> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Teens sign-up in their droves to learn more about cybersecurity
Supply chain security and skills shortages among top priorities
Highlighting guidance which will help you secure your servers
Aussie police granted new powers to monitor cyber-criminal suspects and take over their accounts
Agents able to access Virgil Griffith’s data due to flaw in FBI’s Palantir software program
Summary During the regular boot sequence, Huawei’s BootROM initializes the UFS hardware and the crypto engine in order to load and verify the next stage bootloader image from flash. However, when run in download mode, which maybe used for factory flashing and repair purposes, a connected host can co...
Phishing attack on Utah healthcare provider exposes PII of 12K patients
45% of respondents said businesses think law enforcement slows down ransomware recovery
Recently we have presented our research on the remote exploitation of Huawei basebands at Black Hat USA 2021. As part of our findings, we have identified several bootloader vulnerabilities in Huawei Kirin chipsets. In addition to that publication, we have also recently disclosed an additional bootro...
A panel of experts discuss why hiring practices for cyber roles need to change
Encrypted chat service was infiltrated by police last year
This post is part of the machine learning attack series.
It’s been a while that I did a Husky AI and offensive machine learning related post. This weekend I had some time to try out Counterfit. My goal was to understand what Counterfit is, how it works, and use it to turn Shadowbunny into a husky.
L...
Action Fraud figures show cases increased more than six-fold from 1H 2020
Report suggests supply chains and critical infrastructure could be on the agenda
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in July:
Articles
Users cannot log in to Outlook with AuthPoint MFA
Configure HTTPS Content Inspection for Exchange Server with Outlook Web Access
AuthPoint does not sync...
Scammers posed as local school district and contractor to steal 14% of town’s annual budget
New ransomware group OnePercent has been attacking US companies since November
I like using procdump on Windows.
It’s quite handy for software development when systems have memory leaks or performance issues, procdump allows to set thresholds to trigger creation of a core dump.
BUT, it’s also super useful to search processes for secrets and other information.
For instance, thi...
Singapore and US will collaborate on cybersecurity and climate change
NTT Application Security warns of “systemic failure” to address bugs