02/27

PRESS RELEASE: Future Software Should Be Memory Safe | ONCD | The White House

https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/
PRESS RELEASE: Future Software Should Be Memory Safe | ONCD | The White House

NIST Cybersecurity Framework 2.0 Officially Released - SecurityWeek

https://www.securityweek.com/nist-cybersecurity-framework-2-0-officially-released/
NIST Cybersecurity Framework 2.0 Officially Released - SecurityWeek

UnitedHealth subsidiary Optum hack linked to BlackCat ransomware

https://www.bleepingcomputer.com/news/security/unitedhealth-subsidiary-optum-hack-linked-to-blackcat-ransomware/
UnitedHealth subsidiary Optum hack linked to BlackCat ransomware

GitHub - TrungNguyen1909/qemu-t8030: iPhone 11 emulated on QEMU

https://github.com/TrungNguyen1909/qemu-t8030
GitHub - TrungNguyen1909/qemu-t8030: iPhone 11 emulated on QEMU

WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

https://thehackernews.com/2024/02/wordpress-litespeed-plugin.html
WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

https://thehackernews.com/2024/02/five-eyes-agencies-expose-apt29s.html
Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

Zyxel fixed four bugs in firewalls and access points

https://securityaffairs.com/159624/hacking/zyxel-firewalls-aps-flaws.html
Zyxel fixed four bugs in firewalls and access points

Finding and Exploiting .NET Remoting over HTTP using Deserialisation | Soroush Dalili (@irsdl) Blog

https://soroush.me/blog/2019/03/finding-and-exploiting-net-remoting-over-http-using-deserialisation/
Finding and Exploiting .NET Remoting over HTTP using Deserialisation | Soroush Dalili (@irsdl) Blog

Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

https://thehackernews.com/2024/02/open-source-xeno-rat-trojan-emerges-as.html
Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

https://thehackernews.com/2024/02/wordpress-plugin-alert-critical-sqli.html
WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

https://blog.morphisec.com/unveiling-uac-0184-the-remcos-rat-steganography-saga
Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

Russia-linked APT29 switched to targeting cloud services

https://securityaffairs.com/159629/apt/apt29-targeting-cloud-services.html
Russia-linked APT29 switched to targeting cloud services

Canada's RCMP, Global Affairs Hit by Cyberattacks - SecurityWeek

https://www.securityweek.com/canadas-rcmp-global-affairs-hit-by-cyberattacks/
Canada's RCMP, Global Affairs Hit by Cyberattacks - SecurityWeek

The Linux CNA – Red Flags Since 2022 – Rants of a deranged squirrel.

https://jericho.blog/2024/02/26/the-linux-cna-red-flags-since-2022/
The Linux CNA – Red Flags Since 2022 – Rants of a deranged squirrel.

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

https://thehackernews.com/2024/02/new-hugging-face-vulnerability-exposes.html
New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

Android banking trojans: How they steal passwords and drain bank accounts | Malwarebytes

https://www.malwarebytes.com/blog/news/2024/02/android-banking-trojans-how-they-steal-passwords-and-drain-bank-accounts
Android banking trojans: How they steal passwords and drain bank accounts | Malwarebytes

FBI, CISA warn US hospitals of targeted BlackCat ransomware attacks

https://www.bleepingcomputer.com/news/security/fbi-cisa-warn-us-hospitals-of-targeted-blackcat-ransomware-attacks/
FBI, CISA warn US hospitals of targeted BlackCat ransomware attacks

Black Basta, Bl00dy ransomware gangs join ScreenConnect attacks

https://www.bleepingcomputer.com/news/security/black-basta-bl00dy-ransomware-gangs-join-screenconnect-attacks/
Black Basta, Bl00dy ransomware gangs join ScreenConnect attacks

SEO Poisoning to Domain Control: The Gootloader Saga Continues - The DFIR Report

https://thedfirreport.com/2024/02/26/seo-poisoning-to-domain-control-the-gootloader-saga-continues/
SEO Poisoning to Domain Control: The Gootloader Saga Continues - The DFIR Report

Unveiling the Server-Side Prototype Pollution Gadgets Scanner · Doyensec's Blog

https://blog.doyensec.com/2024/02/17/server-side-prototype-pollution-Gadgets-scanner.html
Unveiling the Server-Side Prototype Pollution Gadgets Scanner · Doyensec's Blog

Windows February 2024 updates fail to install with 0x800F0922 errors

https://www.bleepingcomputer.com/news/microsoft/windows-february-2024-updates-fail-to-install-with-0x800f0922-errors/
Windows February 2024 updates fail to install with 0x800F0922 errors

Domains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security - SecurityWeek

https://www.securityweek.com/domains-once-owned-by-major-firms-help-millions-of-spam-emails-bypass-security/
Domains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security - SecurityWeek

Black Basta, Bl00dy Ransomware Exploiting Recent ScreenConnect Flaws - SecurityWeek

https://www.securityweek.com/black-basta-bl00dy-ransomware-exploiting-recent-screenconnect-flaws/
Black Basta, Bl00dy Ransomware Exploiting Recent ScreenConnect Flaws - SecurityWeek