Parse notes
Sponsored
Fraud tactics are becoming ever more sophisticated - but real-time data and applying the most up-to-date best practices [4] can help protect your business. Learn the latest credit card fraud methods to help your team anticipate and counteract threats. Get the Flashpoint
Mexico's president confirmed the investigation of a ransomware attack on the government's legal affairs office. Ransomhub is reportedly threatening to release 313GB of sensitive files unless paid within 10 days.
ESET researchers have discovered two new Linux magister families that are connected to Chinese APTs. WolfsBane is dropped via a dropper named Cron, which disguises the launcher as a KDE desktop component which then disables SELinux and eventually loads a rootkit that hooks several syscalls to evade detection. FireWood is another rootkit that maintains persistence by creating an autostart file.
Hackers have breached Andrew Tate's online university and leaked data on 800K users. The hackers revealed their breach by flooding chat rooms with emojis that they uploaded while Tate was streaming. Emails of roughly 325K users and the contents of the over 500 public and private chat servers were leaked.
Okta Fine-Grained Authorization (FGA) offers a dynamic permissions scheme called Relationship Based Access Control (ReBAC). ReBAC allows developers to define complex relationships between entities that can be evaluated by the policy engine to make access decisions. This blog post discusses how FGA can be integrated with AWS API Gateway as a Lambda Authorizer.
This post is part of a series that explores unique ways to achieve persistence on macOS via methods that don't use the traditional LauchDaemons or LaunchAgents. The author discovered an unused IO registry key called apple-trusted-trampoline in the IODeviceTree:/options entry (corresponding to the NVRAM) which is executed during the boot task if the rc.trampoline flag is set. They note that this is not a practical attack as it requires SIP to be disabled among other limitations.
This post takes a critical look at conventional wisdom around Disaster Recovery (DR) and how it fails in practice. Much of Cloud DR planning focuses on spreading loads across multiple data centers or even clouds. Failures are much more likely to be caused by user errors that lead to partial failures. DR strategies must be flexible enough to handle partial failures, have clear instructions (including who can initiate a DR incident), and need to be well documented.
Sponsored
Cloud-native organizations are facing rapidly changing environments, exponentially more identities, and difficulty managing privileged developer access. CyberArk and Wiz are joining forces [11] to tackle these challenges. Customers can now strengthen their multi-cloud security posture with best-in-class visibility and control over human
RIIG can deliver threat actor detection and cyber resilience training to employees. It meets the needs of organizations across multiple sectors, including government entities, delivering seamless integration and enhanced security.
Squealer scans git repositories and filesystems for secrets leaked deep within commit histories.
A lightweight Python library that adds security headers to a variety of Python web frameworks.
The DOJ has shut down PopeyeTools, a cybercrime marketplace that has been operating since 2016. The site sold stolen credit card data and hacking tools to 227,000 users, generating $1.7M. Authorities seized $283,000 in cryptocurrency during the operation.
Japan's Consumer Affairs Center has urged citizens to plan their "digital end of life," recommending that citizens share device access, maintain password lists, and designate digital heirs to manage subscriptions.
The Nearest Neighbor Attack is a new attack method where threat actors compromised one organization to access nearby Wi-Fi networks of other organizations. The attackers moved through multiple organizations without deploying malware by leveraging stolen credentials, highlighting the importance of strong network security measures. Volexity worked with affected organizations to uncover the attacker's tactics and implement mitigations to prevent further intrusions.
Foodinho was fined €5M by Italy's privacy regulator for illegally processing 35,000 riders' data, including unauthorized geolocation sharing and biometric data use.
GitHub is investing 1.25 million dollars in a program to help developers improve the security and sustainability of their open-source projects.
Microsoft is blocking the Windows 11 24H2 update on computers with Ubisoft games like Assassin's Creed and Star Wars Outlaws due to crashes and audio issues caused by changes in the operating system.