Parse notes
Sponsored
The fall report by G2 ranked the top vendors in the MFT space, placing MOVEit at the top and above established MFT vendors [5]. Grab a (free) copy of the G2 Grid infographic [5] to learn about key customer challenges and the leading vendors in the MFT industry.
Fortune 500 insurance giant Fidelity National Financial disclosed a cyberattack that shut down systems and disrupted title insurance and mortgage transaction services. The intruder accessed systems and acquired credentials. The financial and operational impact of the attack is still under investigation.
The National Cyber Security Centre (NCSC) and Korea’s National Intelligence Service (NIS) issued a joint warning that North Korea-linked Lazarus hacking group is exploiting a zero-day vulnerability in the MagicLine4NX certificate management and signing software to carry out supply-chain attacks.
Researchers at Akamai's Security Intelligence Response Team (SIRT) discovered that threat actors are using zero-day vulnerabilities in certain routers and network video recorder devices to build a Mirai-based distributed denial-of-service (DDoS) botnet called InfectedSlurs. The vulnerabilities can be exploited if the device manufacturer's default admin credentials have not been changed. Patches are expected next month.
What is the process of writing an exploit and getting it published as a metasploit module? This post outlines the process for transforming an authenticated Remote Code Execution (RCE) vulnerability in PRTG into a Metasploit exploit. It focuses on the development of the exploit itself rather than the steps for exploiting the RCE.
A post from Pulse Security that examines ways that a compromised pipeline running on a GitLab shared runner can be used to escape from its isolation, compromise the shared runner, and then compromise any other jobs on that runner. The post specifically focuses on the docker-in-docker executor on GitLab, but many of the techniques described can be generalized.
Burp Collaborator is a paid feature in Burp Suite that can be used as a listener domain for attacks like exfiltrating data via XSS. This post provides a tutorial on how to create a free version of Burp Collaborator using Cloudflare Workers to run on the edge and Discord to receive the messages. The worker code is provided.
Athena OS is an Arch Linux-based distro focused on Cybersecurity. Learn, practice, and enjoy with any hacking tool.
InQL is a robust open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
AWS Kill Switch is a Lambda function that can be used to delete a compromised IAM role or apply a heavily restrictive Service Control Policy to a compromised AWS account.
Aqua researchers found exposed Kubernetes secrets in public repos for hundreds of orgs/projects, including SAP & blockchain firms, posing severe supply chain attack potential. Secrets enable access to sensitive SDLC environments. This blog examines inherent Kubernetes secrets management risks, cases of critical data now exposed, and potential downstream impact enabling attacks.
Researchers tested Windows Hello fingerprint sensors on Dell, Lenovo, and Surface laptops - all with Match-on-Chip. They achieved auth bypass on all of the laptops using software/hardware sensor attacks requiring physical access. This post is an interesting read into how the researchers thought of possible ways to attack and ended up managing to get through the laptops.
This post presents a method to obtain the full ARN of an AWS IAM user or role from the AWS Unique ID. The method involves adding the Unique ID as a principal in an S3 bucket policy. If the IAM user or role still exists, AWS will provide the full ARN in the policy after saving it.
Hack The Box announced its 5th annual University CTF amidst a 4M cyber talent shortage, aiming to equip students with the latest skills and a $68K prize pool.
A collection of Black Friday deals on InfoSec-related products and services.
This is a collection of public breach reports along with Tactics, Techniques, and Procedures (TTPs) of threat actors