Parse notes
SurveyLama, a survey rewards platform, has disclosed a data breach impacting over 4.4 million users' personal information, including email addresses, names, addresses, phone numbers, dates of birth, IP addresses, and hashed passwords. The incident occurred in February but came to light recently through its addition to the Have I Been Pwned breach notification service.
The City of Hope, a cancer treatment and research organization, has reported a massive data breach affecting 827,149 individuals, with their sensitive personal information including names, Social Security numbers, and medical records being leaked.
Google has released an update for Pixel phones that fixes vulnerabilities discovered being actively exploited by forensics firms. The first vulnerability is in the fast boot firmware and allows memory to be dumped from locked phones. Google’s fix involves zeroing the memory when booting fast boot mode. The second vulnerability allows local attackers to circumvent factory resets initiated by apps.
Despite being consistently ranked as the most critically dangerous software flaw for over a decade by OWASP, injection vulnerabilities continue to persist as a significant security threat. This post navigates how to prevent an SQL injection and prepare for a possible attack.
This post breaks down the use cases associated with LLM Security. Chatbot concerns are essentially just DLP concerns. Input and output filtering is relevant with custom apps if you’re relying on non-public data or an LLM cache.
An in-depth guide covering the different options for storing secrets in Lambda. The guide compares the performance, cost, and auditability of Environment Variables, Parameter Store, Secrets Manager, and KMS. It concludes with some example situations and strategies.
Sponsored
Can AI deliver on its promise to automate repetitive busy work? In this short webinar, you’ll learn to how to use Trustero’s Compliance AI Copilot [9] to simplify your compliance program. See how AI guides and helps manage assessments, maps evidence, and answers auditor questions — and the impact on your speed, cost, and effort.
StealthMole is a deep and dark web threat intelligence company that delivers a cloud-based, unified platform for digital investigation, risk assessment, and threat monitoring. Using AI, it provides tools and threat intelligence for identifying and eliminating digital risk and criminal activity.
SecuSphere is a DevSecOps platform designed to streamline and enhance organizations’ security posture throughout the software development life cycle as a centralized hub for vulnerability management, security assessments, CI/CD pipeline integration, and fostering DevSecOps practices and culture.
Cargo added a new subcommand called vet which matches all dependencies against a set of audits performed by the project authors or trusted entities.
Leicester City Council has acknowledged that the recent "cyber incident" it experienced on March 7 was a ransomware attack and data was stolen. The cybercriminal gang INC Ransom leaked 3TB of stolen data, including residents' personal information like passports, bank statements, and official council forms.
Ross Anderson was a respected cryptographer and security engineer. He passed away this week. Anderson was known for his brilliant insights and contributions to cybersecurity and academic freedom. His work, including the book Security Engineering, has been influential in the field.
Poland is investigating its previous government's use of spyware called Pegasus.
The US State Department is investigating a cyber incident involving leaked government data that includes personal details of government, military, and Pentagon employees.
On September 2023, Europol was notified that highly sensitive files of top Europol officials were missing due to a serious security breach at its headquarters in The Hague.