Parse notes
Roku has disclosed a breach in which hackers accessed 15,363 customer accounts and associated credit card data through credential-stuffing attacks. The hackers changed some account logins, enabling unauthorized streaming subscription purchases. Accounts are being sold online.
QNAP released an advisory about its NAS software products. Three vulnerabilities have been discovered, one of which allows unauthenticated users to compromise systems. QNAP is urging users to update ASAP.
Stanford University has announced that the personal information of 27,000 people was stolen in a ransomware attack in September that targeted its Department of Public Safety network. The attackers did not gain access to other systems. The Akira ransomware group claimed responsibility for the attack in October and has since published the stolen data on its dark web leak site.
Compliance standards like the new PCI DSS 4.0 increasingly align with security best practices, making them more relevant for security teams. With its transition period ending in March, PCI DSS 4.0 provides an opportunity to examine how the updated requirements impact security professionals' priorities within governance, risk, and compliance efforts.
A novel attack method on AWS allows attackers to create a large amount of RANGE requests for parts of large (>1GB) files before quickly canceling the request. This bills owners for the full request, which can result in a 50x cost amplification. This post discusses defenses against this attack and why current remedies fail.
A comparison of the available EKS optimized base OSes for security and scalability. Amazon Linux 2023 provides consistent improvements over Amazon Linux 2, but Bottlerocket, which was designed specifically for container orchestration, trumps both. Bottlerocket provides strong security defaults while providing a minimal host OS as it strips out traditional tools like shells and interpreters that are not necessary for container orchestration.
Sponsored
Software is drowning in security debt. Research by Veracode [10] has found that 70.8% of organizations have security debt and nearly 50% have critical debt. The problem starts when your security testing doesn’t match the velocity of your release schedule. What can you do about it? Run security tests faster and earlier [11] with Veracode Dynamic Analysis (DAST). It’s free for 14 days [11] (no credit card required!)
CloudGrappler is a tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure.
A CLI tool (and library) for identifying hash types.
Nemesis is a data enrichment pipeline and operator support system for offensive security. It automates a number of repetitive tasks operators encounter on engagements.
President Biden's proposed $7.3 trillion budget seeks to boost cybersecurity funding. It includes $3 billion in funding for the CISA. The budget also allocates $13 billion for improved cyber defenses across government agencies.
Magnet Goblin is a financially motivated threat group that rapidly exploits 1-day vulnerabilities in internet-facing services. They use an Ivanti VPN exploit discovered within a day of its release. Their arsenal includes NerbianRAT, WARPWIRE, MiniNerbian backdoors, and remote management tools. They have targeted Ivanti, Magento, Qlik Sense, and possibly Apache ActiveMQ in recent campaigns.
AWS has launched a new set of dashboards that provide near-real-time visualizations of Cloudwatch logs generated by AWS WAF. The dashboards visualize key WAF metrics such as bot detection, CAPTCHA solve rates, and the top 10 matched rules for each web ACL. The dashboards are enabled by default at no additional charge.
Google paid out $10 million through its bug bounty programs in 2023. It has paid out $59 million since 2010.
Indoor security cameras will be banned inside all Airbnb listings to protect customer privacy. Stricter regulations on outdoor cameras and noise decibel monitoring devices were also announced.
Kali Nethunter now supports performing bad bluetooth HID attacks.