08/11

Lapsus$ hackers took SIM-swapping attacks to the next level

https://www.bleepingcomputer.com/news/security/lapsus-hackers-took-sim-swapping-attacks-to-the-next-level/
Lapsus$ hackers took SIM-swapping attacks to the next level

Diving into Windows Remote Access Service for Pre-Auth Bugs - Black Hat USA 2023 | Briefings Schedule

https://www.blackhat.com/us-23/briefings/schedule/#diving-into-windows-remote-access-service-for-pre-auth-bugs-31968
Diving into Windows Remote Access Service for Pre-Auth Bugs - Black Hat USA 2023 | Briefings Schedule

Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus

https://thehackernews.com/2023/08/researchers-uncover-decade-long-cyber.html
Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus

16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

https://thehackernews.com/2023/08/15-new-codesys-sdk-flaws-expose-ot.html
16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

https://thehackernews.com/2023/08/cisa-adds-microsoft-net-vulnerability.html
CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

Technology Integration: Mandiant

https://developers.virustotal.com/docs/technology-integration-mandiant
Technology Integration: Mandiant

Xiaomi's MIUI now flags Telegram as dangerous in China

https://www.bleepingcomputer.com/news/technology/xiaomis-miui-now-flags-telegram-as-dangerous-in-china/
Xiaomi's MIUI now flags Telegram as dangerous in China

Researchers Shed Light on APT31's Advanced Backdoors and Data Exfiltration Tactics

https://thehackernews.com/2023/08/researchers-shed-light-on-apt31s.html
Researchers Shed Light on APT31's Advanced Backdoors and Data Exfiltration Tactics

SysPWN – VR for Pwn2Own | NCC Group Research Blog | Making the world safer and more secure

https://research.nccgroup.com/2023/08/11/syspwn-vr-for-pwn2own/
SysPWN – VR for Pwn2Own | NCC Group Research Blog | Making the world safer and more secure

AntiFuzz: Impeding Fuzzing Audits of Binary Executables | USENIX

https://www.usenix.org/conference/usenixsecurity19/presentation/guler
AntiFuzz: Impeding Fuzzing Audits of Binary Executables | USENIX

Sydney Australia 2024 | Corelan Training

https://www.corelan-training.com/index.php/events/sydney-australia-2024/
Sydney Australia 2024 | Corelan Training

LOLEKHosted admin arrested for aiding Netwalker ransomware gang

https://www.bleepingcomputer.com/news/security/police-seize-lolek-bulletproof-service-for-hosting-malware/
LOLEKHosted admin arrested for aiding Netwalker ransomware gang

Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116

https://thehackernews.com/2023/08/enhancing-tls-security-google-adds.html
Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116

New SystemBC Malware Variant Targets Southern African Power Company

https://thehackernews.com/2023/08/new-systembc-malware-variant-targets.html
New SystemBC Malware Variant Targets Southern African Power Company

Mac systems turned into proxy exit nodes by AdLoad

https://cybersecurity.att.com/blogs/labs-research/mac-systems-turned-into-proxy-exit-nodes-by-adload
Mac systems turned into proxy exit nodes by AdLoad

Veilid

http://Veilid.com
Veilid

Gafgyt botnet is targeting EoL Zyxel routersSecurity Affairs

https://securityaffairs.com/149417/cyber-crime/gafgyt-botnet-targets-zyxel-p660hn-t1a-routers.html
Gafgyt botnet is targeting EoL Zyxel routersSecurity Affairs

NSA chief: Chinese cyber spies continue to improve — but haven't surpassed US

https://therecord.media/chinese-cyber-spies-improve-but-have-not-eclipsed-nsa
NSA chief: Chinese cyber spies continue to improve — but haven't surpassed US

Amazon AWS distances itself from Moq amid data collection controversy

https://www.bleepingcomputer.com/news/security/amazon-aws-withdraws-moq-sponsorship-amid-data-collection-controversy/
Amazon AWS distances itself from Moq amid data collection controversy

US cyber safety board to analyze Microsoft Exchange hack of govt emails

https://www.bleepingcomputer.com/news/security/us-cyber-safety-board-to-analyze-microsoft-exchange-hack-of-govt-emails/
US cyber safety board to analyze Microsoft Exchange hack of govt emails

Industrial PLCs worldwide impacted by CODESYS V3 RCE flaws

https://www.bleepingcomputer.com/news/security/industrial-plcs-worldwide-impacted-by-codesys-v3-rce-flaws/
Industrial PLCs worldwide impacted by CODESYS V3 RCE flaws

Falcon Complete: Zero-Day Exploit Case Study | CrowdStrike

https://www.crowdstrike.com/blog/falcon-complete-zero-day-exploit-cve-2023-36874/
Falcon Complete: Zero-Day Exploit Case Study | CrowdStrike

Microsoft Exchange updates pulled after breaking non-English installs

https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-updates-pulled-after-breaking-non-english-installs/
Microsoft Exchange updates pulled after breaking non-English installs

David Lee - Library Aid II-III - Arizona State University | LinkedIn

https://www.linkedin.com/in/david-lee-93a20713b
David Lee - Library Aid II-III - Arizona State University | LinkedIn

Log in to Twitter / X

https://twitter.com/i/broadcasts/1jMKgLBAkbqGL
Log in to Twitter / X

Black Hat USA 2023 - Announcements Summary - SecurityWeek

https://www.securityweek.com/black-hat-usa-2023-announcements-summary/
Black Hat USA 2023 - Announcements Summary - SecurityWeek