CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

Wiz Research uncovered CodeBreach, a critical vulnerability in AWS CodeBuild that allowed attackers to take over key AWS GitHub repositories, including the JavaScript SDK powering the AWS Console. The issue stemmed from a misconfiguration in the CodeBuild pipelines' webhook filters, which failed to anchor regex patterns, enabling unauthenticated attackers to infiltrate the build environment and steal privileged credentials. AWS promptly addressed the issue and implemented new security measures to prevent similar attacks in the future.

Claude Cowork Exfiltrates Files

GitHub - A-poc/BlueTeam-Tools: Tools and Techniques for Blue Team / Incident Response

This GitHub repository, A-poc/BlueTeam-Tools, provides a collection of over 65 tools and resources for blue team activities, including network scanning, vulnerability management, security monitoring, threat intelligence, incident response, malware detection, and data recovery. The repository is intended for informational and educational purposes only and is not meant for illegal activities.

Python Software Foundation News: Anthropic invests $1.5 million in the Python Software Foundation and open source security

Anthropic has invested $1.5 million in the Python Software Foundation (PSF) to support open source security and the Python ecosystem, including enhancing CPython and PyPI security and developing tools for proactive package review.

Cop Used Flock to Wrongfully Accuse a Woman Then Refused to Look at Evidence That Exonerated Her, Body Camera Shows

A police officer in Colorado wrongfully accused an innocent woman of package theft using Flock cameras, refused to look at her exonerating evidence, and exhibited rude behavior, highlighting the overreach and potential misuse of surveillance technology.

How a 40-Line Fix Eliminated a 400x Performance Gap | QuestDB

This blog post delves into an OpenJDK commit that replaced slow /proc file parsing with a single syscall, revealing a 400x performance gap. The change involved replacing complex file I/O and parsing with a direct clock_gettime() call, significantly improving performance. The post also explores further optimizations, including exploiting a fast-path in the Linux kernel for even better results.

When Google Locked the Door, Three MIT Students Picked the Lock

When Google restricted commercial use of AlphaFold 3, three MIT PhD students reverse-engineered it and launched Boltz. They released their version under an open-source license, allowing anyone to use it commercially. Boltz secured a $28M seed round, a Pfizer partnership, and aims to provide open-source infrastructure for drug discovery. The company charges for enterprise services rather than the models themselves. While Boltz-2 matches AlphaFold 3 in accuracy, it runs 1,000 times faster and at a fraction of the cost. However, AI-discovered drugs still face the same high failure rates in clinical trials as traditional methods.

Predator iOS Malware: Building a Surveillance Framework - Part 1

This technical deep-dive reverse-engineers Predator spyware's internal factory architecture, revealing how it dynamically creates camera monitoring, VoIP interception, and keylogging modules through Unix socket commands.

How Did TVs Get So Cheap?

This article explores how the price of TVs has dramatically decreased over the past 25 years, driven by the rise of LCD technology, larger manufacturing scales, and technological advancements in semiconductor production. The cost of LCD TVs has fallen by over 90% due to factors such as the use of larger sheets of mother glass, innovations in manufacturing processes, and economies of scale.

The German Federal Intelligence Service (BND) wiretapped US President Barack Obama for years

The German intelligence service regularly monitored the telephone calls of the then US president aboard Air Force One. The BND did not have permission from Angela Merkel.

UL Solutions withdraws as lead admin for FCC cyber label program amid probe into China ties

It’s not immediately clear who would administer the program, which was launched under Biden to help designate cyber-secure consumer electronic devices.

Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware

Group-IB researchers detail the inner workings of Chinese tap-to-pay schemes on Telegram and examine the NFC-enabled Android apps fraudsters are using to steal money from victim’s bank cards and mobile wallets remotely.

NitroGen: A Foundation Model for Generalist Gaming Agents

NitroGen is an open foundation model for generalist gaming agents, trained on a large video-action gameplay dataset. It can be adapted to unseen games and requires Windows games for running the agent. Users need to set up an inference server and specify the game executable for the agent to play.