Midnight Blizzard: Guidance for responders on nation-state attack | Microsoft Security Blog
https://www.microsoft.com/en-us/security/blog/2024/01/25/midnight-blizzard-guidance-for-responders-on-nation-state-attack/
GitHub - binganao/CVE-2024-23897
https://github.com/binganao/CVE-2024-23897
Binary Defense - Director of Security Research - REMOTE
https://recruiting.paylocity.com/Recruiting/Jobs/Details/2198042
Rook to XSS: How I hacked chess.com with a rookie exploit
https://skii.dev/rook-to-xss/
Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems
https://thehackernews.com/2024/01/critical-cisco-flaw-lets-hackers.html
23andMe data breach: Hackers stole raw genotype data, health reports
https://www.bleepingcomputer.com/news/security/23andme-data-breach-hackers-stole-raw-genotype-data-health-reports/
Malicious Ads on Google Target Chinese Users with Fake Messaging Apps
https://thehackernews.com/2024/01/malicious-ads-on-google-target-chinese.html
GitHub - gquere/pwn_jenkins: Notes about attacking Jenkins servers
https://github.com/gquere/pwn_jenkins
Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs
https://thehackernews.com/2024/01/microsoft-warns-of-widening-apt29.html
Perfecting the Defense-in-Depth Strategy with Automation
https://thehackernews.com/2024/01/perfecting-defense-in-depth-strategy.html
Chess.com - Play Chess Online - Free Games
http://chess.com
NSPX30: A sophisticated AitM-enabled implant evolving since 2005
https://www.welivesecurity.com/en/eset-research/nspx30-sophisticated-aitm-enabled-implant-evolving-since-2005/
Azure Privilege Escalation via Azure API Permissions Abuse | by Andy Robbins | Posts By SpecterOps Team Members
http://RoleAssignment.ReadWrite.Directory
Russian TrickBot Mastermind Gets 5-Year Prison Sentence for Cybercrime Spree
https://thehackernews.com/2024/01/russian-trickbot-mastermind-gets-5-year.html
GitHub - h4x0r-dz/CVE-2024-23897: CVE-2024-23897
https://github.com/h4x0r-dz/CVE-2024-23897
GitHub - dxxzero/rusty_drivers: BYOVD collection
https://github.com/dxxzero/rusty_drivers
CrowdStrike CEO: Microsoft Explanation For Russia Hack Doesn’t Add Up
https://www.crn.com/news/security/2024/crowdstrike-ceo-microsoft-explanation-for-russia-hack-doesn-t-add-up
Longer passwords aren't safe from intensive cracking efforts - Help Net Security
https://www.helpnetsecurity.com/2024/01/26/weak-passwords/
Microsoft releases first Windows Server 2025 preview build
https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-first-windows-server-2025-preview-build/
Steven Sinofsky on X: "CrowdStrike CEO: Microsoft Explanation For Russia Hack Doesn’t Add Up https://t.co/vrXcVZQ34N https://t.co/FtWzzcdLcr" / X
https://twitter.com/stevesi/status/1750345278576853455
Pwn2Own Automotive: $1.3M for 49 zero-days, Tesla hacked twice
https://www.bleepingcomputer.com/news/security/pwn2own-automotive-13m-for-49-zero-days-tesla-hacked-twice/
Microsoft reveals how hackers breached its Exchange Online accounts
https://www.bleepingcomputer.com/news/security/microsoft-reveals-how-hackers-breached-its-exchange-online-accounts/
Active Directory Pentesting Lab Setup - Pentestguy
https://pentestguy.com/active-directory-pentesting-lab-setup/
Ukraine: Hack wiped 2 petabytes of data from Russian research center
https://www.bleepingcomputer.com/news/security/ukraine-hack-wiped-2-petabytes-of-data-from-russian-research-center/
Apple announces changes to iOS, Safari, and the App Store in the European Union - Apple
https://www.apple.com/newsroom/2024/01/apple-announces-changes-to-ios-safari-and-the-app-store-in-the-european-union/
GitHub - RomanRybachek/CVE-2024-20698: Analysis of the vulnerability
https://github.com/RomanRybachek/CVE-2024-20698
Midnight Blizzard APT is targeting orgs worldwide, Microsoft warns
https://securityaffairs.com/158164/apt/midnight-blizzard-apt-cyberespionage.html
Pwn2Own Automotive 2024 Day 2 - Tesla hacked again
https://securityaffairs.com/158141/hacking/pwn2own-automotive-2024-day-two.html
Malicious ads for restricted messaging applications target Chinese users | Malwarebytes
https://www.malwarebytes.com/blog/threat-intelligence/2024/01/malicious-ads-for-restricted-messaging-applications-target-chinese-users
Microsoft Teams outage causes connection issues, message delays
https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-outage-causes-connection-issues-message-delays/
GitHub - zodiacon/QuickAsm
https://github.com/zodiacon/QuickAsm
https://raw.githubusercontent.com/executemalware/Malware-IOCs/main/2024-01-26%20DarkGate%20IOCs
https://raw.githubusercontent.com/executemalware/Malware-IOCs/main/2024-01-26%20DarkGate%20IOCs