Parse notes
Sponsored
With Kubernetes clusters running on various platforms and in different configurations, organizations often face challenges in gaining visibility — leaving them vulnerable to potential security threats.
that drives Cloud Native Transformation across distributed clouds – on-premises, AI or at the edge. With centralized cluster management and streamlined deployments, Rancher Prime offers robust features to secure your clusters and applications.
A threat actor has leaked data belonging to 44K Ford customers. The breached data includes full names, physical locations, purchase details, dealer information, and record timestamps. Ford has responded to the allegations by stating that internal investigations have shown no evidence of breach and that the data comes from a third-party supplier as well as publicly available dealer information.
A threat actor has allegedly breached Mediboard, a software by Software Medical Records for managing Electronic Patient Records. Software Medical Records stated that upon investigation it determined that the breach affected one client's privileged Mediboard account which they used according to its standard function and that the attacks had not compromised any of Software Medical Records' infrastructure. The breached data may include full names, dates of birth, gender information, home addresses, phone numbers, email addresses, physician history, prescription information, and health card history.
Satellite company Maxar has confirmed a data breach affecting employee personal information, including names, addresses, and Social Security numbers. The hacker had access to the files for approximately one week before detection.
Test-Driven Development is a software engineering philosophy that often uses an Arrange-Act-Assert design pattern where a state is set up, an action is taken, and then it is determined whether the results were what was expected. In detection engineering, the Arrange step can be modeled by deploying detection logic and setting up a test system. The Act step would then involve executing a test/tool/malware sample. The Assert step would evaluate what response was taken. Depending on the maturity and precision of the alert, the Assert step may make sure that the logs which observe the action are collected, a detection is fired off, or preventative action is taken.
Resource Control Policies is a new AWS feature that allows users to define a data perimeter in AWS Organizations by centrally restricting external access to AWS resources. RCPs complement SCPs, which offer central control over the maximum permissions of IAM users and roles by offering central control over the maximum resources on AWS resources. At launch, RCPs can apply to resources of the following AWS services: S3, STS, KMS, SQS, and Secrets Manager.
Google's AI-powered fuzzing project, OSS-Fuzz, found 26 new vulnerabilities in open source projects, including a critical one in OpenSSL. The team increased code coverage and automated the process of vulnerability discovery and patching by using AI-generated fuzz targets. They aim to make this technology widely available for defenders to find and fix vulnerabilities more efficiently.
Sponsored
Find and fix broken authentication, logic bugs, outdated dependencies, and more. Set up ZeroPath [11] in minutes and get continuous, human-level application security, PR reviews, and much more - with no human involvement required. Book a demo here [12] and
Abstract is an AI-powered assistant for centralized management of analytics. The platform correlates data to provide organizations with actionable insights for both compliance and data security.
A fast, customizable service detection tool powered by a flexible fingerprint system. It helps users identify services, APIs, and network configurations across infrastructure.
Nudge is an application that reminds users to apply macOS updates.
Microsoft has launched Zero Day Quest, a massive hacking event with $4 million in bounties. Researchers can win spots at Microsoft's HQ, collaborate with AI engineers, and help improve cloud and AI security through vulnerability research and disclosure.
MITRE released a list of the top 25 vulnerabilities of the year after analyzing over 31K CVE records with a stronger focus on those in CISA's KEV. Cross Site Scripting, Out-of-bounds write, and SQL Injection lead the group while Uncontrolled Resource Consumption and Code Injections all had large increases this year. MITRE encourages users to review the list and update security practices and priorities accordingly.
Unredacted court documents revealed that NSO Group used Pegasus spyware to infect 1,400 WhatsApp users' phones in 2019, violating laws. WhatsApp's security team successfully blocked Pegasus intrusions targeting journalists, activists, and officials. NSO Group developed exploits to infiltrate devices without user interaction. This has led to a lawsuit and ongoing accountability efforts.
Federal prosecutors have charged five men in Los Angeles for hacking major U.S. tech companies using SMS phishing attacks.
Microsoft has formed a new Windows Resiliency Initiative to keep security vendors out of the kernel mode coming from the CrowdStrike fiasco.
Microsoft will soon allow Teams users to clone their voices for meetings in different languages.