Ukrainian military wipes Russian tax databases. Log4Shell still very much a thing. 23andMe doing great.

That's pretty huge. They breached the central tax authority servers and 2,300 regional servers, infecting them with malware that wiped out the main and backup databases and config files. It's estimated that it will take them at least a month to come back online, with complete restoration being improbable.

The cyber aspect of this war keeps going back and forth though, with Kyivstar, Ukraine's largest telecom provider, also being hacked, taking down services for 25 million customers and also impacting air raid alarms.

Just another example on how well 23andMe is handling this. In response to the cyberattack they've now change their terms, mandating binding arbitration for disputes.

Two years after it was disclosed, the Log4j vulnerability continues to enable North Korean hacking operations, according to a report from Cisco's Talos group. And, according to another report, this time from Veracode, about 38% of applications that rely on Log4J, still use a vulnerable version (link). A long tail indeed.

If you think doing a quick pentest every few quarters isn’t enough, you are correct. GlitchSecure combines continuous vulnerability assessments with real-time pentesting - all verified by highly skilled (and wonderful) humans in a user friendly platform. (Sponsored)

Attackers often breach a user's identity through password re-use and lack of 2fa. But instead of then using the identity directly, they use it to create or approve OAuth applications with broad privileges, which can then be used for all kinds of mischief.

It's definitely something that is often forgotten: audit the OAuth applications that your employees/colleagues have generated or given access to. Those can be at least as powerful as the user account itself, and much more stealthy.

The leadership change comes just a few weeks after Russian journalists uncovered the alleged identity of Killmilk, who became famous during the war for representing a collective of politically motivated hackers.

Always interesting to deep-dive a bit into the infrastructure of nation-state hackers. In this case, a botnet made out of outdated Cisco, Netgear and Fortinet devices, among other vendors, is being used as a sort of Tor-like network to exfiltrate date from the victims. Recent expansion and network changes seem to indicate they are gearing up for another wave of attacks during the holidays.

He was sentenced to two years in prison and a restitution of $529,000 for going on a "disgruntled ex-employee rampage", wiping the code repositories of his former employer, First Republic Bank, in retaliation for being fired. In case you ever get the bright idea to go on one of these yourself, don't.

It will be on him to implement the national cybersecurity strategy that aims to shift the responsibility for security to technology manufacturers and vendors instead of customers. Not an easy job, no doubt.

You can't secure what you can't see, right? Explore Escape's powerful combination of agentless and automated API discovery and security scanning. Start uncovering business-logic flaws with the help of AI at scale. (Sponsored)

Remembering one strong password isn't all that difficult, but there is still the risk that it might be phished or keylogged. Passkeys on the other hand remove that risk entirely, and 1Password will soon allow you to use a passkey to unlock your vault. Very exciting stuff. (Sponsored)