> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Advocacy group against discriminatory surveillance accuses Congress of funding “racist policing tech”
Communications company looking into claims that personal data of 100 million users has been compromised
This post is part of the machine learning attack series.
It’s been a while that I did a Husky AI and offensive machine learning related post. This weekend I had some time to try out Counterfit. My goal was to understand what Counterfit is, how it works, and use it to turn Shadowbunny into a husky.
L...
Chocolate maker’s Heart the Hate campaign implores individuals to take action against online abuse
Over two-thirds of all scam texts were purportedly from delivery firms, according to new data
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in July:
Articles
Users cannot log in to Outlook with AuthPoint MFA
Configure HTTPS Content Inspection for Exchange Server with Outlook Web Access
AuthPoint does not sync...
Skills gaps, inventory issues and funding shortfalls add to security headaches
Microsoft reveals another dynamic email threat campaign
I like using procdump on Windows.
It’s quite handy for software development when systems have memory leaks or performance issues, procdump allows to set thresholds to trigger creation of a core dump.
BUT, it’s also super useful to search processes for secrets and other information.
For instance, thi...
IS-supporting media outlets offering encryption advice to supporters
Computer vision technology firm Voyage81 acquired by American beauty company for $40M
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an index into a function pointer array. The user provided values can exceed the boundaries of the legitimate array and might cause user controlled values to be called as function poin...
White House memo gives federal agencies 60 days to identify critical software and one year to secure it
Mayor calls for investigation after Dallas PD data lost during data migration
Summary The NPU device’s kernel driver implements a custom mmap handler that exposes trusted kernel data to user space. These exposed structures contain sensitive data, including kernel pointers, which can be controlled by a user process. The content of these structures is inherently trusted by the...
The Cyber Runway program will aid the growth of cyber startups, small businesses and scaleups
Imperva recorded a surge in bad bot activity on sporting and betting sites during high profile events this summer
Summary Due to a bug in the way mappings are closed it is possible to free a kmallocated memory chunk arbitrary times. This vulnerability can be used to craft a use after free scenario against any kernel structure that is allocated from the kmalloc-64 cache. There is rich public literature on how su...
Over one-third of organizations worldwide have experienced a ransomware or breach that blocked access to systems or data
Poly Network has received back $260m out of $610m stolen by the hacker, who claims to be ethically motivated