Parse notes
Sponsored
The internet is running out of IP addresses on the IPv4 protocol, which is why IPv6 is seeing rapid adoption [4]. This change in protocol can impact many cybersecurity tools and programs that rely on IP addresses (such as for known malicious actors).
Following a 2016 attack, a database containing information of nearly 2M DOTA 2 developer forum users was leaked. The database contains usernames, passwords, email addresses, user identifiers, and IP addresses. The passwords were salted and hashed using MD5. Over 80% of the passwords have been cracked.
A data breach last year in Eindhoven exposed the personal information of 221,511 residents, including their citizen service numbers (BSNs). The breach was not disclosed to affected individuals as the municipality deemed the risk of identity theft unlikely and claimed the leak was internal and not accessible to outsiders. The Dutch data protection authority has since placed Eindhoven under stricter supervision due to numerous other breaches.
A Merrill employee accidentally exposed the personal data of almost 2,000 Walmart pension plan members through an email error. The exposed information included names and Social Security numbers. The incident led to the offer of identity theft protection services for those affected.
MITRE reveals through a series of blog posts how the cyber attack on its organization in late 2023 involved exploiting Ivanti zero-days to create rogue virtual machines within MITRE's VMware environment.
This post covers the significance of access control in Node.js Express applications, the consequences of compromised access control, and strategies to prevent access control vulnerabilities that can lead to disastrous private data leaks.
A blog post that walks through the process of creating custom Semgrep rules to address two common issues in Ruby. The first is an in-depth look at a common footgun that's present in the sanitize_sql function and now to build a rule to detect it. The second is an in-depth look at common issues when utilizing Pundit and building rules for them.
EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files. It can run in automated mode to scan a given IP space and perform a set of deletions or manual mode for more targeted deletion.
Averlon enables customers to easily enroll their cloud environments and get an overview of their security risks across all cloud assets, including network access, policies, and software connectivity.
Multilingual library made for validation, various form fields, such as email, telephone, password, CPF, CNPJ, credit card, magic numbers for image mimetype validation, and much more.
ZAP has introduced a new add-on for testing gRPC. The tool allows for easy encoding, editing, and decoding of Protobuf messages. This blog post includes installation instructions and a feature tutorial.
NCC Group has released the Cranim toolkit that helps create visualizations for cryptography using a math visualization library called Manim. It provides easy-to-use tools for animating cryptographic concepts and code snippets efficiently. The toolkit is designed to be accessible and user-friendly for computer science educators and enthusiasts.
A massive data leak in India exposed the biometric information of millions during elections. The leaked database contained fingerprints and facial scans of police, military personnel, and civilians. The incident raises concerns about identity theft and election security and highlights the need for stronger data security practices and regulations to protect citizens' privacy.
This report dives into the top threats of the first three months of the year.
CISOs are increasingly worried about cyber attacks, with 70% fearing their organization is at risk with Ransomware as the top threat.
Google released an emergency update to fix the eighth actively exploited vulnerability in Chrome, tracked as CVE-2024-5274.