Parse notes
Sponsored
AI-powered deepfakes and phishing attacks enable bad actors to impersonate employees with terrifying precision. To keep up, security teams need a viable Know Your Employee (KYE) strategy [4] with higher assurance authentication policies.
covering:
A record 16 billion login credentials have leaked online, exposing passwords from major services. Experts urge users to stop reusing passwords, adopt password managers, enable multi-factor authentication, and switch to passkeys for better security. The leak is not from a single breach but multiple infostealer sources.
Oxford City Council suffered a cyberattack on June 7-8, compromising 21 years of election worker data (2001-2022). The breach affected current and former council officers' personal information. Automated security systems detected and stopped the attack and have since been restored. There is no evidence that suggests data was shared externally or mass-downloaded.
The Anubis ransomware group asserts that it has acquired 64GB of data from Disneyland Paris, mostly concerning construction and renovation efforts. They claim to have accessed the files by breaching a partner company and have shared images and videos as evidence. It remains uncertain whether customer data was also compromised. Disneyland Paris has not verified the breach.
Researchers from Permiso Security discovered a novel CloudTrail log bypass that abuses differing policy size calculations. AWS' documentation states that whitespace does not count when determining the maximum size of an IAM policy. However, the researchers determined that the policy would fail validation if the whitespace caused the size to exceed 131,072 characters. The researchers discovered that CloudTrail fails to capture full request details for requests in the size range of 102,401 to 131,072.
This post highlights two attack vectors by which malicious Rust code could target the cargo system. The first attack vector abuses the fact that a project could remap the `rustc` binary to any arbitrary path, which would compromise any cargo commands. The second attack vector could compromise plugins that don't use the cargo config files, such as `cargo crev`, by defining an alias for that command in the config.toml.
This post presents five common Windows detection pitfalls that can lead to gaps in detection. The pitfalls include parameters being able to be called in multiple different ways, & and | causing multiple log entries for a single command, extra whitespace in commands, other forms of command obfuscation, and commands that don't cause process creation events. Each pitfall also includes detection tips to circumvent it.
Sponsored
Electric combines best-in-class security with simple tools to handle every IT thing you need to manage, but don't really want to: hardware provisioning, device monitoring, employee offboarding... And if you take a demo in the next few days [11], they'll send you a YETI cooler
Modern, cross-platform OpenPGP GUI—easy for beginners, powerful for experts, fully portable and open-source.
AWS announced three new security services at re:Inforce conference to address AI-era threats. Security Hub centralizes threat identification and prioritization. Shield proactively analyzes network configurations to prevent attacks like SQL injection and DDoS. GuardDuty Extended Threat Detection now protects container applications, detecting sophisticated multi-stage attack patterns.
ToolHive is a tool that allows for running any MCP server in a locked-down container with a single command.
Cloudflare blocked a record-breaking 7.3 Tbps DDoS attack targeting a hosting provider in May. The 45-second attack delivered 37.4 terabytes from over 122,000 IP addresses across 161 countries.
Iran shut down its internet nationwide this week, calling it a "near-total blackout." The government confirmed it ordered the shutdown to protect against Israeli cyberattacks, citing recent hacks on Iranian banks and cryptocurrency exchanges by the pro-Israel group Predatory Sparrow.
Hackers deceived CoinMarketCap users into linking their crypto wallets to a counterfeit prompt, resulting in the theft of over $43,000 through a tool known as Inferno Drainer, which disseminated a hidden code across the site.
Walmart has agreed to pay $10 million to settle FTC allegations that it allowed scammers to exploit its money transfer services between 2013 and 2018, which resulted in hundreds of millions of dollars stolen from customers through fraud schemes.
Russian hackers impersonated U.S. State Department officials to deceive individuals into providing passwords that allowed them to circumvent Gmail's security measures, specifically targeting experts and critics of Russia.