Former Ubiquiti employee charged with hacking and extorting company
https://therecord.media/former-ubiquiti-employee-charged-with-hacking-and-extorting-company/
A Peek Inside Anom, the Phone Company Secretly Used in an FBI Honeypot
https://www.vice.com/en/article/n7nnmg/inside-anom-video-operation-trojan-shield-ironside
Suspected Chinese hackers breach more US defense and tech firms | CNN Politics
https://www.cnn.com/2021/12/02/politics/china-hackers-espionage-defense-contractors/index.html
InfoSec Handlers Diary Blog - SANS Internet Storm Center
https://i5c.us/d28092
InfoSec Jupyterthon 2021 - Day 1 - YouTube
https://aka.ms/Jupyterthon2021Live1
Jumping the air gap: 15 years of nation‑state effort | WeLiveSecurity
https://www.welivesecurity.com/2021/12/01/jumping-air-gap-15-years-nation-state-effort/
Project Zero: This shouldn't have happened: A vulnerability postmortem
https://googleprojectzero.blogspot.com/2021/12/this-shouldnt-have-happened.html
405 Banned
https://urlhaus.abuse.ch/browse/tag/emotet/
APT Conducts Active Campaign Against ManageEngine ServiceDesk Plus
https://unit42.paloaltonetworks.com/tiltedtemple-manageengine-servicedesk-plus/
Former Ubiquiti dev charged for trying to extort his employer
https://www.bleepingcomputer.com/news/security/former-ubiquiti-dev-charged-for-trying-to-extort-his-employer/
Researchers Warn Iranian Users of Widespread SMS Phishing Campaigns
https://thehackernews.com/2021/12/researchers-warn-iranian-users-of.html
New malware hides as legit nginx process on e-commerce servers
https://www.bleepingcomputer.com/news/security/new-malware-hides-as-legit-nginx-process-on-e-commerce-servers/
Tweet / Twitter
https://twitter.com/campuscodi/status/1466217906606329860
Microsoft Teams - Disabling chat with personal accounts - Cloudrun
https://cloudrun.co.uk/teams/disable-chat-teams-personal/
Researches Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks
https://thehackernews.com/2021/12/researches-detail-17-malicious.html
BleepingComputer on Twitter: "A former Ubiquiti employee was arrested and charged today with stealing confidential files from the company's AWS and GitHub infrastructure and attempting to extort his employer while posing as an anonymous hacker and a whistleblower - @serghei https://t.co/tiDvqi1ltv" / Twitter
https://twitter.com/BleepinComputer/status/1466181293285249028
Critical Bug in Mozilla's NSS Crypto Library Potentially Affects Several Other Software
https://thehackernews.com/2021/12/critical-bug-in-mozillas-nss-crypto.html
The Cyber Startup Observatory - The Global Cyber Innovation Network
https://cyberstartupobservatory.com
Hakluke: Creating the Perfect Bug Bounty Automation - Detectify Labs
https://labs.detectify.com/2021/11/30/hakluke-creating-the-perfect-bug-bounty-automation/
Emotet now spreads via fake Adobe Windows App Installer packages
https://www.bleepingcomputer.com/news/security/emotet-now-spreads-via-fake-adobe-windows-app-installer-packages/
Hackers Steal $119M From ‘Web3’ Crypto Project With Old School Attack
https://www.vice.com/en/article/pkpp4n/hackers-steal-dollar119m-from-web3-crypto-project-with-old-school-attack
abuse.ch on Twitter: "Emotet's activity yesterday was huge in terms of unique #Emotet malware distribution sites reported to URLhaus 📢 It was an uptick of +447% compared to end of November! 🔥 👉 https://t.co/fkDITyH9GT https://t.co/iMJucbojgM" / Twitter
https://twitter.com/abuse_ch/status/1466347854109282305
Nine WiFi routers used by millions were vulnerable to 226 flaws
https://www.bleepingcomputer.com/news/security/nine-wifi-routers-used-by-millions-were-vulnerable-to-226-flaws/
Disclosing state-linked information operations we've removed
https://blog.twitter.com/en_us/topics/company/2021/disclosing-state-linked-information-operations-we-ve-removed.html
Будет ли война? Государство сломалось, Хованский и Моргенштерн - YouTube
http://youtu.be/DqC4GBVi60E
Injection is the New Black: Novel RTF Template Inject Technique Poised for Widespread Adoption Beyond APT Actors | Proofpoint US
https://www.proofpoint.com/us/blog/threat-insight/injection-new-black-novel-rtf-template-inject-technique-poised-widespread
https://bit.ly/3ChiQsE
https://bit.ly/3ChiQsE
Signal >> Blog >> Become a Signal Sustainer
https://signal.org/blog/become-a-signal-sustainer/
Hackers Are Spamming Businesses’ Receipt Printers With ‘Antiwork’ Manifestos
https://www.vice.com/en/article/qjbb9d/hackers-are-spamming-businesses-receipt-printers-with-antiwork-manifestos