Hi friends,
It's a very busy week for me so today will be a minimal issue. I collect the articles I find most interesting as usual, but without the summaries. Have a good weekend everyone!
Cheers,
StackRot privilege escalation. Estimated 200 orgs impacted by MOVEit. Minimal issue.
Supported by 1Password and GlitchSecure.
News
Breaches and leaks
- Shell becomes latest MOVEit victim: link.
- MOVEit vulnerability snags almost 200 victims, more expected: link.
- JumpCloud invalidates API keys to protect customers: link.
- Japan’s largest port stops operations after ransomware attack: link.
- Nickelodeon investigates data breach: link.
- Hacking crew claims cyberattack hitting global satellite systems: link.
New StackRot Linux kernel flaw allows privilege escalationbleepingcomputer.com
300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bugbleepingcomputer.com
Three critical RCE bugs threaten industrial solar panelsdarkreading.com
New proxyjacking attacks monetize hacked SSH servers’ bandwidthbleepingcomputer.com
Real-time and continuous security testingglitchsecure.com
If you feel like doing a quick pentest every few quarters isn't enough, you are correct. Take a look at the combination of continuous vulnerability assessments and real-time pentesting that GlitchSecure offers. Every finding is verified by highly skilled (and wonderful) humans. Check them out. (Sponsored)
New Python tool checks NPM packages for manifest confusion issuesbleepingcomputer.com
Israel aided UAE in defending against DDoS attackdarkreading.com
New technique can defeat voice authentication "after only six tries"malwarebytes.com
Rethinking democracy for the age of AI (by Bruce Schneier)cyberscoop.com
Push, pull, and sign your Git commits with SSH keys in 1Password1password.com
You probably use SSH to push code to GitHub, access servers, and more. So why is it such a pain to set up new keys? Well, fret no longer. You can now easily generate, store, and use SSH Keys directly from 1Password 8 and the built-in SSH agent. Securely sync your keys across devices, authenticate SSH workflows, and even sign code commits. (Sponsored)