cyber.hendryadrian.com
YouTube · Simply Cyber - Gerald Auger, PhD

Cyber Briefing Covers Active Gateway Exploits, Meta Repository Access and Wallet Tampering

· 1:31:48 · Watch on YouTube ↗

Summary

The briefing covers active exploits affecting Cisco, Ivanti and Palo Alto products, stolen credentials used to access Meta repositories, tampered Ledger wallets and AI-assisted Chrome vulnerability research.

Key points

  • Cisco says attackers are exploiting a secure email gateway flaw through crafted attachments. Administrators should verify scanner updates and preserve evidence before rebuilding compromised virtual appliances.
  • CISA urged updates for Ivanti Connect secure after an authentication bypass was reported under active exploitation.
  • Palo Alto reported limited exploitation of a PAN-OS flaw targeting firewall management interfaces. The host recommends updating and restricting management access.
  • Meta is notifying roughly 1,500 people after attackers used an employee's stolen credentials to access GitHub repositories. Meta says it revoked access and rotated repository secrets.
  • Ledger asked Southeast Asian and Hong Kong resellers to halt wallet sales while it investigates implants that capture recovery phrases and transmit them over LTE.
  • Expo researchers used an AI model to help chain three Chrome vulnerabilities into a Windows sandbox escape. Google patched the flaws, according to the briefing.
  • The FBI searched 40 Texas homes and seized about 187 laptops linked to North Korean remote IT workers, while a separate indictment alleges a scheme affecting more than 70 US companies.

Article Details

Topics
  • [12:11] North Korean remote IT worker laptop farms
  • [18:43] Stolen credentials and Meta repository access
  • [23:12] Active exploitation of Cisco email gateways
  • [29:03] Ledger hardware wallet implants and reseller sales halt
  • [39:00] Ivanti authentication bypass and VPN updates
  • [41:15] Microsoft patch prioritization and Windows VPN repair
  • [47:53] AI-assisted Chrome sandbox escape research
  • [54:15] Actively exploited Palo Alto firewall management flaw
  • [01:10:53] Data privacy career and personal privacy resources

Vendors

Cisco[23:15] Cisco reported active exploitation of a secure email gateway flaw and issued a content scanner update.Google[48:17] Google patched three Chrome flaws chained by researchers and paid a $250,000 bounty, according to the briefing.MicrosoftMicrosoft issued security updates, including a fix for an actively exploited Windows Shell security feature bypass.

Products

GitHub[18:43] Attackers accessed Meta repositories on GitHub using an employee's stolen credentials, according to the briefing.Google ChromeResearchers chained three Chrome flaws to run code outside the browser sandbox on Windows; the briefing says Google patched them.Microsoft Windows[41:36] The briefing reports an actively exploited Windows Shell security feature bypass in Microsoft's October patch release.Windows 11[51:10] October cumulative updates fixed Always On VPN connection failures caused by earlier security updates on version 24H2 and later.

Related Articles