Parse notes
Omni Hotels has confirmed that cybercriminals stole customers' personal information, including names, email addresses, postal addresses, and guest loyalty program data. The ransomware gang Daixin claimed responsibility and threatened to leak customer records dating back to 2017 on its dark website, a common extortion tactic.
Cisco has disclosed a high-severity vulnerability in the Integrated Management Controller that affects various devices. A patch has been provided by Cisco to address the root escalation vulnerability. Exploit code has been released publicly, but there have been no known exploitations of the issue reported yet.
In this two-part series of blog posts, Google Project Zero details how it audited the Windows Registry for bugs over a 20-month period, resulting in 50 CVEs filed and fixed by Microsoft. The research led to the discovery of various memory corruption vulnerabilities with different exploitability levels. Upcoming blog posts will delve into practical exploitation techniques using registry vulnerabilities.
This post explores using Nuclei to find vulnerabilities in web applications. It sets up two scenarios: one involving an SSRF in an application hosted on Azure and the other a vulnerable TeamCity environment. The post goes through the process of setting up the scenarios, creating nuclei templates, and testing them.
Miggo's ADR (Application, Detection, and Response) is designed to do for applications what EDR does for endpoints. The ADR shows how people are using the application. It establishes baseline standards of behavior between different services, data flows, and authentication mechanisms, allowing it to identify and prevent subsequent malicious activities – in real time.
DNSViz is a tool suite for the analysis and visualization of DNS behavior including DNSSEC.
In a new paper, researchers from the University of Illinois Urbana-Champaign claim that AI agents combining large language models like OpenAI's GPT-4 with automation software can successfully exploit real-world security vulnerabilities by reading security advisories. They tested GPT-4 on 15 one-day vulnerabilities and it could exploit 87% of them, outperforming other models and open-source scanners.
Cloudflare has released its DDoS Threat Report for Q1 2024. The quarter featured a 50% increase in DDoS attacks from a year ago with more than half being DNS-based DDoS attacks. The most targeted industries were gambling and gaming.
The UK has announced that it will criminalize the creation and sharing of sexually explicit deepfake images.
Russian Sandworm hackers, linked to Russian military intelligence, posed as hacktivists in water utility breaches, using multiple online personas to hide their attacks.
CISA, FBI, and ODNI released a guidance document on securing election infrastructure from foreign influence tactics.