ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices
https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/
State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage
https://thehackernews.com/2024/04/state-sponsored-hackers-exploit-two.html
DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions
https://thehackernews.com/2024/04/doj-arrests-founders-of-crypto-mixer.html
ETW-ByeBye: Disabling ETW-TI Without PPL | Legacyy
https://www.legacyy.xyz/defenseevasion/windows/2024/04/24/disabling-etw-ti-without-ppl.html
WP Automatic WordPress plugin hit by millions of SQL injection attacks
https://www.bleepingcomputer.com/news/security/wp-automatic-wordpress-plugin-hit-by-millions-of-sql-injection-attacks/
[2402.09154] Attacking Large Language Models with Projected Gradient Descent
https://arxiv.org/abs/2402.09154![[2402.09154] Attacking Large Language Models with Projected Gradient Descent](/image/screenshot/6f445840eac0018fd148cfac10aa149c.webp)
North Korea's Lazarus Group Deploys New Kaolin RAT via Fake Job Lures
https://thehackernews.com/2024/04/north-koreas-lazarus-group-deploys-new.html
Senior Threat Hunter - United Kingdom in United Kingdom | Dragos
https://careers.dragos.com/jobs/2059?lang=en-us
New Brokewell malware takes over Android devices, steals data
https://www.bleepingcomputer.com/news/security/new-brokewell-malware-takes-over-android-devices-steals-data/
debugging-slides.pdf
https://bootlin.com/doc/training/debugging/debugging-slides.pdf
AWS Cloud Security Config Review using Nuclei Templates
https://blog.projectdiscovery.io/aws-cloud-security-config-review-using-nuclei-templates/
FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures - SecurityWeek
https://www.securityweek.com/ftc-sending-5-6-million-in-refunds-to-ring-customers-over-security-failures/
Coverage Guided Fuzzing - Extending Instrumentation to Hunt Down Bugs Faster! - Include Security Research Blog
https://blog.includesecurity.com/2024/04/coverage-guided-fuzzing-extending-instrumentation/
Ring agrees to pay $5.6 million after cameras were used to spy on customers | Malwarebytes
https://www.malwarebytes.com/blog/news/2024/04/ring-agrees-to-pay-5-6-million-after-cameras-were-used-to-spy-on-customers
Unplugging PlugX: Sinkholing the PlugX USB worm botnet - Sekoia.io Blog
https://blog.sekoia.io/unplugging-plugx-sinkholing-the-plugx-usb-worm-botnet/
Over 1,400 CrushFTP servers vulnerable to actively exploited bug
https://www.bleepingcomputer.com/news/security/over-1-400-crushftp-servers-vulnerable-to-actively-exploited-bug/
A Practical Guide to PrintNightmare in 2024 | itm4n's blog
https://itm4n.github.io/printnightmare-exploitation/
Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny
https://thehackernews.com/2024/04/google-postpones-third-party-cookie.html
Reddit down in major outage blocking access to web, mobile apps
https://www.bleepingcomputer.com/news/technology/reddit-down-in-major-outage-blocking-access-to-web-mobile-apps/
GitHub - microsoft/MS-DOS: The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes
https://github.com/microsoft/MS-DOS
Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking - SecurityWeek
https://www.securityweek.com/vulnerabilities-expose-brocade-san-appliances-switches-to-hacking/
CVE-2023-43786 & CVE-2023-43787 Vulns in libX11: All You Need To Know
https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/
Social engineering aspect of the XZ incident | Securelist
https://securelist.com/xz-backdoor-story-part-2-social-engineering/112476/
PlayStation | Report #2177925 - Remote vulnerabilities in spp | HackerOne
https://hackerone.com/reports/2177925
CVE-2024-4040 | AttackerKB
https://attackerkb.com/topics/20oYjlmfXa/cve-2024-4040/rapid7-analysis
Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices | TechCrunch
https://techcrunch.com/2024/04/25/ex-nsa-ex-apple-researcher-doubleyou/