03/18

AT&T says leaked data of 70 million people is not from its systems

https://www.bleepingcomputer.com/news/security/att-says-leaked-data-of-70-million-people-is-not-from-its-systems/
AT&T says leaked data of 70 million people is not from its systems

Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

https://thehackernews.com/2024/03/hackers-using-sneaky-html-smuggling-to.html
Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

Publications | FortiGuard

https://www.fortiguard.com/events/5403/nullcon-berlin-2024-the-complexity-of-reversing-flutter-applications
Publications | FortiGuard

APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

https://thehackernews.com/2024/03/apt28-hacker-group-targeting-europe.html
APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

https://thehackernews.com/2024/03/wordpress-admins-urged-to-remove.html
WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

https://thehackernews.com/2024/03/fortra-patches-critical-rce.html
Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

All Your Base Are [Still] Belong To Us | RET2 Systems Blog

https://blog.ret2.io/2021/07/21/wtf-snapshot-fuzzing/
All Your Base Are [Still] Belong To Us | RET2 Systems Blog

JTAG debug of Windows Hyper-V / Secure Kernel with WinDbg and EXDI: Part 4 | ASSET InterTech

https://www.asset-intertech.com/resources/blog/2024/03/jtag-debug-of-windows-hyper-v-secure-kernel-with-windbg-and-exdi-part-4/
JTAG debug of Windows Hyper-V / Secure Kernel with WinDbg and EXDI: Part 4 | ASSET InterTech

Apex Legends players worried about RCE flaw after ALGS hacks

https://www.bleepingcomputer.com/news/security/apex-legends-players-worried-about-rce-flaw-after-algs-hacks/
Apex Legends players worried about RCE flaw after ALGS hacks

Fujitsu found malware on IT systems, confirms data breach

https://www.bleepingcomputer.com/news/security/fujitsu-found-malware-on-several-systems-confirms-data-breach/
Fujitsu found malware on IT systems, confirms data breach

IMF Emails Hacked - SecurityWeek

https://www.securityweek.com/imf-emails-hacked/
IMF Emails Hacked - SecurityWeek

SVG Files: The Emerging Vector of Cyber Threats

https://securityonline.info/svg-files-the-emerging-vector-of-cyber-threats/
SVG Files: The Emerging Vector of Cyber Threats

North Korean Hackers Return to Tornado Cash Despite Sanctions

https://www.elliptic.co/blog/north-korean-hackers-return-to-tornado-cash-despite-sanctions
North Korean Hackers Return to Tornado Cash Despite Sanctions

PoC Published for Critical Fortra Code Execution Vulnerability - SecurityWeek

https://www.securityweek.com/poc-published-for-critical-fortra-code-execution-vulnerability/
PoC Published for Critical Fortra Code Execution Vulnerability - SecurityWeek

Microsoft announces deprecation of 1024-bit RSA keys in Windows

https://www.bleepingcomputer.com/news/microsoft/microsoft-announces-deprecation-of-1024-bit-rsa-keys-in-windows/
Microsoft announces deprecation of 1024-bit RSA keys in Windows

The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats

https://securityaffairs.com/160664/uncategorized/aviation-and-aerospace-sectors-cyber-threats.html
The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats

Pentagon Received Over 50,000 Vulnerability Reports Since 2016 - SecurityWeek

https://www.securityweek.com/pentagon-received-over-50000-vulnerability-reports-since-2016/
Pentagon Received Over 50,000 Vulnerability Reports Since 2016 - SecurityWeek

Moldovan Operator of Credential Marketplace Sentenced to US Prison - SecurityWeek

https://www.securityweek.com/moldovan-operator-of-credential-marketplace-sentenced-to-us-prison/
Moldovan Operator of Credential Marketplace Sentenced to US Prison - SecurityWeek

Route to Safety: Navigating Router Pitfalls | STAR Labs

https://starlabs.sg/blog/2024/route-to-safety-navigating-router-pitfalls/
Route to Safety: Navigating Router Pitfalls | STAR Labs

Email accounts of International Monetary Fund compromised

https://securityaffairs.com/160641/hacking/international-monetary-fund-email-compromise.html
Email accounts of International Monetary Fund compromised

CVE-2021-30481: Source engine remote code execution via game invites | secret club

https://secret.club/2021/04/20/source-engine-rce-invite.html
CVE-2021-30481: Source engine remote code execution via game invites | secret club

Robots Dream of Root Shells

https://blog.isosceles.com/robots-dream-of-root-shells/
Robots Dream of Root Shells

Chinese Earth Krahang hackers breach 70 orgs in 23 countries

https://www.bleepingcomputer.com/news/security/chinese-earth-krahang-hackers-breach-70-orgs-in-23-countries/
Chinese Earth Krahang hackers breach 70 orgs in 23 countries

New Attack Shows Risks of Browsers Giving Websites Access to GPU  - SecurityWeek

https://www.securityweek.com/new-attack-shows-risks-of-browsers-giving-websites-access-to-gpu/
New Attack Shows Risks of Browsers Giving Websites Access to GPU  - SecurityWeek

Fujitsu found malware on IT systems, confirms data breach

https://www.bleepingcomputer.com/news/security/fujitsu-found-malware-on-it-systems-confirms-data-breach/
Fujitsu found malware on IT systems, confirms data breach

New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

https://thehackernews.com/2024/03/new-deepgosu-malware-campaign-targets.html
New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

CVE-2024-28353 & 28354: TRENDnet Router Takeover Flaws Exposed, No Patch Available

https://securityonline.info/cve-2024-28353-28354-trendnet-router-takeover-flaws-exposed-no-patch-available/
CVE-2024-28353 & 28354: TRENDnet Router Takeover Flaws Exposed, No Patch Available

Cisco Completes $28 Billion Acquisition of Splunk - SecurityWeek

https://www.securityweek.com/cisco-completes-28-billion-acquisition-of-splunk/
Cisco Completes $28 Billion Acquisition of Splunk - SecurityWeek

Analyzing Shellcode with SCLauncher

https://www.thecyberyeti.com/post/analyzing-shellcode-with-sclauncher
Analyzing Shellcode with SCLauncher

Fujitsu Discloses Data Breach, Customer and Personal Information Compromised

https://securityonline.info/fujitsu-discloses-data-breach-customer-and-personal-information-compromised/
Fujitsu Discloses Data Breach, Customer and Personal Information Compromised