Parse notes
Evolve Bank & Trust reported a cyberattack affecting at least 7.6 million customers' personal data. The breach, resulting from a February ransomware attack by the LockBit gang, compromised names, Social Security numbers, bank account details, and contact information.
Fujitsu Japan has confirmed a cyberattack affecting 49 internal business PCs. First detected on March 15, the sophisticated malware evaded detection and stole sensitive customer and business data. The attack was limited to Fujitsu's internal Japanese network and didn't spread to customer environments. Affected individuals have been notified.
2.3 million individuals were affected by a breach of Advance Auto Parts' Snowflake instance. The stolen data includes names, birthdates, social security numbers, and ID information.
Governments are rushing to regulate AI despite a limited understanding of its potential and risks. This article dives into the possible ways AI can be regulated without the regulation being too restrictive or too loose.
This blog post discusses security issues found in the Ask Astro open-source chatbot application, focusing on potential chatbot output poisoning, inaccurate document ingestion, and denial of service risks. An audit identified architectural and implementation flaws in Ask Astro, including data poisoning through source material deletion and split-view poisoning through GitHub issues. Recommendations include implementing proper audit and moderation tools to mitigate data poisoning risks and ensuring content updates propagate accurately to the vector database.
The JFrog Security Research team found a leaked access token with administrator access to important Python repositories, preventing a potential supply chain attack. The leaked secret was identified in a Docker container, highlighting the importance of scanning for secrets in both source code and binary files. PyPI's quick response to revoke the leaked token (within 17 minutes) highlights the importance of acting swiftly when leaks are discovered.
Cytactic consolidates crisis readiness, response, and recovery tailored to versatile business profiles and risk landscapes.
OXO is a security scanning framework built for modularity, scalability, and simplicity.
k8s-sniff-https is a simple mitmproxy blueprint that intercepts HTTPS traffic from apps running on Kubernetes clusters. It is useful for reverse engineering API calls or debugging/troubleshooting apps that perform HTTPS calls to remote SaaS backends.
A new threat actor named "Crystalray" is using open-source software tools to scale its credential stealing and cryptomining operations. First spotted in February, Crystalray has now affected over 1,800 IP addresses globally. Its attack chain includes tools like ASN for reconnaissance, zmap for port scanning, and httpx for domain verification.
Signal is finally fixing a security flaw in its desktop client's encryption key storage after downplaying the issue since 2018. The flaw allowed anyone with access to the key to decrypt the database, making it vulnerable. Signal is implementing a new encryption method to enhance security and protect user data.
The EU introduced NIS 2 and DORA frameworks to enhance cybersecurity in the financial sector. NIS 2 covers various sectors, while DORA focuses specifically on financial entities. Both frameworks aim to improve digital resilience and compliance across different sectors.
Google has increased bug bounty rewards by five times - the maximum payout now at $151,515 for finding a single security flaw.
NATO is creating a new cyber defense center at its headquarters in Belgium to protect against cyber threats.
Google is now offering passkeys for high-risk users who join its Advanced Protection Program, replacing the need for a physical security key.