> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
New report shows 37% rise in mobile phishing encounters in Q1 of 2020
Thycotic adds three new products to protect enterprise cloud apps and ensure remote worker productivity
L'annuaire Active Directory, centre névralgique de la sécurité des systèmes d'information Microsoft, est un élément critique permettant la gestion centralisée de comptes, de ressources et de permissions. L'obtention de privilèges élevés sur cet annuaire entraîne une prise de contrôle instantanée...
Cyber Discovery registration opens three months early
Spoofed text messages raise particular concerns
L'annuaire Active Directory, centre névralgique de la sécurité des systèmes d'information Microsoft, est un élément critique permettant la gestion centralisée de comptes, de ressources et de permissions. L'obtention de privilèges élevés sur cet annuaire entraîne une prise de contrôle instantanée...
Trend Micro sees cyber-criminals take to Discord and Shoppy to sell
Bug bounty award for authentication bypass flaw
OpenSSL is one of the most popular cryptographic libraries out there; even if you aren’t using C/C++, chances are your programming language’s biggest libraries use OpenSSL bindings as well. It’s also notoriously easy to mess up due to the design of its low-level API. Yet many of these mistakes fall...
Guernsey to get a faster and more secure 100G core network
Cyber-attacks hit Minneapolis as protests over George Floyd’s death continue
TL;DR: We’ve open-sourced a new library, μthenticode, for verifying Authenticode signatures on Windows PE binaries without a Windows machine. We’ve also integrated it into recent builds of Winchecksec, so that you can use it today to verify signatures on your Windows executables! As a library, μthen...
Personal and financial data of millions of Indians exposed in BHIM data breach
BigFooty exposes users’ personal info and messages
Andrew A explains the updated guidance for Microsoft Office macros
Report suggests crackdown on espionage from the East
Unspecified number of customers hit after unauthorized access incident
Les marqueurs techniques suivants sont associés en source ouverte au code malveillant Dridex (voir la publication CERTFR-2020-CTI-005). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Toute communication depuis ou vers cette...
Saltmine CEO behind bars after downloading images of children and animals being sexually abused
UTSA to build digital research institute aimed at safeguarding US manufacturers