Found 4945 bookmarks
Custom sorting
TCG TPM2.0 implementations vulnerable to memory corruption
TCG TPM2.0 implementations vulnerable to memory corruption
Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module (TPM) 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access to a TPM-command interface can send maliciously-crafted commands to the module and trigger these vulnerabilities. This allows either read-only access to sensitive data or overwriting of normally protected data that is only available to the TPM (e.g., cryptographic keys).
#cert.org#2023#EN#TPM#TPM2.0#TCG#memory#buffer#Buffer-Overflow
·kb.cert.org·
TCG TPM2.0 implementations vulnerable to memory corruption
Hackers Claim They Breached T-Mobile More Than 100 Times in 2022
Hackers Claim They Breached T-Mobile More Than 100 Times in 2022
Three different cybercriminal groups claimed access to internal networks at communications giant T-Mobile in more than 100 separate incidents throughout 2022, new data suggests. In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device.
#krebsonsecurity#EN#2023#T-Mobile#Hackers#Claim
·krebsonsecurity.com·
Hackers Claim They Breached T-Mobile More Than 100 Times in 2022
The Cyber Defense Assistance Imperative – Lessons from Ukraine
The Cyber Defense Assistance Imperative – Lessons from Ukraine
Russia’s further invasion of Ukraine in February 2022 was a watershed moment, and unique in that a major nation-state had engaged in coordinated, convergent digital and physical attacks in an effort to conquer a neighboring country. Leaders will draw lessons from this conflict for years, but one is already clear: the ability to deliver cyber defense assistance must be a key national security capability.
#aspeninstitute#EN#2023#Ukraine#russia-ukraine-war#CyberDefense#assistance
·aspeninstitute.org·
The Cyber Defense Assistance Imperative – Lessons from Ukraine
TA569: SocGholish and Beyond
TA569: SocGholish and Beyond
  • TA569 leverages many types of injections, traffic distribution systems (TDS), and payloads including, but not limited to, SocGholish. * In addition to serving as an initial access broker, these additional injects imply TA569 may be running a pay-per-install (PPI) service * TA569 may remove injections from compromised websites only to later re-add them to the same websites. * There are multiple opportunities for defense against TA569: educating users about the activity, using Proofpoint’s Emerging Threats ruleset to block the payload domains, and blocking .js files from executing in anything but a text editor.
#proofpoint#EN#2023#SocGholish#threat-insight#TA569#analysis
·proofpoint.com·
TA569: SocGholish and Beyond
OneNote Embedded file abuse
OneNote Embedded file abuse
In recent weeks OneNote has gotten a lot of media attention as threat actors are abusing the embedded files feature in OneNote in their phishing campaigns. I first observed this OneNote abuse in the media via Didier’s post. This was later also mentioned in Xavier’s ISC diary and on the podcast. Later, in the beginning of February, the hacker news covered this as well.
#nviso#EN#2023#OneNote#abuse#technical#report
·blog.nviso.eu·
OneNote Embedded file abuse
Activision's Data Breach Contains Employee Information, Call of Duty and More, Report
Activision's Data Breach Contains Employee Information, Call of Duty and More, Report
Insider Gaming has been able to obtain the entirety of the gaming giant Activision’s data breach initially reported by vx-underground and confirmed the data contains plans for Modern Warfare 2’s upcoming DLCs, Call of Duty 2023 (Codenamed Jupiter) and Call of Duty 2024 (Codenamed Cerberus), as well as sensitive employee information.
#metacurity#EN#2023#Activision#breach#DataBreach#Report
·metacurity.substack.com·
Activision's Data Breach Contains Employee Information, Call of Duty and More, Report
Cyber Attacks on Data Center Organizations
Cyber Attacks on Data Center Organizations
Resecurity notified several data center organizations about malicious cyber activity targeting them and their customers. The initial early-warning threat notification about this activity was sent around September 2021 with further updates during 2022 and January, 2023. Recent cyber-attacks on cloud service providers (CSPs) and managed services providers (MSPs) saw bad actors attempt to leverage a weakness in their cybersecurity supply chain with the goal of stealing sensitive data from their target enterprises and government organizations. Data centers are meaningful targets for attackers and an important element of the enterprise supply chain.
#resecurity#2023#EN#datacenters#attacks#leak#breached
·resecurity.com·
Cyber Attacks on Data Center Organizations