Security Bulletin

Over $74 million worth of cryptocurrency has been exfiltrated from separate cryptocurrency heists against blockchain-based game Munchables and widely known decentralized finance platform Prisma Finance last week, according to The Record, a news site...

More than 100,000 individuals were noted by the Cybersecurity and Infrastructure Security Agency to possibly have been affected by a cyberattack against its Chemical Security Assessment Tool involving the exploitation of security vulnerabilities in...

Threat actors have been leveraging malicious ads and websites to facilitate ongoing information-stealing malware attacks against macOS devices, The Hacker News reports.

BleepingComputer reports that more advanced features and increased stealth have been added to the updated Vultur Android banking trojan, which is being distributed via hybrid attacks.

Some Linux distributions could have user passwords exposed and clipboards taken over in attacks exploiting an improper escape sequence neutralization vulnerability impacting the util-linux package's "wall" command, tracked as CVE-2024-28085, reports...

For the last few days, the backdoor in xz-utils[ 1] has been among the main topics of conversation in the global cyber security community.

SIEMs from 10 and 20 years ago weren’t built to handle all the data generated today – that’s why the industry needs a new crop of SIEMs.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Like Xavier (diary entry " Quick Forensics Analysis of Apache logs"), I too often have to analyze client's log files.

Wireshark release 4.2.4 fixes 1 vulnerability (%%cve:2024-2955%%) and 10 bugs.