> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Marqeta study finds Brits are less alert to risk exposure than US consumers
Social network tackles QAnon in crackdown on coordinated inauthentic behavior
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
World Password Day studies show room for improvement
Les marqueurs techniques suivants sont associés en source ouverte au groupe cybercriminel SILENCE (voir la publication CERTFR-2020-CTI-004). Ils peuvent être utilisés à des fins de recherche de compromission dans des journaux historiques. Toute communication depuis ou vers cette infrastructure ne...
Cybercrime victim gender gap could be linked to password practices
Fresenius hit by callous ransomware attack that limits operations in the midst of global health crisis
Revisiting Cookie Crimes In 2018 @mangopdf described “Cookie Crimes”, which is great research around Chrome’s remote debugging feature that allows adversaries and malware to gain access to cookies quite convienently during post-exploitation.
The original research is published here, and it still work...
Workers are accessing potentially dangerous content causing additional security risks for businesses
Boston City Council could issue rules to limit information-sharing between schools and the police
Chrome’s remote debugging feature enables malware post-exploitation to gain access to cookies. Root privileges are not required. This is a pretty well-known and commonly used adversarial technique - at least since 2018 when Cookie Crimes was released.
However, remote debugging also allows observing...
Since March, HMRC has asked ISPs to remove 292 scam web addresses exploiting the coronavirus outbreak
Cross-site scripting bugs in plug-ins targeted in new campaign
Adversaries are leveraging widely exposed clear text credentials to gain access to sensitive information.
At times the term “harvesting credentials” is used when red teamers emulate these attacks - which is something that appears to be more opportunistic and I would propose that security teams start...
Move could further expose remote working security gaps during pandemic
Cybercrime group touted stolen user log-ins to other gangs
At Trail of Bits we do more than just security audits: We also push the boundaries of research in vulnerability detection tools, regularly present our work in academic conferences, and review interesting papers from other researchers (see our recent Real World Crypto and Financial Crypto recaps). In...
US platform aims to help K–12 students safely learn remotely during lockdown
Cyber-attack derails American university students’ virtual commencement ceremony
UK Foreign Secretary says he has evidence APT groups are exploiting COVID-19