Parse notes
Sponsored
IT and security teams are trapped in a reactive mode when managing SaaS and AI app sprawl. While accounting for an ever-growing number of risks, admins are continually bogged down by manual processes and disconnected workflows.
Qantas confirmed a data breach on July 1 after attackers accessed a third-party call center platform, potentially exposing records of up to 6 million customers, including names, email addresses, phone numbers, dates of birth, and frequent flyer numbers. The attack is linked to the hacking group Scattered Spider, which has targeted airlines like Hawaiian Airlines and WestJet using social engineering to trick staff into system access. While no financial data, passwords, or passports were compromised, the incident underscores airline vulnerability during peak travel and the rising threat of supply chain attacks on aviation.
The WordPress Forminator plugin (versions up to 1.44.2) contains a critical vulnerability (CVE-2025-6463, CVSS 8.8) that affects 600,000+ sites. Attackers can exploit insufficient input validation to delete critical files like wp-config.php, forcing sites into setup mode for complete takeover. Version 1.44.3 patches this flaw—immediate updates are essential.
The International Criminal Court (ICC) was hit by a "sophisticated and targeted cyber security incident" last week, marking the second major attack in two years. The intrusion was quickly detected and contained. The timing coincides with NATO leaders meeting in The Hague and ongoing high-profile cases involving arrest warrants for Putin, Netanyahu, and Hamas leaders.
Cymulate Research Labs discovered critical vulnerabilities in Anthropic's Model Context Protocol (MCP) Filesystem Server. Two high-severity flaws (CVE-2025-53110 and CVE-2025-53109) allow attackers to escape sandboxes, access any host files, and execute arbitrary code through directory containment bypass and symlink exploitation.
Password-based authentication is vulnerable to various common attacks, including password reuse, weak passwords, and phishing. To combat these threats, this guide from the NCSC guides on “going beyond passwords” with MFA, federated Single Sign-On (SSO), FIDO 2 security keys, or magic links and one-time passwords (OTPs). Each section includes an introduction to the method, its pros and cons, and a chart to help determine when you may want to use it and when you may want to consider a different method.
This GitHub repository offers resources on client-side web security, focusing on JavaScript, XSS, CSP bypasses, CORS, CSRF, and other attack vectors. It includes tutorials, challenges, case studies, and security blogs for practical learning.
A flexible framework for security teams to build and deploy AI-powered workflows that complement their existing security operations.
GitPhish is a comprehensive security research tool designed to perform GitHub's device code authentication flow. The platform operates through three primary modes: an authentication server, automated landing page deployment, and an administrative management interface.
According to the FBI's top cyber official, Brett Leatherman, the Chinese hacking group Salt Typhoon is "largely contained" and "dormant" in telecommunications networks, with nine U.S. telecom companies having been victimized. However, the hackers still pose a threat, as they could pivot from espionage to destructive action. Leatherman noted that Salt Typhoon and Volt Typhoon are more similar than some think, as both have access to critical infrastructure that could support destructive operations.
The U.S. sanctioned Russia-based Aeza Group and its leaders for providing "bulletproof" hosting services that enable cybercriminals to operate illegal websites and evade law enforcement. The sanctions target multiple companies and individuals associated with the Aeza Group. This effort was coordinated with the UK.
Threat actors are weaponizing Vercel's v0 AI tool to create convincing phishing sites through simple text prompts, targeting multiple brands, including Okta customers. This represents a significant evolution in AI-powered cybercrime, enabling low-skilled attackers to rapidly generate high-quality fake login pages at scale without coding knowledge.
Microsoft fixed a bug that broke the "Print to PDF" feature in Windows 11 after a recent update.
Blind Eagle, a cybercrime group, is using Proton66's Russian hosting services to launch malware attacks on Latin American banks via fake banking websites.
Ubuntu plans to disable certain Intel GPU security features to boost performance by about 20%, a change deemed low-risk for most users given the rarity and difficulty of potential attacks.