Hacking the Canon imageCLASS MF742Cdw/MF743Cdw (again) - HAXX.IN
https://haxx.in/posts/hacking-canon-imageclass/
Releases · hasherezade/hollows_hunter
https://github.com/hasherezade/hollows_hunter/releases
Releases · hasherezade/pe-sieve
https://github.com/hasherezade/pe-sieve/releases
Abusing Slack for Offensive Operations: Part 2 | by Matt Creel | Nov, 2023 | Posts By SpecterOps Team Members
https://posts.specterops.io/abusing-slack-for-offensive-operations-part-2-19fef38cc967
Sandworm Disrupts Power in Ukraine Using a Novel Attack Against Operational Technology | Mandiant
https://www.mandiant.com/resources/blog/sandworm-disrupts-power-ukraine-operational-technology
OpenAI confirms DDoS attacks behind ongoing ChatGPT outages
https://www.bleepingcomputer.com/news/security/openai-confirms-ddos-attacks-behind-ongoing-chatgpt-outages/
MuddyC2Go: New C2 Framework Iranian Hackers Using Against Israel
https://thehackernews.com/2023/11/muddyc2go-new-c2-framework-iranian.html
New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers
https://thehackernews.com/2023/11/new-malvertising-campaign-uses-fake.html
Industrial and Commercial Bank of China hit by ransomware attack
https://www.bleepingcomputer.com/news/security/industrial-and-commercial-bank-of-china-hit-by-ransomware-attack/
Signal tests usernames that keep your phone number private
https://www.bleepingcomputer.com/news/software/signal-tests-usernames-that-keep-your-phone-number-private/
Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability
https://thehackernews.com/2023/11/zero-day-alert-lace-tempest-exploits.html
Special Offer for Asia Pacific Students | SANS Online Training
https://www.sans.org/u/1ttd
From Akamai to F5 to NTLM... with love.
https://blog.malicious.group/from-akamai-to-f5-to-ntlm/
Russian hackers switch to LOTL technique to cause power outage
https://www.bleepingcomputer.com/news/security/russian-hackers-switch-to-lotl-technique-to-cause-power-outage/
Uncoder AI: Active Threat-Informed Defense | Sigma Rules & ATT&CK
http://Uncoder.IO
CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation
https://thehackernews.com/2023/11/cisa-alerts-high-severity-slp.html
Analysis file.exe (MD5: 56B7F9A65FBAB95E2C854B96C68FFEE2) Malicious activity - Interactive analysis ANY.RUN
https://app.any.run/tasks/1c1e3e97-601d-4fdc-b541-f19e9c8d0b17
Modern-Asian-APT-groups-TTPs_report_eng.pdf
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/11/09055246/Modern-Asian-APT-groups-TTPs_report_eng.pdf
Malvertiser copies PC news site to deliver infostealer | Malwarebytes
https://www.malwarebytes.com/blog/threat-intelligence/2023/11/malvertiser-copies-pc-news-site-to-deliver-infostealer
Russian Sandworm disrupts power in Ukraine with a new OT attack
https://securityaffairs.com/153920/apt/russian-sandworm-ot-attacks.html
Analysis Nonempathically.scr (MD5: 8A879CBD93200491381361B883554BAB) Malicious activity - Interactive analysis ANY.RUN
https://app.any.run/tasks/1092cd8b-7a17-40c3-87de-c4c91f45722b/
Microsoft shares threat intelligence at CYBERWARCON 2023 | Microsoft Security Blog
https://www.microsoft.com/en-us/security/blog/2023/11/09/microsoft-shares-threat-intelligence-at-cyberwarcon-2023/
Google ads push malicious CPU-Z app from fake Windows news site
https://www.bleepingcomputer.com/news/security/google-ads-push-malicious-cpu-z-app-from-fake-windows-news-site/
Windows Malware in C# — Using Github as C2 | by Yua Mikanana | Nov, 2023 | Medium
https://medium.com/@yua.mikanana19/windows-malware-in-c-using-github-as-c2-7ae95dfe37bd
Uncoder AI: Active Threat-Informed Defense | Sigma Rules & ATT&CK
https://uncoder.io
Hacking Like Hollywood With Hard-Coded Secrets | Frycos Security Diary
https://frycos.github.io/vulns4free/2023/11/07/hacking-like-hollywood.html
Fantastic Windows Logon types and Where to Find Credentials in Them
https://www.alteredsecurity.com/post/fantastic-windows-logon-types-and-where-to-find-credentials-in-them
SysAid Zero-Day Vulnerability Exploited by Ransomware Group - SecurityWeek
https://www.securityweek.com/sysaid-zero-day-vulnerability-exploited-by-ransomware-group/
Major ChatGPT Outage Caused by DDoS Attack - SecurityWeek
https://www.securityweek.com/major-chatgpt-outage-caused-by-ddos-attack/
Abusing Microsoft Access "Linked Table" Feature to Perform NTLM Forced Authentication Attacks - Check Point Research
https://research.checkpoint.com/2023/abusing-microsoft-access-linked-table-feature-to-perform-ntlm-forced-authentication-attacks/