Parse notes
Pharmacy prescription services provider Sav-Rx is notifying around 2.8 million individuals that their personal information was compromised in a cyberattack on October 8, 2023. The compromised information includes names, addresses, dates of birth, email addresses, phone numbers, Social Security numbers, eligibility data, and insurance identification numbers.
The Internet Archive, a nonprofit digital library housing millions of historical documents and websites, has endured an intermittent Distributed Denial-of-Service (DDoS) cyber-attack for three days, limiting access to its vast collections including the Wayback Machine's web archive.
An RCE vulnerability TP-Link Archer C5400X router was recently disclosed after identification by OneKey. The vulnerability is a command injection and buffer overflow in the rftest binary, which is responsible for network self assessments. A patch that implements input sanitization was released to address the vulnerability.
Penetration testing tools are essential for efficient hacking and security assessments. While hacking without tools is possible, it is time-consuming and repetitive. These tools streamline basic scanning and security processes, saving time and effort. This post dives into some of the best penetration testing tools.
The Truffle Security team analyzed 10k JWTs found via Shodan and another 500 committed to public repos in GitHub. They used hashcat to attempt cracking the JWTs and found that 1.2% of symmetric keys used in production were guessable within seconds. This was caused by users implementing weak passwords (including the defaults used in documentation and examples) as their symmetric keys when setting up their authentication systems.
This blog post provides a walkthrough on how to programmatically map the attack surface of an application using GDB and Ghidra. It begins with walking through the strategy for identifying functions after ASLR and then shows how it can be implemented using GDB Python. The post takes this one step further and shows how to write a Ghidra Python script to generate the GDB Python script for each function and ignore artificially generated blocks.
Sponsored
In this webinar, the Guardsquare product team will cover two prominent mobile security approaches [10] (compiler-based vs wrapper solutions).
WTF Snapshot fuzzing of macOS targets, enabling users to perform precisely targeted fuzz testing of hard-to-pinpoint chunks of the macOS kernel.
Arcjet JS SDKs. Rate limiting, bot protection, email verification, and attack defense for Node.js, Next.js, Bun, and SvelteKit.
Sudo for Windows is a windows-specific implementation of the Sudo concept to escalate privilege from Linux/Unix. This means that certain elements of the traditional sudo experience are not present in Sudo for Windows and vice versa. Scripts and documentation that are written for sudo may not be able to be used directly with Sudo for Windows without some modification.
OpenAI has formed an internal Safety and Security Committee headed by CEO Sam Altman and composed of company insiders. Its goal is to oversee critical security decisions related to OpenAI's AI projects over the next 90 days, raising concerns among ethicists about the lack of independent oversight.
For more than 4 days, the Cogent root name server fell out of sync with all 12 of its peers. Cogent has fixed the issue but has refused to comment on the cause of the disparity. This could have led to DNS Cache poisoning issues or issues in DNSSEC.
IBM reported that its X-Force red team was able to compromise a network that they had allocated 3 weeks for in just 8 hours with the help of AI red teaming tools. The team found a vulnerability in the company's HR portal with the aid of the tooling and then installed a rootkit after exploiting the vulnerability and eventually pivoted through the network. IBM believes that these AI tools can be essential in analyzing the large volume of data accumulated in a red team assessment.
BreachForums is back not long after it was seized by law enforcement, bringing back ransomware leaks.
Auction house Christie disclosed a data breach following a RansomHub cyber attack that occurred this month.
The U.S. Treasury sanctioned three Chinese nationals for running the 911 S5 proxy botnet, a service that allowed routing web traffic through malware-infected computers globally.