Security Pop Quiz! q243.mp3

News

Packet Storm Security

Security Affairs

* Experts discovered surveillance tool EagleMsgSpy used by Chinese law enforcement
* Operation PowerOFF took down 27 DDoS platforms across 15 countries
* Russia's Secret Blizzard APT targets Ukraine with Kazuar backdoor
* Ivanti fixed a maximum severity vulnerability in its CSA solution
* Operation Digital Eye: China-linked relies on Visual Studio Code Remote Tunnels to spy on Europen ent

Looking Glass Cyber

securingtomorrow.mcafee.com

Quick Heal

Threat Post

* Student Loan Breach Exposes 2.5M Records
* Watering Hole Attacks Push ScanBox Keylogger
* Tentacles of '0ktapus' Threat Group Victimize 130 Firms
* Ransomware Attacks are on the Rise
* Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Naked Security

ESET

* Jane Goodall: Reasons for hope | Starmus highlights
* Life on a crooked RedLine: Analyzing the infamous infostealer's backend
* ESET APT Activity Report Q2 2024-Q3 2024
* Month in security with Tony Anscombe - October 2024 edition
* How to remove your personal information from Google Search results

CIS

• CIS Benchmarks December 2024 Update Tue, 10 Dec 2024 11:24:00 -0500
  Here is an overview of the CIS Benchmarks that the Center for Internet Security updated or released for December 2024.

Malware Patrol

* InfoSec Articles (11/19/24 - 12/03/24)
* InfoSec Articles (11/05/24 - 11/19/24)

SecList

• Careto is back: what’s new after 10 years of silence?
  Kaspersky researchers analyze 2019, 2022 and 2024 attacks attributed to Careto APT with medium to high confidence.

MySonicWall

Critical Infrastructure

* Software and IT vendors linked to 67% of energy sector breaches
* Iranian cyber actors are targeting critical infrastructure entities
* Security experts discuss the American Water cyberattack

* Protecting ships from cyber terrorism
* Biden administration issues executive order to secure U.S. ports
* Cadisha Miceli | Women in Security 2023

* Security experts respond to the Amazon employee data breach
* Supply chain cybersecurity and modern-day cargo theft
* 99% of Global 2000 organizations are linked to a supply chain breach

Case Studies

* The 2 am call: Preparing for a government cyberattack
* Häfele recovers from ransomware attack with new SASE platform
* Ride-hailing company, inDrive, uses new platform to prevent fraud

* From the stone age to cutting edge: A case study on key management
* Challenges with mobile apps as a safety solution in K-12 schools
* Michigan school district deploys AI gun detection, intelligent situational awareness platform

Tools

* OSINT tutorial to Find Information from a Phone Number - PhoneInfoga Tool
* 5G - A Business Owner's Dream, A Hacker's Fantasy

Exploits

Last 20 Website Defacements - Zone-h

Press Play to hear the answer!

Advisories