Projects

• EdX – EC-Council | Ethical Hacking Essentials- In Progress
• TryHackMe | Nmap Room – Complete

Videos

Articles

• A Cyber Attack Hit The Beirut International Airport – A cyber attack hit the Beirut International Airport, Rafic Hariri (Lebanon), threat actors breached the Flight Information Display System (FIDS).
• Netgear, Hyundai latest X accounts hacked to push crypto drainers – The official Netgear and Hyundai MEA Twitter/X accounts (together with over 160,000 followers) are the latest hijacked to push scams designed to infect potential victims with cryptocurrency wallet drainer malware.
• US, Israel Used Dutch Spy to Launch Stuxnet Malware Against Iran – Report says US and Israel spent $1 billion to develop the infamous Stuxnet virus, built to sabotage Iran’s nuclear program in 2008.
• Turkish Hackers Target Microsoft SQL Servers in Americas, Europe – Researchers at Securonix warn that Turkish threat actors are targeting organizations in the Americas and Europe with ransomware campaigns.
• Beware Weaponized YouTube Channels Spreading Lumma Stealer – Videos promoting how to crack popular software circumvent Web filters by using GitHub and MediaFire to propagate the malware.
• ‘Swatting’ Becomes Latest Extortion Tactic in Ransomware Attacks – Threat actors leave medical centers with the difficult choice of paying the ransom or witnessing patients suffer the consequences.
• LoanDepot Takes Systems Offline Following Ransomware Attack – Mortgage lending firm LoanDepot has disclosed a cyberattack resulting in data encryption and system disruptions.
• Anonymous Sudan Launches Cyberattack on Chad Telco – Hacktivists attack infrastructure, including routers, network administration systems, and devices.
• China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments – Chinese APT Volt Typhoon appears engaged in new attacks against government entities in the US, UK, and Australia.
• Mandiant Details How Its X Account Was Hacked – Mandiant’s X account was hacked as a result of a brute force attack as part of a cryptocurrency scheme that earned at least $900k.
• Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days – Ivanti confirms active zero-day exploits, ships pre-patch mitigations, but says comprehensive fixes won’t be available until January 22.
• French Computer Hacker Jailed in US – A computer hacker who was part of a criminal gang that stole data from hundreds of millions of people and sold it on the dark web was jailed in the United States on Tuesday.
• Dutch Engineer Used Water Pump to Get Billion-Dollar Stuxnet Malware Into Iranian Nuclear Facility: Report – An engineer recruited by intelligence services used a water pump to deliver Stuxnet, which reportedly cost $1-2 billion to develop.
• China claims it cracked Apple’s AirDrop to find numbers, email addresses – A Chinese state-backed research institute claims to have discovered how to decrypt device logs for Apple’s AirDrop feature, allowing the government to identify phone numbers or email addresses of those who shared content.
• Framework discloses data breach after accountant gets phished – Framework Computer disclosed a data breach exposing the personal information of an undisclosed number of customers after Keating Consulting Group, its accounting service provider, fell victim to a phishing attack.
• Fidelity National Financial says hackers stole data on 1.3 million customers – Real estate services giant Fidelity National Financial has confirmed hackers stole data on 1.3 million of its customers during a November cyberattack that knocked the company offline for a week.

Podcasts

• Cyberwire | Ep 1981 | 1.11.24 | Unveiling the Shadow Strike: A zero-day assault on Ivanti VPN users.