ARTICLES OCTOBER 2023

H January(103) February(113) March(175) APRIL(74) MAY(28) JUNE(198) July(423) August(462) September(389) October(406) November(5) December()

DATE	NAME	CATEGORY	WEB
31.10.23	Exploit released for critical Cisco IOS XE flaw, many hosts still hacked	Exploit	BleepingComputer
31.10.23	LastPass breach linked to theft of $4.4 million in crypto	Incindent	BleepingComputer
31.10.23	SEC sues SolarWinds for misleading investors before 2020 hack	Hack	BleepingComputer
31.10.23	RCE exploit for Wyze Cam v3 publicly released, patch now	Exploit	BleepingComputer
31.10.23	FTC orders non-bank financial firms to report breaches in 30 days	Incindent	BleepingComputer
31.10.23	Google Chrome now auto-upgrades to secure connections for all users	Cyber	BleepingComputer
31.10.23	Toronto Public Library services down following weekend cyberattack	Cyber	BleepingComputer
31.10.23	New BiBi-Linux wiper malware targets Israeli orgs in destructive attacks	Virus	BleepingComputer
31.10.23	Huawei, Vivo phones tag Google app as TrojanSMS-PA malware	Mobil	BleepingComputer
31.10.23	New Hunters International ransomware possible rebrand of Hive	Ransom	BleepingComputer
31.10.23	Pirate IPTV network in Austria dismantled and $1.74 million seized	CyberCrime	BleepingComputer
31.10.23	Windows 11 adds support for 11 file archives, including 7-Zip and RAR	OS	BleepingComputer
31.10.23	Hackers email stolen student data to parents of Nevada school district	Incindent	BleepingComputer
31.10.23	HackerOne paid ethical hackers over $300 million in bug bounties	Cyber	BleepingComputer
31.10.23	Malicious NuGet Packages Caught Distributing SeroXen RAT Malware	Virus	The Hacker News
31.10.23	Atlassian Warns of New Critical Confluence Vulnerability Threatening Data Loss	Vulnerebility	The Hacker News
31.10.23	Trojanized PyCharm Software Version Delivered via Google Search Ads	Virus	The Hacker News
31.10.23	Canada Bans WeChat and Kaspersky Apps On Government Devices	BigBrothers	The Hacker News
31.10.23	Meta Launches Paid Ad-Free Subscription in Europe to Satisfy Privacy Laws	BigBrothers	The Hacker News
31.10.23	Pro-Hamas Hacktivists Targeting Israeli Entities with Wiper Malware	Virus	The Hacker News
30.10.23	ServiceNow Data Exposure: A Wake-Up Call for Companies	Cyber	The Hacker News
30.10.23	EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub	Cryptocurrency	The Hacker News
30.10.23	Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes	Vulnerebility	The Hacker News
30.10.23	Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware	Virus	The Hacker News
28.10.23	Hackers earn over $1 million for 58 zero-days at Pwn2Own Toronto	Cyber	BleepingComputer
28.10.23	The Week in Ransomware - October 27th 2023 - Breaking Records	Ransom	BleepingComputer
28.10.23	Microsoft 365 users get workaround for ‘Something Went Wrong’ errors	OS	BleepingComputer
28.10.23	Lazarus hackers breached dev repeatedly to deploy SIGNBT malware	APT	BleepingComputer
28.10.23	F5 fixes BIG-IP auth bypass allowing remote code execution attacks	Vulnerebility	BleepingComputer
28.10.23	Windows 11 KB5031455 preview update enables Moment 4 features by default	OS	BleepingComputer
28.10.23	Researchers Uncover Wiretapping of XMPP-Based Instant Messaging Service	Hack	The Hacker News
28.10.23	N. Korean Lazarus Group Targets Software Vendor Using Known Flaws	APT	The Hacker News
28.10.23	Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats	AI	The Hacker News
27.10.23	Windows 10 KB5031445 preview update fixes ctfmon.exe memory leak, 9 issues	OS	BleepingComputer
27.10.23	Microsoft: Octo Tempest is one of the most dangerous financial hacking groups	Cyber	BleepingComputer
27.10.23	Android adware apps on Google Play amass two million installs	Android	BleepingComputer
27.10.23	Nigerian Police dismantle cybercrime recruitment, mentoring hub	CyberCrime	BleepingComputer
27.10.23	France says Russian state hackers breached numerous critical networks	BigBrothers	BleepingComputer
27.10.23	StripedFly malware framework infects 1 million Windows, Linux hosts	Virus	BleepingComputer
27.10.23	Cloudflare sees surge in hyper-volumetric HTTP DDoS attacks	Attack	BleepingComputer
