> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals a concerning surge in data breaches and ransomware threats. Notably, a hacker claims to possess the personal data of over 21,000 clients from Aréas Assurances, while a significant cyberattack on La Poste subsidiary Maileva has compromised the data of 22 million individuals. In a related trend, 400 companies' information has surfaced for sale from a payment processing firm, highlighting the increasing monetization of stolen data. Additionally, a leak involving 4.3 million orders attributed to Opsysweb has emerged. The situation underscores a shift in attacker focus from traditional vulnerabilities to a broader range of targets, including personal and organizational data. Organizations must enhance their security measures to mitigate these evolving threats.
|
// AI-powered summary generated at 16:00
REvil group claims to have secret Macbook plans stolen from supplier
Advanced Intelligence will check to see if your assets are on dark web site
A nifty way for adversaries to acquire passwords during post-exploitation is to spoof credential dialogs and perform a local phishing attack. This means tricking a user on a compromised computer to enter their password.
Unfortunately, users are conditioned to enter their credentials frequently and t...
Crypto-mining botnet has been around since 2016
Boxing drama "Rocky" tops list of movie titles most often used in leaked passwords
Maintain access to S3 resources by configuring Access Control Lists associated with S3 Buckets or Objects.
Misconfigured data storage folders expose data of Eversource
Claim filed against TikTok on behalf of millions of children in Europe and the UK
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in March:
Articles
Downgrade a Firebox from Fireware v12.7 Beta to Fireware v12.5.7
Security scanning tool by Qualys reports CWE-937: Use of JavaScript Library with Known...
The deal will allow Rapid7 to enhance its incident response capabilities
The law will impose new obligations on the manufacturers of smart devices
Investigators have reportedly already found hundreds of victim customers
Customers urged to take immediate action against nation state threat
Intelligence agency urges caution over malicious profiles
The protocol is designed to better enable the deployment of IoT devices at scale
Cyber-attackers gain access to Manhunt’s accounts database
Hackers leak Florida school district’s files online when their ransom demand isn’t met
Hacker claims to have stolen 13TBs of data from multinational pizza chain’s Indian wing
Businesses urged to protect BYOD and corporate devices
Planned start to the new term is delayed after cyber-attack