> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
New Jersey school district axes teaching via Zoom after lesson disrupted by porn and racist language
Matt Hancock permits GCHQ to access NHS network security data
Chrome’s remote debugging feature enables malware post-exploitation to gain access to cookies. Root privileges are not required. This is a pretty well-known and commonly used adversarial technique - at least since 2018 when Cookie Crimes was released.
However, remote debugging also allows observing...
Blockchain startups now relying on investment rather than initial coin offerings
Microsoft warns that data exfiltration is now a given in many cases
Adversaries are leveraging widely exposed clear text credentials to gain access to sensitive information.
At times the term “harvesting credentials” is used when red teamers emulate these attacks - which is something that appears to be more opportunistic and I would propose that security teams start...
Web firm files complaint with European Commission
Most VPNs suffering connectivity issues, warns Neustar
At Trail of Bits we do more than just security audits: We also push the boundaries of research in vulnerability detection tools, regularly present our work in academic conferences, and review interesting papers from other researchers (see our recent Real World Crypto and Financial Crypto recaps). In...
Scammers using reCAPTCHA walls to fool analysis systems and trick users
Digital privacy and security company launches a free 24/7 helpline offering cybersecurity advice
It’s been four years since my blog post “2000 cuts with Binary Ninja.” Back then, Binary Ninja was in a private beta and the blog post response surprised its developers at Vector35. Over the past few years I’ve largely preferred to use IDA and HexRays for reversing, and then use Binary Ninja for any...
A man who allegedly failed to deliver protective face masks he sold online via a fake company is facing criminal charges
Philadelphia sandwich chain faces class-action lawsuit over prolonged data breach
Likely Vietnamese APT group behind covert spyware
Undisclosed “vulnerabilities” the reason for ditching texted tweets
Sensitive employee information among the data taken
A contact tracing model is developed that protects personal data
Boston-based firm will pay $145m to tackle cloud misconfiguration
Wyoming attorney advises clients to access virtual court hearings using Wi-Fi from outside McDonald’s