Kelvin Arcelay

Enterprise Risk Management
Cybersecurity and Compliance Programs
International Deployments
Cross-functional Team Leadership

[Lukasz Olejnik @lukOlejnik]

Amazon is holding a mandatory meeting about AI breaking its systems. The official framing is "part of normal business." The briefing note describes a trend of incidents with "high blast radius" caused by "Gen-AI assisted changes" for which "best practices and safeguards are not yet fully established." Translation to human language: we gave AI to engineers and things keep breaking?
The response for now? Junior and mid-level engineers can no longer push AI-assisted code without a senior signing off. AWS spent 13 hours recovering after its own AI coding tool, asked to make some changes, decided instead to delete and recreate the environment (the software equivalent of fixing a leaky tap by knocking down the wall). Amazon called that an "extremely limited event" (the affected tool served customers in mainland China).

[Nick Frichette @Frichette_n]

A little over a year ago I published research on how you could leverage non-production AWS API endpoints to enumerate permissions without logging to CloudTrail. A year later...I'm still finding them. Red Teamers, these can be super useful and really up your game!

[Nicolas Krassas @Dinosn]

PoC Exploit Released for CVE-2024-30085: Windows Elevation of Privilege Vulnerability https://t.co/atlD3UUkYm

[BleepingComputer @BleepinComputer]

Ubuntu Linux impacted by decade-old 'needrestart' flaw that gives root - @billtoulas
https://t.co/CEErDP6pkp

https://t.co/CEErDP6pkp

[Kelvin Arcelay @karcelay]

No mfa....no network segmentation...: https://t.co/ISJVpNxiTq

[Kelvin Arcelay @karcelay]

https://t.co/a9djZbAMye

[Kelvin Arcelay @karcelay]

Microsoft will soon let you clone your voice for Teams meetings https://t.co/ZzrDfGskpD via @techcrunch

[Kelvin Arcelay @karcelay]

Ohio man behind Helix Bitcoin launderette jailed for three years, hands over $400M https://t.co/EoF8Yn70yv via @theregister

[Kelvin Arcelay @karcelay]

Chinese Cyber-Espionage Hits T-Mobile Amid International Telecom Breaches https://t.co/Dmsdo5CUcx

[Dark Web Intelligence @DailyDarkWeb]

#Spain 🇪🇸 - Aviva Database Allegedly Leaked

Reports have surfaced of a potential data breach impacting Aviva’s Spanish customer database. This alleged leak includes approximately 2.7 million records with sensitive information, such as IDs, full names, and IBANs, amounting to 288MB of data. The breach could pose significant risks to the privacy and financial security of Aviva’s customers in Spain.

https://t.co/iLF00jaRcx

#cybersecurity #databreach #Aviva #Spain

[Kelvin Arcelay @karcelay]

https://t.co/BCeAKq8Wgu

[BleepingComputer @BleepinComputer]

New tool bypasses Google Chrome’s new cookie encryption system - @billtoulas
https://t.co/MWXKTfFpy8

https://t.co/MWXKTfFpy8

[Hackmanac @H4ckmanac]

🚨DDoS ‼️

🇮🇱Israel - Shva

On October 29, 2024, a denial-of-service (DoS) cyberattack targeted Shva, Israel's main provider of IT services for the banking sector, disrupting credit card transactions across various businesses.

The attack began at 7 a.m. and led to issues in transaction approvals for companies connected to Shva's network. The disruption was resolved by 9:50 a.m., with regular service restored.

Though the attacker was not officially identified, reports from Bizportal suggest that "Anonymous Sudan," a group allegedly linked to Iran, may be responsible, having previously attacked Israeli entities.

More details:
https://t.co/XRWXRBn4QM

[Nicolas Krassas @Dinosn]

CVE-2024-46483 (CVSS 9.8): Xlight FTP Server Flaw Leaves Users Exposed to Remote Attacks, PoC Published https://t.co/fzZCdsmcP0

[Kelvin Arcelay @karcelay]

The Strava problem: how the fitness app was used to locate the world’s most powerful people - https://t.co/Qwb1KtWjAG

[Kelvin Arcelay @karcelay]

TSA silent on CrowdStrike’s claim Delta skipped required security update - https://t.co/4abX2XWUol

[Nicolas Krassas @Dinosn]

ssh-mitm: intercepting proxy server for security audits https://t.co/Z6OJW4OMKe

[Kelvin Arcelay @karcelay]

New law in Australia will require mandatory reporting of ransomware payments https://t.co/pW0AuI52PD @TheRecord_Media

[Kelvin Arcelay @karcelay]

Finland’s Top Power Utility Targeted With Daily Cyber Attacks | https://t.co/t7gsdOu04C https://t.co/U564k6zInU #oilprice