Parse notes
A data breach at HealthEC impacted 4.5 million customers. The stolen files contained personal information such as names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information. All impacted users have been informed.
Transformative Healthcare is informing more than 900,000 individuals that their personal information was stolen in a data breach at now-defunct subsidiary Fallon Ambulance Service. The files contained names, addresses, Social Security numbers, COVID-19 testing and vaccination information, medical information, and information provided to Fallon in connection with employment. Fallon notified impacted individuals about the breach in December 2023.
The Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies of two recently identified vulnerabilities that have been exploited. The vulnerabilities include a Google Chrome flaw and a bug in the open-source Perl library "Spreadsheet::ParseExcel" for reading information in Excel files. The vulnerabilities expose systems to potential remote code execution and data theft.
A critical Google exploit was discovered in October 2023 that enabled persistent access after password resets. A threat actor reverse-engineered this into Lumma Infostealer, protecting it with blackboxing. The exploit spread rapidly among malware groups. CloudSEK identified its root as an undocumented Google Oauth endpoint "MultiLogin". This report examines the exploit's discovery, evolution, and cybersecurity implications.
NIST updated CVE-2023-50164 for a new path traversal vulnerability in struts-core. It is reminiscent of the 2017 Equifax breach stemming from an unpatched Struts issue. This post discusses the vulnerability, provides a proof-of-concept exploit, and outlines remediation steps.
This blog post describes the steps to setup an enterprise-grade Wifi network with WPA3 Enterprise 192-bit and Radius server for authentication. The post mentions that this is more than anyone needs for a home network, but it's fun to learn how to set up a secure Wifi infrastructure. It walks through creating a Certificate Authority, Radius server, and configuring access points to set up a secure network using WPA3 Enterprise.
Cybersecurity is a critical field in today's digital world. This repository aims to provide a centralized location for a wealth of knowledge and study materials. Whether you're just starting your journey in cybersecurity or an experienced professional, you'll find valuable resources here.
A quick way to make a Ubuntu server a bit more secure by hardening the image/VM when it’s running.
ngrok Collaborator Link is a free Burp Collaborator alternative built on ngrok.
The hacked Mandiant account was initially used to masquerade as one belonging to Phantom, a company that offers a wallet for storing cryptocurrency. Posts on X encouraged people to visit a malicious website to see if their wallet was one of 250,000 that were eligible for an award of tokens. Mandiant has since regained control of the account and is investigating the incident.
Cybernews researchers discovered two BMW subdomains that were vulnerable to a SAP redirect vulnerability. The vulnerability allows attackers to redirect users to a malicious website or inject arbitrary content into a legitimate website. BMW was immediately notified and the vulnerability was fixed.
LastPass has announced that it will begin requiring all users to use 12-digit master password minimums. This has been the default setting since 2018 but could be bypassed until now. LastPass will also compare master passwords against a database of leaked credentials and surface a pop-up in case of a match.
Japanese game developer Ateam accidentally exposed the personal information of nearly one million people due to an insecurely configured Google Drive instance that was accessible to anyone with the link since March 2017.
AWS has published a guide for its security services like GuardDuty and Inspector with detailed information on what to do before enabling a security service and how to tune it afterwards.