Tootfinder

ServiceNow announces a deal to acquire identity security startup Veza, sources say for between $1B and $1.5B; Veza had a private valuation of $808M in March (Valida Pau/The Information)
https://www.theinformation.com/articles/servicenows…

ServiceNow’s $1 Billion-Plus Acquisition Aimed at Winning Agent War
Dealmakers apparently did not get much of a break over the Thanksgiving weekend, as a flurry of recent merger announcements showed. In just the last day, The Information broke the news that Marvell Technology was buying photonics startup Celestial for billions of dollars and Anthropic was making ...

Cybersecurity firm @… has a new blog out on how to use Azure Blob storage as a C2 for their Mythic C2 framework. This is a difficult one to defend against as it’s really hard to develop and maintain an enterprise-wide allow list for blob storage URLs. But it is a reminder to look for these URLs in your threat hunts.

Weaponizing Whitelists: An Azure Blob Storage Mythic C2 Profile
Mature enterprises lock down egress but often carve out broad exceptions for trusted cloud services. This post shows how reviewing deployment guides can help identify those exceptions and weaponize them with a new Mythic C2 profile called azureBlob.

[M]any consumers might not realize the privacy risks just by glancing at the flyer sent to them, according to Florian Schaub, associate professor at the University of Michigan School of Information.
"The privacy policy is very specific that we're going to track everything, including what you do in Incognito Windows. Previously anonymous data may now be identifiable. All those risks are not disclosed here," Schaub said, after reviewing a copy of the flyer.