Parse notes
Sponsored
You’re probably spending much more time on compliance than you were five years ago…could you be spending less? Customers (5,000+) report saving hundreds of hours in manual work and up to 85% of costs
Grafana released an alert that one of its GPG private keys and passphrases was leaked. In response it has revoked the affected certificate and users will need to update their GPG trust relationships if they utilize package repositories.
Security researchers collaborated to scan the Alexa Top 1 Million Websites for leaked secrets and discovered that 4,500 of the most heavily visited websites in the world publicly exposed their git directory, which often contained the entire private source code for a given website. AWS and GitHub keys accounted for 45% of all leaked credentials and third-party email marketing services accounted for a large percentage of the leaked keys.
Freecycle.org, a platform that allows users to recycle their belongings, has prompted millions of users to reset their passwords after credentials were compromised in a data breach. The breach of data includes usernames, User IDs, email addresses, and passwords.
This is a blog post detailing a method to repurpose Nuclei, a common DAST tool, for threat hunting. The author outlines the steps that they used through other tools and manually to threat hunt and then the high-level process for automating their process with Nuclei. The post also includes an example of hunting for Nimplant.
BLISTER, a malware loader associated with financially-motivated intrusions has been growing over the last two years under the radar. It now integrates techniques to remove any process instrumentation hook. BLISTER has modified its configuration with multiple revisions, now encompassing additional fields and flags. This post dives into the advancements of BLISTER.
This article dives into how you can set up and configure osv-scanner, an open source SCA tool, to identify vulnerabilities in popular open source projects.
Stratus-red-team is a tool for emulating offensive attack techniques in a controlled manner on cloud environments for the purpose of testing detection and response. Attacks are organized by cloud provider and category of attack. Each attack has a comprehensive wiki page with a MITRE ATT&CK mapping, description, and example detections. The recently released v2.9.0 includes new techniques for ransomware simulation.
A collection of plugins that extend Caldera (adversary emulation platform) to the Operational Technology (OT) environment.
Mercator is an Open Source web application to manage the mapping of an information system as described in the Mapping The Information System Guide of the ANSSI.
A comprehensive guide to beginning to research AWS cloud security. The guide suggests ways to gain more foundational knowledge, leaders in the field to follow, and different ways to dive deep. The guide concludes with reporting methods and assorted tips.
IBM's 2023 installment of their annual "Cost of a Breach" report has brought up some interesting trends such as the average cost of a breach rose once again to $4.45 million, increasing 15% over the last three years. It also has an industry-specific focus and breakdown of breaches.
A security researcher who asked to be referred to as only Anthony demonstrated an attack using a Flipper Zero where a small device can be programmed to perform wireless attacks on devices in its range, such as iPhones, as well as car keyfobs, contactless and RFID cards, and more.
Threat actors are using social engineering to convince IT desk personnel to reset multifactor authentication (MFA) for highly privileged Okta enterprise accounts, gaining access to the cloud-based identity access management (IAM) service and moving laterally through targeted networks from there. Okta warns about how common this threat is and how to prevent it.
Several Buffer Overflow vulnerabilities have been discovered in Notepad++ that can be exploited by threat actors for malicious purposes.
A team of researchers from the University of Wisconsin-Madison has uploaded to the Chrome Web Store a proof-of-concept extension that can steal plaintext passwords from a website's source code.