Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage | Microsoft Security Blog
https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/
Deloitte Hacked - Brain Cipher Group Allegedly Stolen 1 TB of Data
https://cybersecuritynews.com/deloitte-hacked/
Microsoft says having a TPM is "non-negotiable" for Windows 11
https://www.bleepingcomputer.com/news/microsoft/microsoft-says-having-a-tpm-is-non-negotiable-for-windows-11/
Blog: The Great Google Password Heist: 15 years of hacking passwords to test our security (and build team culture!)
https://bughunters.google.com/blog/6355265783201792/the-great-google-password-heist-15-years-of-hacking-passwords-to-test-our-security-and-build-team-culture
MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur’s Multi-Platform Attacks | Trend Micro (US)
https://www.trendmicro.com/en_us/research/24/l/earth-minotaur.html
I-O Data Confirms Zero-Day Attacks on Routers, Full Patches Pending - SecurityWeek
https://www.securityweek.com/i-o-data-confirms-zero-day-attacks-on-routers-full-patches-pending/
This $3,000 Android Trojan Targeting Banks and Cryptocurrency Exchanges
https://thehackernews.com/2024/12/this-3000-android-trojan-targeting.html
Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day
https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/
GitHub - trustedsec/CS-Situational-Awareness-BOF: Situational Awareness commands implemented using Beacon Object Files
https://github.com/trustedsec/CS-Situational-Awareness-BOF
Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers
https://thehackernews.com/2024/12/researchers-uncover-4-month-cyberattack.html
CVE-2020-9967 - Apple macOS 6LowPAN Vulnerability – Blog – Random Security Research
https://alexplaskett.github.io/CVE-2020-9967/
US arrests Scattered Spider suspect linked to telecom hacks
https://www.bleepingcomputer.com/news/security/us-arrests-scattered-spider-suspect-linked-to-telecom-hacks/
New Android spyware found on phone seized by Russian FSB
https://www.bleepingcomputer.com/news/security/new-android-spyware-found-on-phone-seized-by-russian-fsb/
Spy v Spy: Russian APT Turla Caught Stealing From Pakistani APT - SecurityWeek
https://www.securityweek.com/spy-v-spy-russian-apt-turla-caught-stealing-from-pakistani-apt/
Bootloader Vulnerability Impacts Over 100 Cisco Switches - SecurityWeek
https://www.securityweek.com/bootloader-vulnerability-impacts-over-100-cisco-switches/
50 Servers Linked to Cybercrime Marketplace and Phishing Sites Seized by Law Enforcement - SecurityWeek
https://www.securityweek.com/50-servers-linked-to-cybercrime-marketplace-and-phishing-sites-seized-by-law-enforcement/
ANEL and NOOPDOOR Backdoors Weaponized in New MirrorFace Campaign Against Japan
https://thehackernews.com/2024/12/anel-and-noopdoor-backdoors-weaponized.html