US sanctions Chinese company linked to Flax Typhoon hackers
https://www.bleepingcomputer.com/news/security/us-sanctions-chinese-company-linked-to-flax-typhoon-hackers/
US Arrests Army Soldier Over AT&T, Verizon Hacking - SecurityWeek
https://www.securityweek.com/us-arrests-charges-army-soldier-suspected-of-extorting-att-verizon/
New DoubleClickjacking attack exploits double-clicks to hijack accounts
https://www.bleepingcomputer.com/news/security/new-doubleclickjacking-attack-exploits-double-clicks-to-hijack-accounts/
BSides Nashville 2025 - A BSides Mid-TN Production: Call for Papers @ Sessionize.com
https://sessionize.com/bsides-nashville-2025-cfp/
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
https://thehackernews.com/2025/01/ldapnightmare-poc-exploit-crashes-lsass.html
Patched But Still Vulnerable: Windows BitLocker Encryption Bypassed Again
https://securityonline.info/patched-but-still-vulnerable-windows-bitlocker-encryption-bypassed-again/
iDRAC to Domain Admin. Hello all! | by Jevon Davis | Dec, 2024 | InfoSec Write-ups
https://infosecwriteups.com/idrac-to-domain-admin-4acb89391070
Ransomware gang leaks data stolen in Rhode Island's RIBridges Breach
https://www.bleepingcomputer.com/news/security/ransomware-gang-leaks-data-stolen-in-rhode-islands-ribridges-breach/
French govt contractor Atos denies Space Bears ransomware attack claims
https://www.bleepingcomputer.com/news/security/french-govt-contractor-atos-denies-space-bears-ransomware-attack-claims/
SwaetRAT Delivery Through Python - SANS Internet Storm Center
https://isc.sans.edu/diary/31554
New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60%
https://thehackernews.com/2025/01/new-ai-jailbreak-method-bad-likert.html
Over 3 million mail servers without encryption exposed to sniffing attacks
https://www.bleepingcomputer.com/news/security/over-3-million-mail-servers-without-encryption-exposed-to-sniffing-attacks/
Malicious npm packages target Ethereum developers' private keys
https://www.bleepingcomputer.com/news/security/malicious-npm-packages-target-ethereum-developers-private-keys/
Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption
https://thehackernews.com/2025/01/critical-deadline-update-old-net.html