08/08

ADT confirms data breach after customer info leaked on hacking forum

https://www.bleepingcomputer.com/news/security/adt-confirms-data-breach-after-customer-info-leaked-on-hacking-forum/
ADT confirms data breach after customer info leaked on hacking forum

18-year-old security flaw in Firefox and Chrome exploited in attacks

https://www.bleepingcomputer.com/news/security/18-year-old-security-flaw-in-firefox-and-chrome-exploited-in-attacks/
18-year-old security flaw in Firefox and Chrome exploited in attacks

all: add qemu snapshotting mode · google/syzkaller@4d77b9f · GitHub

https://github.com/google/syzkaller/commit/4d77b9fe7da3d014943a16cb4b9a4ca3a531521a
all: add qemu snapshotting mode · google/syzkaller@4d77b9f · GitHub

Exploit released for Cisco SSM bug allowing admin password changes

https://www.bleepingcomputer.com/news/security/exploit-released-for-cisco-ssm-bug-allowing-admin-password-changes/
Exploit released for Cisco SSM bug allowing admin password changes

0.0.0.0 Day: Exploiting Localhost APIs From the Browser | Oligo Security

https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser
0.0.0.0 Day: Exploiting Localhost APIs From the Browser | Oligo Security

New CMoon USB worm targets Russians in data theft attacks

https://www.bleepingcomputer.com/news/security/new-cmoon-usb-worm-targets-russians-in-data-theft-attacks/
New CMoon USB worm targets Russians in data theft attacks

Discord

http://Veilid.com/discord
Discord

FBI and CISA Warn of BlackSuit Ransomware That Demands Up to $500 Million

https://thehackernews.com/2024/08/fbi-and-cisa-warn-of-blacksuit.html
FBI and CISA Warn of BlackSuit Ransomware That Demands Up to $500 Million

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

https://thehackernews.com/2024/08/windows-downgrade-attack-risks-exposing.html
Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Cisco warns of critical RCE zero-days in end of life IP phones

https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-rce-zero-days-in-end-of-life-ip-phones/
Cisco warns of critical RCE zero-days in end of life IP phones

AWS Patches Vulnerabilities Potentially Allowing Account Takeovers - SecurityWeek

https://www.securityweek.com/aws-patches-vulnerabilities-potentially-allowing-account-takeovers/
AWS Patches Vulnerabilities Potentially Allowing Account Takeovers - SecurityWeek

CISA warns about actively exploited Apache OFBiz RCE flaw

https://www.bleepingcomputer.com/news/security/cisa-warns-about-actively-exploited-apache-ofbiz-rce-flaw/
CISA warns about actively exploited Apache OFBiz RCE flaw

Hotel to Search Rooms During DEF CON Hacking Conference

https://www.404media.co/hotel-to-search-rooms-during-def-con-hacking-conference/
Hotel to Search Rooms During DEF CON Hacking Conference

Nashville man arrested for aiding North Korean remote IT worker fraud | CyberScoop

https://cyberscoop.com/north-korea-it-worker-fraud-tennesee-justice-department/
Nashville man arrested for aiding North Korean remote IT worker fraud | CyberScoop

Ronin Network hacked, $12 million returned by "white hat" hackers

https://www.bleepingcomputer.com/news/security/ronin-network-hacked-12-million-returned-by-white-hat-hackers/
Ronin Network hacked, $12 million returned by "white hat" hackers

x86re

https://x86re.com/
x86re

University Professors Targeted by North Korean Cyber Espionage Group

https://thehackernews.com/2024/08/university-professors-targeted-by-north.html
University Professors Targeted by North Korean Cyber Espionage Group

A deep dive into CVE-2023-2163: How we found and fixed an eBPF Linux Kernel Vulnerability - Google Bug Hunters

https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability
A deep dive into CVE-2023-2163: How we found and fixed an eBPF Linux Kernel Vulnerability - Google Bug Hunters

cti-cmm

http://CTI-CMM.org
cti-cmm

Anthropic starts testing new AI safety bug bounty program

https://www.axios.com/2024/08/08/anthropic-model-hackers-security-flaws
Anthropic starts testing new AI safety bug bounty program

US Offering $10 Million Reward for Iranian ICS Hackers - SecurityWeek

https://www.securityweek.com/us-offering-10-million-reward-for-iranian-ics-hackers/
US Offering $10 Million Reward for Iranian ICS Hackers - SecurityWeek

Rhysida Ransomware gang claims the hack of Bayhealth Hospital

https://securityaffairs.com/166749/cyber-crime/rhysida-ransomware-bayhealth-hospital.html
Rhysida Ransomware gang claims the hack of Bayhealth Hospital

Veracode highlights security risks of GenAI coding tools | TechTarget

https://www.techtarget.com/searchsecurity/news/366600097/Veracode-highlights-security-risks-of-GenAI-coding-tools
Veracode highlights security risks of GenAI coding tools | TechTarget

CISA warns of hackers abusing Cisco Smart Install feature

https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-abusing-cisco-smart-install-feature/
CISA warns of hackers abusing Cisco Smart Install feature

The DEF CON® Media Server - Archives of the conferences

https://media.defcon.org/DEF%20CON%2032/
The DEF CON® Media Server - Archives of the conferences

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India – Sophos News

https://news.sophos.com/en-us/2024/08/07/sophos-mdr-hunt-tracks-mimic-ransomware-campaign-against-organizations-in-india/
Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India – Sophos News