Parse notes
Sponsored
Security reviews are often seen as the cost of doing business. But for many companies, these costs are far higher than they should be due to slow, manual security processes that hinder operations, inflate costs, and delay revenue.
VMware Tools is a suite of drivers and utilities that enhance graphics, performance, and system integration for VMware guest operating systems. Positive Technologies, a Russian cybersecurity firm, reported a privilege escalation vulnerability in VMware Tools for Windows. This vulnerability enables a malicious actor with non-admin privileges to perform high-privilege operations within the VM. The exploit could potentially combine with recently disclosed VM escape vulnerabilities.
ARCOS Security found a vulnerability in all Windows versions that discloses NTLM hashes. It requires users to open a malicious file in Windows Explorer. ARCOS is offering a free, unofficial microcode patch until Microsoft issues an official patch.
Numotion, a mobility solutions provider, faced a data breach impacting about 500,000 customers last year. Hackers accessed employee emails from September to November 2024, risking exposure of personal, financial, and medical information.
Amazon Verified Permissions provides a mechanism for centralizing application authorization. This post from AWS provides four different deployment models for using Amazon Verified Permissions in containerized applications with various tradeoffs regarding resource use and authorization granularity: as an API Gateway external from a cluster, within the Kubernetes ingress controller, as a sidecar proxy, and within the application container directly.
This post outlines how to measure the success of Adversary Simulation or Red Teaming exercises, focusing on three key goals: test controls, defensive enlightenment, and professional courtesy. Test Controls involves collaboration where testers validate expected security measures and share findings with defenders to enhance understanding and improve defenses. Testers should maintain professional courtesy throughout this process by being available, cleaning up data and tools, and acting transparently and humbly.
Threat models should be updated throughout software development. It is important to maintain trust zones, threat actors, connections, and security assumptions, as well as tracking components, sensitive data, and controls after systems stabilize. This post provides practical advice for incorporating threat modeling into all SDLC phases, adapting models to organizational needs, and identifying security risks early.
Sponsored
This report looks at +3.6 petabytes of data from the hardest-to-reach corners of the web, offering a timely view into the tactics, techniques, and procedures (TTPs) of today's most prolific threat actors; as well as steps you can take to tackle converging threats.
Detection Studio is a playground that allows for converting Sigma detection rules to SIEM-specific languages entirely in the browser.
go-ocsf is a Go library and CLI tool that converts security findings and events into the Open Cybersecurity Schema Framework (OCSF) format with output options in JSON or Parquet.
Charm prevents scams before they occur by analyzing human vulnerability exposure and customer risk patterns and by providing actionable insights and tailored mitigation strategies.
A hacker claims to have breached Oracle Cloud's login servers, stealing about six million records. Several security firms confirm the data's authenticity, with three customers verifying the leaked information. Although Oracle denies the breach, experts caution about potential cybersecurity risks.
Blizzard will now allow character resurrections in World of Warcraft Classic's Hardcore mode if players die due to DDoS attacks. This policy change comes after repeated server disruptions that targeted the popular OnlyFangs guild. Players now have a fail-safe if they are targeted by these attacks.
Criminals are targeting Semrush to steal Google account credentials and access data like Google Analytics and Search Console. Malicious ads are impersonating Semrush to trick users into revealing sensitive information, posing a major threat to individuals and businesses.
CrushFTP has a security flaw that allows unauthorized access - update v11.3.1+ resolves this flaw.
Cybercriminals are misusing Microsoft's .NET MAUI tool to spread Android malware, tricking users by hiding malicious code in seemingly legitimate apps.
Over 300 suspects were arrested in Africa for cybercrimes that targeted businesses and individuals in an Interpol-led crackdown called Operation Red Card.