> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
INTERPOL and Kaspersky dub WannaCry’s third anniversary “Anti-Ransomware Day”
CISSP designated as comparable to RQF Level 7
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
Experienced IT pro joins C-suite of international cybersecurity awareness training provider
Cyber-criminals continue to register new domains or phishing campaigns
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
Mailing tech firm targeted by Maze group
Wordfence warns of cross-site request forgery vulnerabilities
Revisiting Cookie Crimes In 2018 @mangopdf described “Cookie Crimes”, which is great research around Chrome’s remote debugging feature that allows adversaries and malware to gain access to cookies quite convienently during post-exploitation.
The original research is published here, and it still work...
FBI and DHS to warn that state-backed threat actors are trying to swipe COVID-19 vaccine data
Fake Zoom notification email contains malicious link to Microsoft login
Chrome’s remote debugging feature enables malware post-exploitation to gain access to cookies. Root privileges are not required. This is a pretty well-known and commonly used adversarial technique - at least since 2018 when Cookie Crimes was released.
However, remote debugging also allows observing...
New research highlights poor work-from-home security practices
Beaming research finds UK companies suffered more than one attack per minute
Adversaries are leveraging widely exposed clear text credentials to gain access to sensitive information.
At times the term “harvesting credentials” is used when red teamers emulate these attacks - which is something that appears to be more opportunistic and I would propose that security teams start...
Popular cybersecurity conferences will go virtual this year
IT giant admits major financial hit from Maze raid
MobiFriends was apparently breached back in January 2019
An EU committee wants to block the UK’s access to crime-fighting intel unless it shares more data with member states
Shareholder sues LabCorp to recoup share value losses following two data breaches