TLDR INFORMATION SECURITY 2023-10-04

RANSOMWARE GROUP CLAIMS IT’S COMPROMISED ALL OF SONY’S SYSTEMS

MOTEL ONE DISCLOSES RANSOMWARE ATTACK IMPACTING CUSTOMER DATA

MEETING THE FEDRAMP FIPS 140–2 REQUIREMENT ON AWS

EXPLOITING THE IPHONE 4, PART 1

LIGHTING THE EXFILTRATION INFRASTRUCTURE OF A LOCKBIT AFFILIATE

CERBERUS

Cerberus is a static analysis tool that attempts to retrieve Go and Rust symbol names. Cerberus does this by locating which libraries are used, downloading and building them, and then hashing the functions and comparing them to the provided binary.

CERTGRAPH

CertGraph constructs and crawls the graph of a domain’s SSL certificates. It does this by treating each domain as a node and each certificate alternative node as an edge to another domain node. The tool was created for enumeration via SSL certificates.

INTEGRATIONS

AMAZON CLOUDFRONT ANNOUNCES SECURITY RECOMMENDATIONS

THE US IS OPENLY STOCKPILING DIRT ON ALL ITS CITIZENS

MALICIOUS PACKAGES HIDDEN IN NPM

2023 STATE OF API SECURITY REPORT: GLOBAL FINDINGS [PDF DOWNLOAD]

GOOGLE TO BOLSTER PHISHING AND MALWARE DELIVERY DEFENSES IN 2024

REVISITING THE BIG PICTURE: MACRO-LEVEL ATT&CK UPDATES FOR 2023