PlainsCapital Bank Data Breach Confirmed, 16M Users At Risk
PlainsCapital Bank, one of the largest independent banks in Texas and a subsidiary of Hilltop Holdings Inc, has confirmed a breach linked to the MOVEit…
Month: July 2023
BoMs Away – Why Everyone Should Have a BoM
In this talk, Steve describes the various use cases of a software bill-of-materials (BOM), including facilitating accurate vulnerability and other supply-chain risk analysis, and gives…
Luna Hotels & Resorts Cyber Attack Highlights Threat To Hospitality Sector
Luna Hotels & Resorts, a Portuguese prominent hotel chain, has allegedly fallen victim to a cyber attack. The Medusa ransomware group, notorious for its malicious…
335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997Security Affairs
Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997.…
Microsoft banishes rumors of cyber attack and steal of data from 30m accounts
Just a day after hacktivists group “Anonymous Sudan” took claim of cyber-attack on Microsoft servers to steal info from over 30 million accounts, the Satya…
TAP Air Portugal Cyber Attack: GhostSec Demands 250K
GhostSec hackers have taken responsibility for the TAP Air Portugal cyber attack, claiming to exfiltrate 350GB of data. They have further demanded a ransom to…
What I Learned Watching All 44 AppSec Cali 2019 Talks
What I Learned Watching All 44 AppSec Cali 2019 Talks OWASP AppSec California is one of my favorite security conferences: the talks are great, attendees…
IT leaders believe hybrid cloud solutions are the future of IT
IT leaders are losing sleep over improving overall IT performance (60%), data security (50%), process risk and compliance (46%), and the need to improve agility…
Fileless attacks increase 1,400% – Help Net Security
Aggregated honeypot data, over a six-month period, showed that more than 50% of the attacks focused on defense evasion, according to Aqua Security. Threat actors…
[tl;dr sec] #186 – Enterprise Purple Teaming, Cloud CTFs, Code Review with LLMs
I hope you’ve been doing well! New Platform, Who Dis? 👋 Hello and welcome to the first edition of tl;dr sec on Beehiiv! If you…
53% of SaaS licenses remain unused
Enterprise leaders in procurement, IT, and finance need to take immediate action to rationalize their SaaS portfolios to prevent spending and governance challenges from spiraling…
[tl;dr sec] #187 – AWS Pentest Methodology, Destroyed by Breach, Awesome LLM Cybersecurity Tools
I hope you’ve been doing well! 💪 Bro-ing Out This week I’m visiting by brother, who has kindly offered to host me in his 1…