citizens’ right to privacy
US government agencies told they have 24 hours to fix SIGRed vulnerability
Data Protection Officers and businesses should take action immediately in light of the end of Privacy Shield
New organization will have power to ban insecure consumer gadgets
MyCastingFile database left unsecured online
Government statement comes ahead of much delayed intelligence report