12/31

Hack The Planet - Hack The Planet!

http://Hack.Hack.HackThePlanet.com
Hack The Planet - Hack The Planet!

New details reveal how hackers hijacked 35 Google Chrome extensions

https://www.bleepingcomputer.com/news/security/new-details-reveal-how-hackers-hijacked-35-google-chrome-extensions/
New details reveal how hackers hijacked 35 Google Chrome extensions

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation

https://thehackernews.com/2024/12/misconfigured-kubernetes-rbac-in-azure.html
Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation

US Treasury Department breached through remote support platform

https://www.bleepingcomputer.com/news/security/us-treasury-department-breached-through-remote-support-platform/
US Treasury Department breached through remote support platform

Massive healthcare breaches prompt US cybersecurity rules overhaul

https://www.bleepingcomputer.com/news/security/massive-healthcare-breaches-prompt-us-cybersecurity-rules-overhaul/
Massive healthcare breaches prompt US cybersecurity rules overhaul

Releases · hasherezade/tiny_tracer · GitHub

https://github.com/hasherezade/tiny_tracer/releases
Releases · hasherezade/tiny_tracer · GitHub

Log in to X / X

https://x.com/bhaggs
Log in to X / X

Compromised extensions - Google スプレッドシート

https://docs.google.com/spreadsheets/d/15xOLbYgz5DQnCWYE6a_LXGcqYC_bNPPzdBqdLofz6-E/edit?gid=0#gid=0
Compromised extensions - Google スプレッドシート

http://hhub.io/2024holidays

http://hhub.io/2024holidays

38C3: Hacker hijacks and repairs Beesat-1 satellites from the ground | heise online

https://www.heise.de/en/news/38C3-Hacker-hijacks-and-repairs-Beesat-1-satellites-from-the-ground-10221522.html
38C3: Hacker hijacks and repairs Beesat-1 satellites from the ground | heise online

An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip's creator says is a fake

https://securityaffairs.com/172467/hacking/an-x-user-claimed-a-7-zip-zero-day-vulnerability.html
An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip's creator says is a fake

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents

https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html
Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents

Building a RuntimeInstaller Payload Pipeline to Evade AV Detection – Practical Security Analytics LLC

https://practicalsecurityanalytics.com/building-a-runtimeinstaller-payload-pipeline-to-evade-av-detection/
Building a RuntimeInstaller Payload Pipeline to Evade AV Detection – Practical Security Analytics LLC

China's cyber intrusions turns sinister in 2024 • The Register

https://go.theregister.com/feed/www.theregister.com/2024/12/31/china_cyber_intrusions_2024/
China's cyber intrusions turns sinister in 2024 • The Register

Over 3.1 million fake "stars" on GitHub projects used to boost rankings

https://www.bleepingcomputer.com/news/security/over-31-million-fake-stars-on-github-projects-used-to-boost-rankings/
Over 3.1 million fake "stars" on GitHub projects used to boost rankings