> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Matt Hancock comes under investigation by the ICO
Point and Print function appears to be the problem
Credits John
Github: https://github.com/johnjhacking
Jackson Henry [Helped simplify the payload]
Twitter: https://twitter.com/JacksonHHax
Wabaf3t [Provided post-code analysis/looked for escalation]
Twitter: https://twitter.com/wabafet1
Kelly Kaoudis [Reviewed the writeup]
Twitter: https://twitter.co...
UK court grants United States permission to appeal decision not to extradite WikiLeaks founder Julian Assange
Joint Enterprise Defense Infrastructure cloud contract axed, replaced with multi-vendor contract
Many Windows applications and services are implemented using an automation infrastructure called Component Object Model (COM).
COM has been around for decades and its useful for programming, sharing of code at binary level, usage from scripting languages, and well, red teaming.
Wide Usage of Compone...
New research finds 78% of reported breaches that involve an insider were not malicious
Lookout claims users have lost over $350,000 to mobile fraud
Until the Apple Airtag came out a few months ago I hadn’t really looked into the tag tracking market. Turns out there were already quite a lot of offerings available before Apple joined the market, most notably Tile.
However, I wanted to try out the Airtag and ended up ordering a few.
This post will...
Attempted holiday weekend raid came via third-party provider
White House says option remains if Kremlin doesn’t act
Cyber-bully appears to stop online abuse of 6th grader after being caught in the act by mom
Racing fans receive strange messages over holiday weekend
Victims of 2018 British Airways data breach to receive confidential settlement
Industry bodies need to take the lead in fostering international collaboration in cybersecurity
Brits have lost over £1bn to fraud in the first half of 2021, but cases fell significantly in Q2 compared to Q1
China and Russia blamed for increasingly hostile activity
Group-IB researchers also benefitted from poor threat actor OpSec
Researchers have detected 5000 attack attempts since July 2
Organizations were still targeted by one attack every 49 seconds