> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
An unsecured database is again to blame in CAM4 privacy snafu
Oxford University has started human clinical trials
Revisiting Cookie Crimes In 2018 @mangopdf described “Cookie Crimes”, which is great research around Chrome’s remote debugging feature that allows adversaries and malware to gain access to cookies quite convienently during post-exploitation.
The original research is published here, and it still work...
Survey reveals need for more unified IT processes in organizations
Dark web dealers are selling fake vaccines allegedly made with blood from recovered #COVID19 patients
Chrome’s remote debugging feature enables malware post-exploitation to gain access to cookies. Root privileges are not required. This is a pretty well-known and commonly used adversarial technique - at least since 2018 when Cookie Crimes was released.
However, remote debugging also allows observing...
Northern Irish police warn businesses of a spike in cybercrime during the COVID-19 health crisis
A breach of Australia’s SkillsSelect platform has exposed the data of 774,000 migrants
Adversaries are leveraging widely exposed clear text credentials to gain access to sensitive information.
At times the term “harvesting credentials” is used when red teamers emulate these attacks - which is something that appears to be more opportunistic and I would propose that security teams start...
Executive order tackles threat from state-sponsored hackers
Indonesian e-commerce site the latest big name caught out
At Trail of Bits we do more than just security audits: We also push the boundaries of research in vulnerability detection tools, regularly present our work in academic conferences, and review interesting papers from other researchers (see our recent Real World Crypto and Financial Crypto recaps). In...
NCSC claims “blacklist” and “whitelist” are casually pejorative
White supremacist threatens Florida council candidate and the child of a political activist
It’s been four years since my blog post “2000 cuts with Binary Ninja.” Back then, Binary Ninja was in a private beta and the blog post response surprised its developers at Vector35. Over the past few years I’ve largely preferred to use IDA and HexRays for reversing, and then use Binary Ninja for any...
Cybersecurity teams across the globe are unable to work from home safely
CGI awarded lucrative contract to up the cybersecurity game of 75+ US federal agencies
A new online cybersecurity course for school-children is launched in the UK
#COVID19 home working exposes organizations in Q1, says Coveware
Researchers warn of fast-evolving mobile malware