Parse notes
Sponsored
Trust centers turn your security programs from a cost center to a revenue enabler. Get the low-down on launching and operationalizing your trust center in this guide by Safebase [4], packed full of insider tips from leading security teams [4]:
DISA Global Solutions, which provides drug and alcohol testing and background checks to more than 55K enterprises, has disclosed a data breach that impacts 3.3M individuals. DISA reported that in April 2024, it discovered that an attacker had been present in its network for over two months and procured information from its systems. The stolen data includes individuals' SSNs, financial account information, and government-issued documents, but DISA also stated that it could not determine the specific data procured.
Detroit Public Broadcasting notified 1,694 individuals about a data breach in August 2024. The breached data includes names, SSNs, passwords and usernames, medical info, addresses, employer ID numbers, and driver's license numbers. The Qlin ransomware gang claimed responsibility for the attack. Detroit PBS has not confirmed whether the filing implied a ransomware attack.
Southern Water reportedly offered the Black Basta ransomware gang $750,000 following a January 2024 cyberattack, down from the initial $3.5 million demand. The information emerged from leaked internal Black Basta chats. While the utility company avoided confirming the payment, chat logs suggest the ransom was paid for approximately 750GB of stolen data.
Pricing models impact security and software engineering teams differently. Security vendors tend to extract more value due to higher barriers to entry and limited ability for security teams to build their own tools. The pricing dynamic in the security industry hinders innovation and affordability, especially for smaller companies and startups.
This blog dives into how to harden Nginx deployments with essential configuration options that boost monitoring capabilities, enhance performance metrics, and reinforce security posture.
The ProjectDiscovery team decided to experiment with utilizing AI to generate nuclei templates from CVEs. The team utilized cvemap to identify CVEs that had a publicly available POC but did not already have a nuclei template and then built TemplateMan to aid in adding non-functional enhancements to the generated templates. They noted issues in parsing technical details out of unstructured Medium and other blog posts as well as issues with authenticated vulnerabilities and data quality. The ProjectDiscovery team has created a new repository to store the AI-generated templates and has also added the capability to build nuclei templates with AI to their online template editor.
Edera Protect Kubernetes offers hard isolation for each container, meaning every workload runs in its own secured kernel environment. This approach promises zero escapes and strong security guarantees without impacting performance.
Rhabdomancer is a blazing fast IDA Pro headless plugin that locates calls to potentially insecure API functions in a binary file.
MTR is a network diagnostic tool that combines ping and traceroute.
Over 7,000 documents were leaked from TopSec, a prominent Chinese cybersecurity firm. SentinelLABS analyzed leaked DevOps work logs and source code and discovered a trove of hardcoded credentials as well as lists of customers. It also discovered evidence of ties between TopSec and the Chinese government including projects that show that TopSec aided in censorship efforts.
The GitVenom campaign, which targets gamers and crypto investors through fake GitHub repositories that steal cryptocurrency and personal data, has stolen 5 bitcoins ($456,600). The malware deploys info stealers and RATs, swapping wallet addresses to divert funds.
Cybersecurity firm Skybox Security has suddenly closed down, laying off all 300 employees across Israel and the US despite raising $335 million in funding including $50 million just two years ago. Rival Israeli firm Tufin has purchased Skybox's technology and business assets and is creating a transition program to support Skybox's former customers during this disruption.
The LockBit ransomware gang has threatened to leak classified information to FBI Director Kash Patel, claiming it could harm the agency.
Mozilla has announced that Firefox will support Manifest V2 extensions alongside Manifest V3, ensuring users can choose their preferred browser extensions.
Kaspersky found a campaign called GitVenom using fake GitHub repos to spread malware.