> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
DropBit founder operated Helix cryptocurrency tumbling service that laundered over $300m
Technical issues may have allowed customers in Montana to view other customers’ personal data
Summary During the regular boot sequence, Huawei’s BootROM initializes the UFS hardware and the crypto engine in order to load and verify the next stage bootloader image from flash. However, when run in download mode, which maybe used for factory flashing and repair purposes, a connected host can co...
Hackers have stolen data from a Salford-based social housing group that has thousands of tenants and other clients.
Concerns over blurring of lines between state-backed and criminal attacks
Recently we have presented our research on the remote exploitation of Huawei basebands at Black Hat USA 2021. As part of our findings, we have identified several bootloader vulnerabilities in Huawei Kirin chipsets. In addition to that publication, we have also recently disclosed an additional bootro...
Government report highlights multiple security failings
US carrier reveals sixth breach in past four years
This post is part of the machine learning attack series.
It’s been a while that I did a Husky AI and offensive machine learning related post. This weekend I had some time to try out Counterfit. My goal was to understand what Counterfit is, how it works, and use it to turn Shadowbunny into a husky.
L...
United Airlines representative stole credit card numbers and went shopping
Memorial Health System’s IT system fractured in ransomware attack
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in July:
Articles
Users cannot log in to Outlook with AuthPoint MFA
Configure HTTPS Content Inspection for Exchange Server with Outlook Web Access
AuthPoint does not sync...
Number of ICS vulnerabilities disclosed in H1 2021 is up 41% compared to previous six months
Report reveals most of this relates to ransomware and BEC
I like using procdump on Windows.
It’s quite handy for software development when systems have memory leaks or performance issues, procdump allows to set thresholds to trigger creation of a core dump.
BUT, it’s also super useful to search processes for secrets and other information.
For instance, thi...
CISA urges prompt patching of ThroughTek vulnerability
Software is used extensively across critical infrastructure
Proximity-based anonymous social media app is back in App Store four years after shutting down
Complaints received over “one of the worst” online vaccination portals in the United States
Hoosier State notifying 750K residents that COVID-19 contact tracing survey data has been breached