PSIRT | FortiGuard
https://fortiguard.fortinet.com/psirt/FG-IR-24-015
Wall Mounted Toothbrush Sanitizer / Squeezer
https://store.fortinet.com/wall-mounted-toothbrush-sanitizer-squeezer/product/100046
New RustDoor macOS malware impersonates Visual Studio update
https://www.bleepingcomputer.com/news/security/new-rustdoor-macos-malware-impersonates-visual-studio-update/
New Fortinet RCE bug is actively exploited, CISA confirms
https://www.bleepingcomputer.com/news/security/new-fortinet-rce-bug-is-actively-exploited-cisa-confirms/
Stealthy Zardoor Backdoor Targets Saudi Islamic Charity Organization
https://thehackernews.com/2024/02/stealthy-zardoor-backdoor-targets-saudi.html
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation
https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html
Americans lost record $10 billion to fraud in 2023, FTC warns
https://www.bleepingcomputer.com/news/security/americans-lost-record-10-billion-to-fraud-in-2023-ftc-warns/
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
District of Massachusetts | International Cybercrime Malware Service Dismantled by Federal Authorities | United States Department of Justice
https://www.justice.gov/usao-ma/pr/international-cybercrime-malware-service-dismantled-federal-authorities
MoqHao Android Malware Evolves with Auto-Execution Capability
https://thehackernews.com/2024/02/new-variant-of-moqhao-android-malware.html
PSIRT | FortiGuard
https://www.fortiguard.com/psirt/FG-IR-24-029
Raspberry Robin Malware Upgrades with Discord Spread and New Exploits
https://thehackernews.com/2024/02/raspberry-robin-malware-upgrades-with.html
SANS 2024 in Orlando, FL | Cyber Security Training
https://www.sans.org/u/1uvk
New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack
https://thehackernews.com/2024/02/new-coyote-trojan-targets-61-brazilian.html
Fake LastPass password manager spotted on Apple’s App Store
https://www.bleepingcomputer.com/news/security/fake-lastpass-password-manager-spotted-on-apples-app-store/
AnyDesk Shares More Information on Recent Hack - SecurityWeek
https://www.securityweek.com/anydesk-shares-more-information-on-recent-hack/
PSIRT | FortiGuard
https://www.fortiguard.com/psirt/FG-IR-24-015
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
https://www.bleepingcomputer.com/news/security/new-fortinet-rce-flaw-in-ssl-vpn-likely-exploited-in-attacks/
FBI and CISA publish guide to Living off the Land techniques | Malwarebytes
https://www.malwarebytes.com/blog/news/2024/02/fbi-and-cisa-publish-guide-to-living-off-the-land-techniques
Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks - SecurityWeek
https://www.securityweek.com/fortinet-apts-exploiting-fortios-vulnerabilities-in-critical-infrastructure-attacks/
Ivanti warns of a new auth bypass flaw in its Connect Secure, Policy Secure, and ZTA gateway devices
https://securityaffairs.com/158889/security/ivanti-warns-auth-bypass-flaw.html
Black Basta ransomware gang hacked Hyundai Motor Europe
https://securityaffairs.com/158916/data-breach/black-basta-ransomware-hyundai-motor-europe.html
Fortinet warns of a new actively exploited RCE flaw in FortiOS SSL VPN
https://securityaffairs.com/158908/hacking/fortinet-fortios-rce-exploitation.html
Juniper Support Portal Exposed Customer Device Info – Krebs on Security
https://krebsonsecurity.com/2024/02/juniper-support-portal-exposed-customer-device-info/
Canada to ban the Flipper Zero to stop surge in car thefts
https://www.bleepingcomputer.com/news/security/canada-wants-to-ban-the-flipper-zero-to-stop-surge-in-car-thefts/
New MacOS Backdoor Written in Rust Shows Possible Link with Windows Ransomware Group
https://www.bitdefender.com/blog/labs/new-macos-backdoor-written-in-rust-shows-possible-link-with-windows-ransomware-group/
Reverse Engineering with Binary Ninja (Binja) / X
https://twitter.com/i/broadcasts/1yoJMwLVpaNKQ
Exploiting a vulnerable Minifilter Driver to create a process killer
https://securityaffairs.com/158926/hacking/process-killer-with-minifilter-driver.html
Form Tools Remote Code Execution: We Need To Talk About PHP
https://labs.watchtowr.com/form-tools-we-need-to-talk-about-php/
Tyranid's Lair: Sudo On Windows a Quick Rundown
https://www.tiraniddo.dev/2024/02/sudo-on-windows-quick-rundown.html
JSON Smuggling: A far-fetched intrusion detection evasion technique | by Grimminck | Feb, 2024 | Medium
https://grimminck.medium.com/json-smuggling-a-far-fetched-intrusion-detection-evasion-technique-51ed8f5ee05f
Puckungfu 2: Another NETGEAR WAN Command Injection | NCC Group Research Blog | Making the world safer and more secure
https://research.nccgroup.com/2024/02/09/puckungfu-2-another-netgear-wan-command-injection/
GitHub - narfindustries/http-garden: Differential testing and fuzzing of HTTP servers and proxies
https://github.com/narfindustries/http-garden
Flipping Out for the M1 - Hackster.io
https://www.google.com/amp/s/www.hackster.io/news/flipping-out-for-the-m1-b86efae35a31.amp
Ivanti Connect Secure CVE-2024-22024 - Are We Now Part Of Ivanti?
https://labs.watchtowr.com/are-we-now-part-of-ivanti/
Fortinet Warns of New FortiOS Zero-Day - SecurityWeek
https://www.securityweek.com/fortinet-warns-of-new-fortios-zero-day/
Ivanti: Patch new Connect Secure auth bypass bug immediately
https://www.bleepingcomputer.com/news/security/ivanti-patch-new-connect-secure-auth-bypass-bug-immediately/