Parse notes
Toyota Financial Services Europe & Africa this week confirmed being targeted in a cyberattack that appears to have been conducted by Medusa. Medusa has a listing on Toyota Financial Services on its Tor-based leak website and is threatening to distribute stolen data unless an $8 million ransom is paid within 10 days.
An EFF researcher's child was given a Dragon Touch Android tablet as a gift. Upon investigation, the researcher discovered the Corejava and Adups malwares as well as the KIDOZ App, which reports extensive data back to kidoz.net. Amazon and Google have begun investigations into the product and Walmart has removed it from its online store.
Threat actors are using manipulated search results and Google ads using Google's Dynamic Search Ads to trick users into downloading malware instead of legitimate software such as WinSCP. The malicious ads redirect users to a compromised WordPress website, which in turn takes them to an attacker-controlled phishing site.
Biometric security has become a crucial layer in personal and enterprise security systems. It utilizes unique biological or behavioral identifiers to authenticate individuals. This article provides an overview of biometric security, including its definition, types, benefits, and applications.
This series aims to demystify AI Security and its intersection with other fields like cyber security and national security. It is designed to be accessible to people from any background. The first post focuses on AI Security basics. There are 8 more posts available and 1 more to be released.
This post from NCCGroup explains how it utilizes typos in HTTP server responses to develop unique fingerprints to identify malicious servers. NCCGroup’s team sampled 800,000 HTTP responses from Censys scan data and applied a spell-checking model to detect any anomalous activity. The researchers concluded that while typos are useful to group and identify anomalous behavior, they aren’t sufficient alone to detect malicious behavior. Typo-detection should be used as part of a larger framework.
EMBA is designed as the central firmware analysis tool for penetration testers and product security teams. It supports the complete security analysis process starting with firmware extraction, doing static analysis and dynamic analysis via emulation, and generating a web report.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple User Interface.
Kubescape is an open source Kubernetes security platform built on top of Open Policy Agent. Kubescape can be used to scan clusters, YAML files, or Helm charts. In the recently released V3.0.0, scanning is extended to images and can be triggered by a Kubernetes operator.
Since August 2023, members of the Huntr bug bounty platform for AI and ML have uncovered over a dozen vulnerabilities exposing AI/ML models to system takeover and sensitive information theft. Some of the tools count with hundreds of thousands or millions of downloads per month, such as H2O-3, MLflow, and Ray. These issues potentially impact the entire AI/ML supply chain.
The Rust programming language employs a number of features that lead to vastly more complex binary analysis as compared to C/C++ code. Checkpoint presents a guided tour of various Rust features and how to reverse engineer the assembly code that the rustc compiler generates in debug mode. The post uses IDA for its disassembler.
Users have found that Nothing Chats, which is a Sunbird-based iMessage app on Android, sends all media attachments to Sentry with links to those attachments in plain text. It also sends and stores unencrypted data in Firebase.
Samsung reported that a third-party application used by the company was breached, exposing the data of customers who used the Samsung UK online store between July 2019 and June 2020.
The Federal Communications Commission (FCC) has introduced new rules to protect consumers from SIM-swapping attacks and port-out fraud.