🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
6 Jul‘RegreSSHion’ bug raises alarms but experts question chances of widespread exploitationsubmitted by c0mmando to netsec 1 points | 0 comments https://web.archive.org/web/20240703090032/https://therecord.media/regresshion-bug-raises-alarms-qualys A new vulnerability affecting Linux systems has caused alarm over the last 48 hours among security researchers, although s…LINKS.HACKLIBERTY.ORG
⚠️ VULNERABILITY DISCLOSURE 8[−]
6 JulRoblox Developer Conference (2024) - 10,386 breached accountsIn July 2024, Roblox disclosed a data breach related to a vendor inadvertently exposing user information from a 2022-2024 Roblox Developer Conference registration list . The data included 10k unique email addresses alongside names and IP addresses.HAVEIBEENPWNED.COM
6 JulCobalt Strike: International law enforcement operation tackles illegal uses of ‘Swiss army knife’ pentesting toolsubmitted by c0mmando to netsec 1 points | 0 comments https://web.archive.org/web/20240705012536/https://therecord.media/cobalt-strike-law-enforcement-takedown An international coalition of law enforcement agencies have taken action against hundreds of installations of the Cobalt…LINKS.HACKLIBERTY.ORG
6 JulCaught in the Net: Using Infostealer Logs to Unmask CSAM Consumerssubmitted by c0mmando to netsec 1 points | 0 comments https://web.archive.org/web/20240703201209/https://www.recordedfuture.com/caught-in-the-net-using-infostealer-logs-to-unmask-csam-consumers Summary In this proof-of-concept report, Recorded Future’s Identity Intelligence analy…LINKS.HACKLIBERTY.ORG
6 JulPolice allege 'evil twin' in-flight Wi-Fi used to steal infosubmitted by c0mmando to netsec 2 points | 0 comments https://web.archive.org/web/20240705145749/https://www.theregister.com/2024/07/01/australia_evil_twin_wifi_airline_attack/ Australia’s Federal Police (AFP) has charged a man with running a fake Wi-Fi network on at least one co…LINKS.HACKLIBERTY.ORG
6 JulTeamViewer: Hackers copied employee directory data and encrypted passwordssubmitted by c0mmando to netsec 3 points | 0 comments https://web.archive.org/web/20240702182830/https://therecord.media/teamviewer-cyberattack-employee-directory-encrypted-passwords Software company TeamViewer says that a compromised employee account is what enabled hackers to b…LINKS.HACKLIBERTY.ORG
6 JulPasskey Redaction Attacks Subvert GitHub, Microsoft AuthenticationOnline accounts are increasingly protected by passkey technology, but many platforms like banking, e-commerce, social media, and software development can still be compromised using adversary-in-the-middle (AitM) attacks.DARKREADING.COM
6 JulCrimea warns of internet disruptions following DDoS attacks on local telecom operatorssubmitted by c0mmando to netsec 1 points | 0 comments https://web.archive.org/web/20240629151819/https://therecord.media/crimea-internet-disruptions-ddos-telecom Local authorities in Crimea are warning of internet disruptions from distributed denial-of-service (DDoS) attacks targ…LINKS.HACKLIBERTY.ORG
6 JulLatest Ghostscript Vulnerability Haunts Experts as the Next Big Breach EnablerThe vulnerability could be exploited to compromise systems without requiring user interaction, contrary to some severity assessments initially made by Tenable and Red Hat.THEREGISTER.COM
📢 SECURITY ADVISORIES 1[−]
6 JulPoland to probe Russia-linked cyberattack on state news agencysubmitted by c0mmando to netsec 1 points | 0 comments https://web.archive.org/web/20240704162450/https://therecord.media/poland-cyberattack-investigation-state-agency Polish prosecutors are investigating a suspected Russian cyberattack on the country’s state news agency. The like…LINKS.HACKLIBERTY.ORG
🔥 INCIDENT REPORTING 4[−]
6 JulWeekly Update 407Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite It's a long one this week, in part due to the constant flood of new breaches and disclosures I discuss. I regularly have disclosur…TROYHUNT.COM
6 JulCyber Security Today, Week in Review for week ending July 5, 2024This episode features an interview with a cybersecurity and privacy lawyer about responding to cyber attacks Navigating Ransomware Response: Insights from Cybersecurity Expert Imran Ahmad In this episode features an interview between Howard Solomon and Imran Ahmad, a partner at N…CYBERSECURITYTODAY.LIBSYN.COM
6 JulTicketmaster discredits dark web claims of stolen barcodes for Taylor Swift concertssubmitted by c0mmando to netsec 1 points | 0 comments https://web.archive.org/web/20240706003641/https://therecord.media/ticketmaster-discredits-dark-web-claims-taylor-swift Ticketmaster shot down claims made on the dark web that hackers have access to working ticket barcodes for…LINKS.HACKLIBERTY.ORG
6 JulNew Eldorado Ransomware Targets Windows, VMware ESXi VMsEldorado also encrypts network shares using the SMB protocol, deletes shadow volume copies, and skips certain file types to prevent system damage. Affiliates can customize attacks on Windows, while Linux customization is limited.BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 3[−]
6 JulThe Problem With Bug BountiesA Technically Skilled individual who finds a bug faces an ethical decision: report the bug or profit from it. This is nowhere more relevant than in crypto. In this article, with the help of Ilan Abitbol from Resonance Security, I look at the recent debacle between …GBHACKERS.COM
6 Jul[Gamers Nexus] Zotac's Big Mistake | Consumer Warranty & Business Data Exposuresubmitted by recursive_recursion to cybersecurity 4 points | 0 comments https://www.youtube.com/watch?v=UHxQC95syc0 Within the first minute of the vid I’m thinking holy shit Zotac! easily googlable private customer and B2B info is publicly available They’re gonna have one hell of…YOUTUBE.COM
6 JulRussian-Linked Cybercampaigns put a Bull’s-Eye on France. Their Focus? The Olympics and ElectionsBaptiste Robert, a French cybersecurity expert, called on his government – and especially lawmakers – to prepare for the digital threats to come. The post Russian-Linked Cybercampaigns put a Bull’s-Eye on France. Their Focus? The Olympics and Elections appeared first on SecurityW…SECURITYWEEK.COM
📡 INFOSEC NEWS 1[−]
6 JulTraeger Security Bugs Threatening Grillers' Hard WorkTraeger grills face security bugs that could spell trouble for BBQ enthusiasts. High-severity vulnerabilities in the Traeger Grill D2 Wi-Fi Controller could allow remote attackers to control the grill's temperature or shut it down.THEREGISTER.COM