Parse notes
Sponsored
Workflow automation allows teams to automate and streamline processes like phishing attack response, suspicious login alerts, EDR, vulnerability management, and even employee onboarding. And with AI [4], teams can work faster than ever before.
CDK Global, a retail technology provider serving over 15,000 North American locations, is working to restore systems after a cyberattack. Hackers have reportedly demanded a multi-million dollar ransom.
A hacker is selling alleged customer data from Australia's TEG. They claim to have information on 30 million users including names, birthdates, and email addresses. This follows TEG-owned Ticketek's May disclosure of a data breach. While passwords were encrypted, other personal data may have been compromised.
Santander's US subsidiary is notifying over 12,000 employees of a data breach involving a third-party database. Hackers obtained employee names, Social Security numbers, and bank account information.
Binary Ninja uses a control graph resolution algorithm to undo compiler optimizations by collapsing conditions to generate code that is more akin to what a programmer would write. Conditional complexity explosion leads to unwieldy conditional expressions in decompiled code, which could lead to the Binary Ninja decompiler in version 4.0 and prior crashing, falling back to adding gotos, or generating unsound or inaccurate code. Binary Ninja added a new set of algorithms to transform the control graph structure to optimize control flow recovery that achieved 100% accuracy in its test suite.
Okta FastPass is a cryptographic MFA that facilitates passwordless authentication by creating a device-bound Proof of Possession factor upon device enrollment. OktaTerrify is a tool that can be used in conjunction with OktaInk in a workflow described in the article to bypass Okta FastPass and backdoor an Okta account on a compromised host. The article also provides examples of detecting this workflow in the Okta audit log.
A blog post from AWS Security on creating a pipeline for hardening EKS nodes. The pipeline uses EC2 Image Builder to apply the CIS benchmarks for Amazon Linux to build a custom image, then uses a State Machine to update the EKS nodes, and finally creates a Lambda function to send a weekly reminder to update if a new base image is available. A CloudFormation template is included in the post.
Agentic Security is an open-source vulnerability scanner for testing the resilience and reliability of LLMs
RedFlag is a tool that leverages AI to detect high-risk code changes. The scanning is highly configurable and can be used to scope scanning to specific changes or releases.
Xona is a platform designed to provide secure access to critical systems in operational technology (OT) environments.
Amidst increasing scrutiny on the ways that social media affects mental health, NY Governor Kathy Hochul has signed a bill to regulate how social media algorithms treat users under the age of 18. Under the SAFE For Kids Act, social media platforms will be required to display content chronologically and limit late night notifications for users under the age of 18. The New York Child Data Protection Act will restrict websites from collecting and sharing data without consent for users under the age of 18.
The US government has sanctioned twelve Kaspersky Lab executives due to national security concerns. The ban on selling Kaspersky antivirus software will start on July 20, impacting US customers' software updates. The US Department of Commerce added Kaspersky entities to the Entity List for their alleged cooperation with Russian military and intelligence authorities.
This article discusses a Phishing-as-a-Service called ONNX that threat actors are using to orchestrate phishing attacks through embedded QR codes in PDF attachments. NNX Store is suspected to be a rebranded version of the Caffeine phishing kit that offers services like 2FA bypass mechanisms and Cloudflare protection. The platform facilitates the distribution of phishing tools and aids cybercriminals in stealing credentials for financial gain and potential ransomware attacks.
Five men were convicted for operating the illegal streaming site Jetflicks, which offered pirated movies and TV episodes.
An analysis of Apple's Private Cloud Compute solution determined that while various best practices for security are followed, there are still questions around the ML tradeoffs.
This DFIR report is on how threat actors discover file shares and how canaries can be used as a defense strategy.