Parse notes
Hackers are using a massive network of fake and compromised Facebook accounts to send out millions of Messenger phishing messages to target Facebook business accounts with password-stealing malware, ultimately compromising one out of every seventy accounts targeted.
Wyze alleges that a “web caching issue” led to a period of 30 minutes where owners of Wyze cameras logged into the web portal were able to view other users’ cameras. The site was quickly put into maintenance mode to fix the issue.
Hackers stole $41 million worth of cryptocurrencies from Stake.com, an online casino and sports betting site. The FBI has attributed the attack to North Korea's Lazarus Group. The Lazarus Group is known for high-profile hacks worth over $1 billion. It is responsible for stealing over $200 million in crypto this year alone.
The Amazon Search team needed to build systems that could withstand Prime Day levels of traffic at 84k requests/second. It heavily utilized Chaos Engineering to test fault tolerance to ensure system stability. This post discusses the Chaos Engineering Orchestrator the team built as well as general Chaos Engineering methodology.
This article explores the multifaceted landscape of safeguarding data, identities, networks, and services in cloud environments. The key security considerations discussed include data vulnerability, identity and access management, vulnerability management, and cloud service provider evaluation. The article also talks about employee training and awareness, continuous monitoring, and incident response.
Large language models present security and privacy risks that must be addressed when implementing them in an organization. This guide explores the top risks and strategies to mitigate them. Top risks include supply chain vulnerabilities and overreliance on LLM-generated content. Mitigation strategies include implementing strict input validation, data sanitization procedures, and rigorous data validation and cleaning processes.
A collection of tools, tutorials, and other resources for the Flipper Zero hacking tool.
A yara ruleset from Sentinel Labs to detect potentially malicious code in macOS samples.
AttackGen uses a Large Language Model via LangSmith and the comprehensive MITRE ATT&CK framework to generate tailored incident response scenarios based on user-selected threat actor groups and organization details.
An article bringing awareness to the mental health challenges that cyber professionals face. The article includes statistics and testaments that discuss the elevated levels of stress that many employees face and includes some ways that organizations are seeking to combat it.
HijackLoader is a modular malware loader known for its evasion techniques and flexibility in loading malicious payloads. While it doesn’t possess any advanced features, it uses various tactics, such as syscall evasion and delayed code execution, to avoid detection by security solutions.
New research by Sonatype shows that 97% of surveyed developers and application security leaders are using generative AI in software development. 74% of respondents feel pressured to use AI, despite the security risks associated with the technology.
Spurred on by the Russia-Ukraine war, hacktivism is making a comeback. This article analyzes the current state and likely future of hacktivist activity.
For over three years, the download site freedownloadmanager[.]org surreptitiously distributed malware to Linux users by occasionally redirecting them to a malicious domain.
Hotel and casino giant MGM Resorts has confirmed a “cybersecurity issue” is to blame for an ongoing outage affecting systems at the company’s Las Vegas properties.