> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Elexon’s internal systems hit but electricity supply unaffected
Ohio passes bill to criminalize all malicious hacking attempts, even if they fail
Last month I did some research on Firefox, specifically I was learning more about it’s remote debugging features. As part of that I was reading Bugzilla bug information and learned more about Mozilla’s infrastructure.
One thing I noticed reading up on details was that Mozilla uses Phabricator.
What...
Vulnerabilities detected in Cyberoam’s firewall and VPN technology
IDSA finds 79% of organizations suffered an identity-related security breach in the last 2 years
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
DWF appoints a new director of data protection and cybersecurity
A Kaspersky study shows the majority of people are unaware of how to check if their credentials have been leaked
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
Remote workers are often not provided secure tools to access networks and authenticate themselves
US government reveals top 10 most targeted CVEs
Revisiting Cookie Crimes In 2018 @mangopdf described “Cookie Crimes”, which is great research around Chrome’s remote debugging feature that allows adversaries and malware to gain access to cookies quite convienently during post-exploitation.
The original research is published here, and it still work...
FBI and CISA warn domestic organizations to double down on security
Data theft and ransomware likely end goals
Chrome’s remote debugging feature enables malware post-exploitation to gain access to cookies. Root privileges are not required. This is a pretty well-known and commonly used adversarial technique - at least since 2018 when Cookie Crimes was released.
However, remote debugging also allows observing...
Financial trading service provider reports network intrusion to users
Researchers discover new cyber-espionage framework dubbed "Ramsay" in development
Identity-as-a-Service company Idaptive has been acquired by CyberArk
Magellan Health attacked with ransomware after falling for phishing email
Sysadmins continue to be swamped in 2020