01/16

Hackers leak configs and VPN credentials for 15,000 FortiGate devices

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/
Hackers leak configs and VPN credentials for 15,000 FortiGate devices

Rob Fuller on LinkedIn: Come join the McKesson Red Team [Fully Remote - US/CA/IR] as a Lead…

https://www.linkedin.com/posts/mubix_come-join-the-mckesson-red-team-fully-remote-activity-7285372003627237376-bVwm
Rob Fuller on LinkedIn: Come join the McKesson Red Team [Fully Remote - US/CA/IR] as a Lead…

MalwareBazaar | ItalianPasta

https://bazaar.abuse.ch/browse/tag/ItalianPasta/
MalwareBazaar | ItalianPasta

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

https://thehackernews.com/2025/01/researchers-find-exploit-allowing.html
Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

https://thehackernews.com/2025/01/new-uefi-secure-boot-vulnerability.html
New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

A Journey of Limited Path Traversal To RCE With $40,000 Bounty! | by HX007 | Jan, 2025 | Medium

https://medium.com/@HX007/a-journey-of-limited-path-traversal-to-rce-with-40-000-bounty-fc63c89576ea
A Journey of Limited Path Traversal To RCE With $40,000 Bounty! | by HX007 | Jan, 2025 | Medium

Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws - SecurityWeek

https://www.securityweek.com/millions-of-internet-hosts-vulnerable-to-attacks-due-to-tunneling-protocol-flaws/
Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws - SecurityWeek

US cracks down on North Korean IT worker army with more sanctions

https://www.bleepingcomputer.com/news/security/us-cracks-down-on-north-korean-it-worker-army-with-more-sanctions/
US cracks down on North Korean IT worker army with more sanctions

Malware Analysis Series (MAS): article 10 | Linux – Exploit Reversing

https://exploitreversing.com/2025/01/15/malware-analysis-series-mas-article-10/
Malware Analysis Series (MAS): article 10 | Linux – Exploit Reversing

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

https://thehackernews.com/2025/01/python-based-malware-powers-ransomhub.html
Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL

https://www.synacktiv.com/advisories/microsoft-configuration-manager-configmgr-2403-unauthenticated-sql-injections
Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL

MalwareBazaar | 194-180-191-24

https://bazaar.abuse.ch/browse/tag/194-180-191-24/
MalwareBazaar | 194-180-191-24

New UEFI Secure Boot flaw exposes systems to bootkits, patch now

https://www.bleepingcomputer.com/news/security/new-uefi-secure-boot-flaw-exposes-systems-to-bootkits-patch-now/
New UEFI Secure Boot flaw exposes systems to bootkits, patch now

Security Theater: The Flawed Focus on TikTok While Bigger Risks Lurk

https://www.linkedin.com/pulse/security-theater-flawed-focus-tiktok-while-bigger-risks-hempel-nktsc
Security Theater: The Flawed Focus on TikTok While Bigger Risks Lurk

FTC sues GoDaddy for years of poor hosting security practices

https://www.bleepingcomputer.com/news/security/ftc-sues-godaddy-for-years-of-poor-hosting-security-practices/
FTC sues GoDaddy for years of poor hosting security practices

Biden signs executive order to bolster national cybersecurity

https://www.bleepingcomputer.com/news/security/biden-signs-executive-order-to-bolster-national-cybersecurity/
Biden signs executive order to bolster national cybersecurity

Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer

https://thehackernews.com/2025/01/hackers-hide-malware-in-images-to.html
Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

https://thehackernews.com/2025/01/researcher-uncovers-critical-flaws-in.html
Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager