> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Anomali finds half of Brits don’t trust government with their data
Massachusetts girl cyberstalked at 12 years old by deputy sheriff she met while playing Minecraft
Andrew A explains the updated guidance for Microsoft Office macros
Cyber Peace Institute’s call for the defense of healthcare providers garners international support
National Guard’s pandemic response includes $1m in cybersecurity support for Maryland
Les marqueurs techniques suivants sont associés en source ouverte au code malveillant Dridex (voir la publication CERTFR-2020-CTI-005). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Toute communication depuis ou vers cette...
ESET reveals details of a new version of Turla's ComRAT backdoor malware
F-Secure researchers warn of security gaps from local configurations
Les marqueurs techniques suivants sont associés en source ouverte au code malveillant Dridex (voir la publication CERTFR-2020-CTI-005). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques ou de détection. Toute communication depuis ou vers cette...
Dark web file may have originated from unprotected Elasticsearch trove
Airline faces major financial hit after data breach
The results of phishing campaigns are often not comparable with each other over time. Various security vendors and red teams use different tooling and techniques - which is totally fine.
However, I recommend requiring tracking a minimum set of metrics to be able to compare results over time.
Funny s...
Baby Yoda helps Mumbai Police spread cyber-safety message
Cybersecurity firm claims Care19 app is sending user data to third parties, identifying users
The Trail of Bits Winternship is our winter internship program where we invite 10-15 students to join us over the winter break for a short project that has a meaningful impact on information security. They work remotely with a mentor to create or improve tools that solve a single impactful problem....
Attackers could be lying dormant on employee devices
Ohioans’ personal data exposed in Department of Job and Family Services breach
We, along with our partner Matthew Green at Johns Hopkins University, are using zero-knowledge (ZK) proofs to establish a trusted landscape in which tech companies and vulnerability researchers can communicate reasonably with one another without fear of being sabotaged or scorned. Over the next four...
Non-cyber incidents outnumber reported cyber-incidents
Sophos reveals novel technique in latest research