Parse notes
ADT disclosed hackers obtained limited customer information like email, phone, and addresses. The breach, which affects a small percentage of its 6 million customers, involved accessing customer order databases, but ADT says home security systems and financial data were not compromised.
The Grand Palais Réunion des musées nationaux in France was hit by a cyberattack on August 3, causing operational disruptions. While reports linked the ransomware attack to disruptions at other museums like the Louvre, the Louvre director denied any impact on their institution.
A group of researchers from SafeBreach Labs presented a new attack at Black Hat that can be used to craft custom downgrades of critical OS components. The researchers found that a malicious action list XML file can push a Windows Downdate tool that bypasses all verification steps. Microsoft has been working with the researchers to develop a patch to prevent this attack and has released two CVEs related to it.
This article walks through the process of creating a Lambda function to automate scheduled secrets rotation. The Lambda is written with a placeholder function that can be customized with the steps to generate a new API key or other secret and then the AWS SDK is used to update the secret value. OpenTofu/Terraform code is provided in the post.
Part one of a hands-on series from TCM Security on getting started in hardware hacking. This post expands on some of the reasons to learn hardware hacking, why some basic hacking knowledge is helpful before starting, ways to get started for free, and tools that will prove useful for hardware hacking. The series will work on hacking a custom IoT firmware written for the Raspberry Pi Zero 2w.
This blog explains how VPN post-exploitation techniques can expose user credentials to attackers. Attackers can easily obtain credentials and access critical assets by compromising the VPN. To prevent this, use limited service accounts and dedicated identities for VPN authentication.
An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio, and Power Platform
Scamnetic automatically scans emails and text messages, as well as links, QR codes, images, and physical mail in an effort to identify potential risks.
DIANA is a tool that automates the creation of detections from threat intelligence feeds using LLMs. The tool allows for customizing the model, threat intelligence feed, and output language.
Cencora revealed that it suffered a breach this past February but declined to provide more information. 1.43M individuals have been notified, with notifications still being submitted as of July. Cencora has refused to comment on the cause of the data breach or the number of individuals that were impacted by it.
Mortgage lender LoanDepot reported nearly $27 million in costs from a ransomware attack in January. The breach compromised personal and financial data of over 16 million individuals. Expenses included investigation, remediation, customer notifications, legal fees, and commission guarantees.
Microsoft 365 has anti-phishing measures like the First Contact Safety Tip, but there are weaknesses that allow attackers to bypass them. Attackers can hide safety tips and spoof encryption icons in Outlook by manipulating CSS in HTML emails. Despite being notified, Microsoft has not yet fixed these issues, potentially leaving organizations vulnerable to phishing attacks.
Amazon Bedrock has achieved FedRAMP authorization for GovCloud users to access managed LLMs.
A man from Nashville was arrested for helping North Korean IT workers deceive U.S. companies.
Microsoft Exchange 2016 will lose support on October 14, 2025, so admins should consider moving to Exchange 2019 for continued security updates.