Parse notes
Sponsored
Orca's AI Goat, provided as a free and open source tool [4], is an intentionally vulnerable AI environment for testing and learning purposes. The ready-to-deploy Terraform environment [4] launches an online application riddled with threats and vulnerabilities, based on the OWASP top 10 ML risks.
🙋 Request a free demo [6] with an Orca expert
A critical security flaw (CVE-2024-38206) in Microsoft's Copilot Studio could allow authenticated attackers to bypass SSRF protection and access sensitive information. The vulnerability exploits Copilot's external web request feature to access Microsoft's internal infrastructure.
Energy giant Halliburton has reported a cyberattack, prompting it to shut down some internal systems. The company is investigating the impact. The U.S. Department of Energy has reported no current disruption to energy services.
A method to abuse Slack AI to leak messages from private channels was recently discovered. The prompt injection attack enables attackers to post prompt injection messages in public channels and retrieve API keys from channels that the attackers do not have access to. Slack has stated that this is not a vulnerability and that the feature is working as intended.
Secure Boot Advanced Targeting (SBAT) was developed to address the limitations of revoking individual hashes for bootloader binaries in the Secure Boot ecosystem. Microsoft pushed a Windows update that made systems not trust versions of grub with a security generation below a certain level due to security vulnerabilities, causing boot issues for some users. The incident highlights the importance of updating bootloader code and security generations to prevent potential attacks on operating systems.
This blog post discusses Linux persistence mechanisms used by threat actors and how to detect and hunt for these techniques. It covers methods like scheduled tasks, systemd services, shell profile modifications, and reverse shells, providing practical demonstrations using a tool called PANIX. The post aims to educate defenders and researchers on foundational aspects of Linux persistence for effective detection and security strategies.
This tutorial walks readers through setting up Windows and Ubuntu VMs in Azure and using Wireshark to observe various types of network traffic. It teaches how to create and configure virtual machines, monitor ICMP, SSH, DHCP, DNS, and RDP traffic, and understand the behavior of each traffic type.
Heeler provides real-time code, behavior, and business context so that organizations can automate the process of assessing security risks and prioritize operations and objectives.
EMBA is a central firmware analysis tool for penetration testers and product security teams. It supports the complete security analysis process with firmware extraction, static and dynamic analysis via emulation, and generating a web report.
ScubaGear is a tool that assesses Microsoft 365 tenants against the CISA Secure Cloud Business Applications configurations baselines.
Dr. Manos Antonakakis, a Georgia Tech cybersecurity researcher, received millions in DoD funding. The US government is now suing Georgia Tech, claiming Antonakakis and the university failed to follow required security protocols, including installing antivirus software, despite knowing the requirements.
This post reflects on what aspects have helped security awareness training work and what hasn't. It emphasizes ambient security controls which offer concrete solutions and escalation paths over long lists of policies and traditional, computer-based training. It also points out key moments to reinforce learning, such as when users run into a guard rail and when they switch positions.
Due to the proliferation of new Top Level Domains (TLDs), many internal networks now collide with external networks, potentially exposing their networks to credential theft and other attacks. Security researcher Philippe Caturegli has been mapping this "namespace collision" vulnerability by scanning for self-signed certificates referencing domains in business-oriented TLDs. Caturegli found over 9,000 exposed domains, with some government entities and critical infrastructure affected.
Google is shutting down its Google Play Security Reward Program (GPSRP) as a result of the overall increase in the Android OS security posture and feature hardening efforts.
An audit conducted by the Department of Justice found security weaknesses in the FBI's handling of electronic storage media with sensitive information.
French police arrested Telegram CEO Pavel Durov due to a lack of content moderation, which facilitated criminal activity.