Parse notes
Sponsored
_Happening on __July 29th:_ [4] Join Brad Rumph, Tines' Field CTO, and John Vasanth, Principal Security Architect at Black Rifle Coffee Company, for a webinar [4] focused on the recent evolution of IAM and how orchestrating IAM processes drives measurable impact for your team. You'll learn:
Louis Vuitton suffered a cyberattack on July 2 that compromised the personal data of UK customers, including names, contact details, and purchase histories. Its Korean division was also targeted. This marks the third LVMH breach in three months, following attacks on Christian Dior Couture. No financial data was stolen, but experts warn the luxury brand's high-net-worth clientele faces heightened risks.
CISA revealed a critical vulnerability (CVE-2025-1727) in railroad End-of-Train and Head-of-Train protocols that allows attackers to send unauthorized brake commands via software-defined radio. Affecting all U.S. rail industry versions, the vulnerability stems from weak BCH checksum authentication that can disrupt operations or cause sudden stops. The American Railroads are developing new systems, while manufacturers like Hitachi Rail, Wabtec, and Siemens should adopt network isolation and secure remote access controls.
A serious SQL injection vulnerability (CVE-2025-25257) has been identified in Fortinet FortiWeb. The flaw allows unauthenticated attackers to execute remote code by writing malicious files to the server's filesystem, potentially leading to full remote code execution. Fortinet has issued patches for versions 7.6.4, 7.4.8, 7.2.11, and 7.0.11. Immediate application of these updates is strongly recommended due to publicly available exploits.
The security researcher in this blog analyzes CVE-2024-30088, a Windows kernel vulnerability that allows privilege escalation. They successfully chained it to escape Chrome's renderer sandbox by bypassing integrity level checks and job object restrictions. The exploit overwrites security descriptors to gain system privileges, then spawns a privileged shell with full control.
Anvil Secure's PQCscan is a free scanner that identifies SSH and TLS servers supporting Post-Quantum Cryptographic (PQC) algorithms. The tool scans for standardized PQC algorithms, such as X25519MLKEM768, and generates HTML reports to help organizations prepare for mandatory PQC compliance deadlines between 2030 and 2035. Available on GitHub under a BSD license, it currently performs capability detection without full handshake testing.
Frictionware is security tooling that forces security teams to spend more time onboarding the tool than focusing on generating results. Some anti-patterns that lead to frictionware are: complex onboarding, weak value proposition, and a lack of integration with existing tools. Frictionware can be avoided by avoiding onboarding altogether, focusing on build-in instead of opt-in, using forcing functions to compel onboarding when required, and working within existing centers of data and attention.
Sponsored
SafeBase and Drata are unveiling the next wave of Agentic AI innovation — designed to reshape how security teams scale trust, automate workflows, and move faster. Attending Black Hat this August?
Huginn Net combines p0f TCP fingerprinting with JA4 TLS client analysis, achieving the same detection accuracy as the original p0f tool while adding modern TLS fingerprinting capabilities.
AWS' Cyber Incident Response Team (CIRT) has launched a new catalog of tactics, techniques, and procedures that it has observed attackers using in AWS environments.
TrashFormer is a 64-bit junk code engine designed to provide code that doesn't affect the program's behavior but allows malware to reprogram itself on each infection.
Elmo's official X account was hacked on Sunday. It posted racist and antisemitic content before being removed. The compromised account also demanded that Trump release Jeffrey Epstein files and was linked to a crypto scam.
India's CBI dismantled a transnational tech support scam syndicate that targeted UK and Australian citizens and resulted in losses exceeding £390,000. Operation Chakra V raided three locations in Noida, arresting two suspects from a fraudulent call center, FirstIdea. The scammers impersonated Microsoft support staff, claiming devices were compromised to scam unaware people.
Libraries are underutilized in favor of custom code. This is due to engineers preferring to write code rather than read documentation, underestimating the problem, and organizations that reward complex internal projects over using libraries. LLMs can further this issue by rapidly generating code that is not as well-tested or understood as the more well-known libraries.
Wiley Reid, a DC law firm, informed clients of a suspected data breach potentially linked to Chinese hackers that involved compromised Microsoft 365 accounts of staff, although the full extent of the breach was not disclosed.
Russian basketball player Daniil Kasatkin was arrested in Paris on June 21 on U.S. charges of computer fraud conspiracy, accused of negotiating for an unnamed ransomware group that attacked about 900 organizations between 2020 and 2022.
A man in the UK hacked a train station's WiFi to display hateful messages about Islam - he was caught and arrested, and received a suspended prison sentence, community service, and rehab.