Parse notes
The Medusa ransomware gang reportedly stole over 90GB of data from the East Baton Rouge Sheriff's Office in 2024. A sample of the data includes sensitive information on confidential informants, including names, dates of birth, and SSNs. The breach also included data on seized devices, surveillance operations, sock puppet accounts, polygraph results, and internal affairs.
SonicWall is probing recent ransomware attacks on its Gen 7 firewalls, potentially exploiting a zero-day in SSL VPNs. Even with MFA enabled, attackers bypassed controls, deployed ransomware, and quickly pivoted to internal systems. SonicWall has urged customers to disable SSL VPN and use mitigation steps ASAP while waiting for official patches.
A hacker used a voice phishing (“vishing”) call to trick a Cisco representative, gaining access to their third-party CRM system and stealing Cisco.com users' personal data: names, organizations, addresses, emails, phone numbers, and more. The company did not disclose how many users this sophisticated social engineering breach affected.
Elad Beber discovered two high-severity vulnerabilities in Anthropic's Claude Code during its Research Preview phase. CVE-2025-54794 (CVSS 7.7) allows path restrictions to be bypassed through naive prefix validation, enabling access to files outside the intended working directory. CVE-2025-54795 (CVSS 8.7) enables command injection via inadequate input sanitization, allowing arbitrary code execution without user confirmation by breaking out of allowed commands like “echo”. Anthropic has patched both vulnerabilities.
Open source security governance is challenged by widespread reliance on vulnerable libraries, lack of standardized management, insecure defaults, and unclear ownership. This post dives into how effective governance requires proactive policies, measurable capabilities, and continuous attention beyond just tool-based vulnerability scans to deal with known and unknown risks in dependencies.
Trail of Bits researchers exploited two discontinued home network devices (Netgear WGR614v9 router and BitDefender Box V1) at DistrictCon's Junkyard competition, achieving remote root access through chained vulnerabilities, including UPnP authentication bypass, buffer overflows, and firmware downgrade attacks. The research highlights how end-of-life hardware becomes a persistent security risk when manufacturers stop releasing updates, leaving vulnerabilities permanently unpatched. Both devices were initially designed to protect home networks, but became easy targets due to years without security updates.
EntraGoat is a deliberately vulnerable Microsoft Entra ID infrastructure that simulates real-world identity security misconfigurations and attack vectors. It introduces intentional vulnerabilities in your environment to provide a realistic learning platform for security professionals. EntraGoat features multiple privilege escalation paths and focuses on black-box attack methodologies.
Fable uses AI to monitor real-time employee behavior signals and provides interventions such as chats and video briefings tailored to individual risk moments. It aims to educate users and reduce human-related cybersecurity threats in enterprises.
DoubleTeam is a Python listener that uses socat, tmux, and threading to launch a new tmux window on each connection, listen on multiple ports, and automatically resume listening upon spawning the new window.
A recent report from Cloudflare stated that Perplexity is deliberately circumventing robots.txt and utilizing evasion techniques to avoid web application blocks. The researchers identified that when Perplexity's crawlers encounter Cloudflare's blocks or a robots.txt file, they cycle through a list of IPs not in Perplexity's published IP ranges and shuffle ASNs to avoid blocks. Other sites such as Forbes, Reddit, and Wired have also leveled similar accusations at Perplexity.
A jury found Meta guilty of illegally invading the privacy of women who shared their health data with the period tracking app Flo by deliberately harvesting it without consent. This verdict may set a landmark precedent in setting boundaries for how far tech firms can go in collecting personal data for use in targeted advertising. Meta has denied any wrongdoing and is “exploring all legal options.”
Sonatype uncovered a global espionage campaign led by North Korea's Lazarus Group that uses malware-laced open source packages on npm and PyPI to infiltrate developer environments. Over 234 malicious packages targeted at least 36,000 victims, aiming to steal secrets and open persistent backdoors across critical digital infrastructure.
Pandora confirmed a cyber attack through a third-party vendor that exposed customer names, phone numbers, and email addresses (but not financial data).
Summer 2025 saw a major spike in cyber attacks with ransomware groups heavily targeting healthcare, retail breaches at Louis Vuitton and Belk, and widespread exploitation of critical Microsoft SharePoint vulnerabilities in espionage campaigns.
PBS confirmed a data breach exposing corporate contact information of 3,997 employees and affiliates after the data was leaked and circulated on Discord servers by PBS Kids fans apparently motivated by curiosity rather than malicious intent.