10/16

GitHub - Orange-Cyberdefense/GOAD at v3-beta

https://github.com/Orange-Cyberdefense/GOAD/tree/v3-beta
GitHub - Orange-Cyberdefense/GOAD at v3-beta

China’s Influence Ops | Twisting Tales of Volt Typhoon at Home and Abroad - SentinelOne

https://www.sentinelone.com/labs/chinas-influence-ops-twisting-tales-of-volt-typhoon-at-home-and-abroad/
China’s Influence Ops | Twisting Tales of Volt Typhoon at Home and Abroad - SentinelOne

CISA Flags Critical SolarWinds Web Help Desk Bug for In-the-Wild Exploitation - SecurityWeek

https://www.securityweek.com/organizations-warned-of-exploited-solarwinds-web-help-desk-vulnerability/
CISA Flags Critical SolarWinds Web Help Desk Bug for In-the-Wild Exploitation - SecurityWeek

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

https://thehackernews.com/2024/10/hackers-abuse-edrsilencer-tool-to.html
Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

Malicious ads exploited Internet Explorer zero day to drop malware

https://www.bleepingcomputer.com/news/security/malicious-ads-exploited-internet-explorer-zero-day-to-drop-malware/
Malicious ads exploited Internet Explorer zero day to drop malware

Tor Browser and Firefox users should update to fix actively exploited vulnerability | Malwarebytes

https://www.malwarebytes.com/blog/news/2024/10/tor-browser-and-firefox-users-should-update-to-fix-actively-exploited-vulnerability
Tor Browser and Firefox users should update to fix actively exploited vulnerability | Malwarebytes

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

https://thehackernews.com/2024/10/fido-alliance-drafts-new-protocol-to.html
FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

VMware Patches High-Severity SQL Injection Flaw in HCX Platform - SecurityWeek

https://www.securityweek.com/vmware-patches-high-severity-sql-injection-flaw-in-hcx-platform/
VMware Patches High-Severity SQL Injection Flaw in HCX Platform - SecurityWeek

Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions | Trend Micro (US)

https://www.trendmicro.com/en_us/research/24/j/edrsilencer-disrupting-endpoint-security-solutions.html
Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions | Trend Micro (US)

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

https://thehackernews.com/2024/10/github-patches-critical-flaw-in.html
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

The Cybersecurity Burnout Crisis Is Reaching The Breaking Point

https://www.forbes.com/sites/tonybradley/2024/10/15/the-cybersecurity-burnout-crisis-is-reaching-the-breaking-point/
The Cybersecurity Burnout Crisis Is Reaching The Breaking Point

How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends | Google Cloud Blog

https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023/
How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends | Google Cloud Blog

US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers

https://www.bleepingcomputer.com/news/security/us-disrupts-anonymous-sudan-ddos-operation-indicts-2-sudanese-brothers/
US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers

How Israel’s bulky pager fooled Hezbollah

https://www.reuters.com/graphics/ISRAEL-PALESTINIANS/HEZBOLLAH-PAGERS/mopawkkwjpa/
How Israel’s bulky pager fooled Hezbollah

Recon Royale - Hacker's Arena

https://recon-royale.com/
Recon Royale - Hacker's Arena

Oracle Patches Over 200 Vulnerabilities With October 2024 CPU - SecurityWeek

https://www.securityweek.com/oracle-patches-over-200-vulnerabilities-with-october-2024-cpu/
Oracle Patches Over 200 Vulnerabilities With October 2024 CPU - SecurityWeek

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

https://thehackernews.com/2024/10/astaroth-banking-malware-resurfaces-in.html
Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

Automating binary vulnerability discovery with Ghidra and Semgrep - hn security

https://security.humanativaspa.it/automating-binary-vulnerability-discovery-with-ghidra-and-semgrep/
Automating binary vulnerability discovery with Ghidra and Semgrep - hn security