> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Organization made over $560m during its seven-year history
Move comes as China passes regressive national security law
A few months ago we discussed the importance of performing active credential hunting for your organization.
This is to ensure clear text credentials in widely accessible locations and source code are identified before an adversary gets a hold of them.
In this post we will explore using built-in oper...
Fraudsters adapt phishing scams and now seek passport info of self-employed
39% of organizations unaware of their ransomware strategy
Les marqueurs techniques suivants sont associés au groupe cybercriminel TA505 (voir la publication CERTFR-2020-CTI-006). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Mise à jour du 10 février 2021 : un nouveau rapport détaillant...
The University of California San Francisco admitted to paying up after being hacked by the Netwalker ransomware gang
Cofense has found attackers using iCalendar files to deliver phishing attacks
Les marqueurs techniques suivants sont associés au groupe cybercriminel TA505 (voir la publication CERTFR-2020-CTI-006). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Mise à jour du 10 février 2021 : un nouveau rapport détaillant...
ESET has noticed a sharp uptick in brute-force RDP attacks during the pandemic
Malware incidents fell by 23% in 2019
The Shadowbunny TTP in the PenTest Magazine The latest edition of the PenTest Magazine features an article of mine about using virtual machines (VMs) during lateral movement to establish persistence and evade detections.
A few years back when I came up with the idea of using VMs for lateral movement...
Kenneth Currin Schuchman worked on Satori, Okiru, Masuta and more
GoldenSpy hidden in tax software mandated for use by foreign businesses
As a company, we believe Black lives matter. In the face of continued police brutality, racial disparities in law enforcement, and limited accountability, we demand an end to systemic racism, endorse restrictions on police use of force, and seek greater accountability for police actions. We believe...
The CyberUp Campaign calls for a revision of the Computer Misuse Act 30 years after it reached royal assent
OneClass claimed leak was of test data, but researchers disagree
Some organization have this interesting concept of a bug jail to prevent new feature development when there are too many existing flaws in the system.
For instance, if an engineer has 5 or more bugs assigned they aren’t allowed to work on anything else but fixing their bugs.
What is the Security Bug...
US senators introduce bill to stop federal law enforcement from using facial recognition technology
Criminal Brit funds millionaire lifestyle by stealing savings of elderly Americans