InfoSecBulletin Cybersecurity for mankind

MITRE released ATT&CK v20 adding nine Enterprise techniques that explain how attackers might target AI systems, steal app-specific passwords to bypass multi-factor authentication (MFA), and avoid CAPTCHA checks. The update also covers industrial control systems (ICS) and mobile devices better, and it includes detection tips for some of the new …

Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a sophisticated cyberattack targeting Fortinet network management infrastructure, involving the deployment of a stealthy malware implant known as PEERSTITCH. According to the investigation, attackers exploited CVE-2024-47575 in FortiManager to steal configuration files, credentials, cryptographic material, and network information associated with …

Meta is informing about 1,500 people—mainly employers in the US, that their personal data was affected after hackers broke into some GitHub accounts of the company. The break-in was spotted a few weeks back. The tech company said that an outside group got into the data using an employee’s stolen …