As originally reported by ZDNet, French cyber-security firm Stormshield announced that a threat actor gained access to one of its customer support portals. Stormshield provides security services and devices to the French government, and has resellers for its network security and endpoint security products throughout Europe, parts of Africa and Southeast Asia. In addition to stealing some client personal and technical support data, the threat actors also managed to steal source code for the Stormshield Network Security Firewall. Stormshield, working with the ANSSI (Agence Nationale de la Sécurité des Systèmes d’Information) has stated that they found no modifications of their source code. Additionally, they’ve replaced the digital certificates used to sign the SNS software updates.
Using Microsoft Sentinel to Detect Confluence CVE-2022-26134 Exploitation
By Akshay Rohatgi and Randy Pargman About this Student Research Project Binary Defense’s mission is