Parse notes
Sponsored
As a 5 star rated, global certified CREST provider, ThreatSpike offers top-quality penetration testing at an unbeatable price. Get unlimited penetration testing for just $1,500 per month [4] and ensure your business is always protected.
…all led by a team of expert certified testers.
X faced an eight-hour outage on Monday. Elon Musk attributed this to a "massive cyberattack" from a country or group protesting his government role with "DOGE."
Four healthcare organizations reported data breaches last week that impacted over 560,000 individuals. Sunflower Medical Group had the largest breach, affecting 220,000, with the Rhysida ransomware group claiming responsibility. Other breaches involved Hillcrest Convalescent Center, Gastroenterology Associates, and Community Care Alliance.
Several US cities have warned of a phishing campaign that uses texts which claim users have an unpaid parking balance, risking a daily $35 fine. The messages exploit a redirect on google.com to hide the phishing site and evade iMessage protections. This article includes a breakdown of a text purportedly from New York City.
AWS SES allows sending emails using an individually verified email or any email in a verified domain. If an attacker has the requisite IAM privileges, they can spoof any email address in a verified domain for phishing attacks and there is no ability to log emails sent. Use verified emails or the "ses:FromAddress" condition in SES IAM policies to prevent this attack.
Kubernetes provides robust audit logs essential for investigations. This post outlines common issues with cloud providers, including inconsistent logging policies, vendor modifications to Kubernetes logs, and cloud providers controlling audit policies. Use dynamic admission controllers and cloud-specific logs like CloudTrail, or VPC Flow Logs to address these issues.
VS Code extensions allow attackers to stealthily install malware, despite Microsoft's protective prompts. This post illustrates how the initial installation process can evade these defenses and affect existing installations, along with detection methods for this attack.
A comprehensive security dashboard that tracks malicious activities with advanced analytics capabilities.
ssdeep is a command line tool and API for computing fuzzy hashes.
Twilio Security Scanner is a tool for detecting misconfigurations and security risks in Twilio accounts.
Despite recent conflicts among maintainers, Rust is still advancing within the Linux kernel. The Prossimo project showcases increasing acceptance of Rust across various subsystems, primarily due to its memory safety advantages, with mainline integration anticipated in the next 18 months.
Google paid $11.8 million to 660 researchers for bug bounties in 2024. Some highlights include Android/Google mobile vulnerabilities earning $3.3 million and new AI bug bounties receiving 150 reports worth $55,000.
The "Stolen Device Protection" feature was introduced in iOS 17.3 to prevent unauthorized access to sensitive iPhone data. This feature complicates data extraction for forensic experts by requiring biometric authentication to pair with a computer, limiting traditional extraction methods. Manual inspection may be the only viable forensic method for devices protected by this feature, but it has limitations and is not forensically sound.
Researchers have found a new attack where malicious browser extensions can clone legitimate ones that look identical to the real ones, making it hard for users to spot the scam.
SideWinder, a prolific APT group, has updated its tools to target maritime and nuclear sectors.
U.S. authorities seized $23 million in stolen cryptocurrency from a $150 million Ripple wallet theft and the 2022 LastPass breach.