> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
US urges organizations to patch Exim servers now
Microsoft warns of latest human-operated threat to large organizations
TL;DR: We’ve open-sourced a new library, μthenticode, for verifying Authenticode signatures on Windows PE binaries without a Windows machine. We’ve also integrated it into recent builds of Winchecksec, so that you can use it today to verify signatures on your Windows executables! As a library, μthen...
IT services giant said Singapore data center was incursion point
Idris Sultan was arrested for sharing a face-swap photo with Tanzanian president on social media
Andrew A explains the updated guidance for Microsoft Office macros
RackTop Systems is now included in the Hewlett Packard Enterprise Complete program
IT leaders who think staff follow security best practices while working from home are misguided
Les marqueurs techniques suivants sont associés en source ouverte au code malveillant Dridex (voir la publication CERTFR-2020-CTI-005). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Toute communication depuis ou vers cette...
The gateway accepts submissions of suspicious URLs or emails
C-level executives regularly ask to bypass mobile security protocols
Les marqueurs techniques suivants sont associés en source ouverte au code malveillant Dridex (voir la publication CERTFR-2020-CTI-005). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Toute communication depuis ou vers cette...
Remote workers have been targeted by up to 65,000 Google-branded attacks in first four months of 2020
Brazilian police notified about prolific Uberlandian
The results of phishing campaigns are often not comparable with each other over time. Various security vendors and red teams use different tooling and techniques - which is totally fine.
However, I recommend requiring tracking a minimum set of metrics to be able to compare results over time.
Funny s...
Group-IB said attacks also spiked 40% after quiet 2018
Sixgill report reveals spike in ads but lagging demand
The Trail of Bits Winternship is our winter internship program where we invite 10-15 students to join us over the winter break for a short project that has a meaningful impact on information security. They work remotely with a mentor to create or improve tools that solve a single impactful problem....
$71.4m civil complaint accuses New York teen of stealing cryptocurrency worth $23.8m
Data breach mars Bank of America’s PPP application process