> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals a concerning surge in data breaches and ransomware threats. Notably, a hacker claims to possess the personal data of over 21,000 clients from Aréas Assurances, while a significant cyberattack on La Poste subsidiary Maileva has compromised the data of 22 million individuals. In a related trend, 400 companies' information has surfaced for sale from a payment processing firm, highlighting the increasing monetization of stolen data. Additionally, a leak involving 4.3 million orders attributed to Opsysweb has emerged. The situation underscores a shift in attacker focus from traditional vulnerabilities to a broader range of targets, including personal and organizational data. Organizations must enhance their security measures to mitigate these evolving threats.
|
// AI-powered summary generated at 16:00
Digital ID verification company to be acquired for $850m
Maryland resident accused of conning seniors out of nearly half a million dollars over social media
A nifty way for adversaries to acquire passwords during post-exploitation is to spoof credential dialogs and perform a local phishing attack. This means tricking a user on a compromised computer to enter their password.
Unfortunately, users are conditioned to enter their credentials frequently and t...
Tech giant encourages developers to get on board
Carbanak manager was recruited via Combi Security front company
Maintain access to S3 resources by configuring Access Control Lists associated with S3 Buckets or Objects.
Question marks remain over regulator’s ability to collect
Two charged over sale of thousands of false identity documents on dark net
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in March:
Articles
Downgrade a Firebox from Fireware v12.7 Beta to Fireware v12.5.7
Security scanning tool by Qualys reports CWE-937: Use of JavaScript Library with Known...
America urges organizations to patch five vulnerabilities being exploited by Russia’s Foreign Intelligence Service
Deal marks first ever merger between certificate automation and certificate authority providers
Knowing only the name of a public S3 bucket, you can ascertain the account ID it resides in.
Kaspersky study finds employees switching to less secure personal devices
New strategy designed to mitigate opportunistic attacks
We’re hiring for our Research + Engineering team! By Aaron Yoo, University of California, Los Angeles As an intern at Trail of Bits, I worked on Solar, a proof-of-concept static analysis framework. Solar is unique because it enables context-free interactive analysis of Solidity smart contracts. A u...
Customized scam messages designed to deploy malware loader
Cyberstalker who threatened to kill teenage victim if they didn’t have sex with him gets custodial sentence
Russia hints at confrontation after being sanctioned by US for hacking and election interference
One Huntington Park financial official arrested and others placed on leave following data breach
The attack has led to online classes being cancelled