> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
The types of attacks and industries targeted by cyber-criminals changed significantly in 2019
Email addresses and travel details of nine million easyJet customers have been accessed
Crytic, our Github app for discovering smart contract flaws, is kind of a big deal: It detects security issues without human intervention, providing continuous assurance while you work and securing your codebase before deployment. Crytic finds many bugs no other tools can detect, including some that...
Trust in the data to create metrics is proving to be a challenge for businesses
Attorney general goes on the offensive against device encryption
Last month I did some research on Firefox, specifically I was learning more about it’s remote debugging features. As part of that I was reading Bugzilla bug information and learned more about Mozilla’s infrastructure.
One thing I noticed reading up on details was that Mozilla uses Phabricator.
What...
NAO says just one passed Cyber Essentials Plus scheme
Verizon’s latest DBIR report shines a light on a year of breaches
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
Mother of pediatric patient sues Lurie Children’s Hospital of Chicago over data breaches
Days after judiciary system attack, Texas’ Department of Transport is also hit by ransomware
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
Policyholders are being questioned more closely by insurers as pandemic impacts security
Responsible Cyber has announced the acquisition of fellow startup Secucial and new shareholders
Revisiting Cookie Crimes In 2018 @mangopdf described “Cookie Crimes”, which is great research around Chrome’s remote debugging feature that allows adversaries and malware to gain access to cookies quite convienently during post-exploitation.
The original research is published here, and it still work...
European facilities halt research after string of attacks
Four arrested in Romania and Moldova
Ransom demand for celeb law firm doubles to $42m
Des Moines meeting abandoned after a double Zoom-bombing by racist losers
Data breach at world’s largest sovereign wealth fund enables fraudsters to steal $10m