Each week I publish interesting articles and ways to improve your understanding of cybersecurity.
Projects
- TryHackMe – Linux Shells – Complete
Videos
Articles
- Critical PostgreSQL bug tied to zero-day attack on US Treasury – High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further
- Hackers broke into Watergate Hotel’s network, stole personal data from hotel computers – There has been another Watergate break-in.
- Elon Musk’s DOGE website has been defaced because anyone can edit it – Instead of using government servers, the DOGE website appears to pull from an insecure database.
- Meta to link world with longest subsea cable – Meta, the parent company of Facebook and Instagram, confirmed plans Monday to build the world’s longest subsea cable that will circle the Earth and connect five continents.
- Hundreds of Dutch medical records bought for pocket change at flea market – 15GB of sensitive files traced back to former software biz
- How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying – Mandiant warns that multiple Russian APTs are abusing a nifty Signal Messenger feature to surreptitiously spy on encrypted conversations
- CISA and FBI: Ghost ransomware breached orgs in 70 countries – CISA and the FBI said attackers deploying Ghost ransomware have breached victims from multiple industry sectors across over 70 countries, including critical infrastructure organizations.
- US Army soldier pleads guilty to AT&T and Verizon hacks – Cameron John Wagenius pleaded guilty to hacking AT&T and Verizon and stealing a massive trove of phone records from the companies, according to court records filed on Wednesday.
- Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks – Cisco has confirmed that a Chinese threat actor known as Salt Typhoon gained access by likely abusing a known security flaw tracked as CVE-2018-0171, and by obtaining legitimate victim login credentials as part of a targeted campaign aimed at major U.S. telecommunications companies.
- Cybercriminals Can Now Clone Any Brand’s Site in Minutes Using Darcula PhaaS v3 – The threat actors behind the Darcula phishing-as-a-service (PhaaS) platform appear to be readying a new version that allows prospective customers and cyber crooks to clone any brand’s legitimate website and create a phishing version, further bringing down the technical expertise required to pull off phishing attacks at scale.
- How China Pinned University Cyberattacks on NSA Hackers – A researcher dives into Chinese reports attributing cyberattacks on Northwestern Polytechnical University to the NSA’s TAO division.
- Thailand ready to welcome 7,000 trafficked scam call center victims back from Myanmar – It comes amid a major crackdown on the abusive industry that started during COVID
Podcasts
- Smashing Security 405: A crypto con exchange, and soaring ticket scams