27.10.23	New iLeakage attack steals emails, passwords from Apple Safari	Attack	BleepingComputer
27.10.23	Samsung Galaxy S23 hacked two more times at Pwn2Own Toronto	Mobil	BleepingComputer
27.10.23	Chilean telecom giant GTD hit by the Rorschach ransomware gang	Ransom	BleepingComputer
27.10.23	Microsoft tests Windows 11 encrypted DNS server auto-discovery	OS	BleepingComputer
27.10.23	Flipper Zero can now spam Android, Windows users with Bluetooth alerts	Spam	BleepingComputer
27.10.23	Windows 11 to let admins mandate SMB encryption for outbound connections	OS	BleepingComputer
27.10.23	Seiko says ransomware attack exposed sensitive customer data	Ransom	BleepingComputer
27.10.23	Citrix Bleed exploit lets hackers hijack NetScaler accounts	Exploit	BleepingComputer
27.10.23	Ransomware isn’t going away – the problem is only getting worse	Ransom	BleepingComputer
27.10.23	European govt email servers hacked using Roundcube zero-day	Vulnerebility	BleepingComputer
27.10.23	VMware fixes critical code execution flaw in vCenter Server	Vulnerebility	BleepingComputer
27.10.23	F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution	Vulnerebility	The Hacker News
27.10.23	iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs	Exploit	The Hacker News
27.10.23	Microsoft Warns as Scattered Spider Expands from SIM Swaps to Ransomware	Ransom	The Hacker News
27.10.23	Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw	Attack	The Hacker News
26.10.23	Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks	Virus	The Hacker News
26.10.23	Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data	Vulnerebility	The Hacker News
26.10.23	YoroTrooper: Researchers Warn of Kazakhstan's Stealthy Cyber Espionage Group	BigBrothers	The Hacker News
26.10.23	Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software	Exploit	The Hacker News
26.10.23	Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms	Vulnerebility	The Hacker News
26.10.23	Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability	Vulnerebility	The Hacker News
26.10.23	Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware	Virus	The Hacker News
25.10.23	Samsung Galaxy S23 hacked twice on first day of Pwn2Own Toronto	Hack	BleepingComputer
25.10.23	Hackers backdoor Russian state, industrial orgs for data theft	BigBrothers	BleepingComputer
25.10.23	Decentralized Matrix messaging network says it now has 115M users	Security	BleepingComputer
25.10.23	ASVEL basketball team confirms data breach after ransomware attack	Ransom	BleepingComputer
25.10.23	VMware warns admins of public exploit for vRealize RCE flaw	Vulnerebility	BleepingComputer
25.10.23	Cyberattack on health services provider impacts 5 Canadian hospitals	Attack	BleepingComputer
25.10.23	September was a record month for ransomware attacks in 2023	Ransom	BleepingComputer
25.10.23	1Password discloses security incident linked to Okta breach	Incindent	BleepingComputer
25.10.23	University of Michigan employee, student data stolen in cyberattack	Incindent	BleepingComputer
25.10.23	Palestine crypto donation scams emerge amid Israel-Hamas war	BigBrothers	BleepingComputer
25.10.23	Citrix warns admins to patch NetScaler CVE-2023-4966 bug immediately	Vulnerebility	BleepingComputer
25.10.23	US energy firm shares how Akira ransomware hacked its systems	Ransom	BleepingComputer
25.10.23	Spain arrests 34 cybercriminals who stole data of 4 million people	CyberCrime	BleepingComputer
25.10.23	Cisco patches IOS XE zero-days used to hack over 50,000 devices	Vulnerebility	BleepingComputer
25.10.23	QNAP takes down server behind widespread brute-force attacks	Attack	BleepingComputer
25.10.23	City of Philadelphia discloses data breach after five months	Incindent	BleepingComputer
25.10.23	D.C. Board of Elections: Hackers may have breached entire voter roll	BigBrothers	BleepingComputer
25.10.23	Google Chrome's new "IP Protection" will hide users' IP addresses	Safety	BleepingComputer
25.10.23	Hackers update Cisco IOS XE backdoor to hide infected devices	Virus	BleepingComputer
25.10.23	New TetrisPhantom hackers steal data from secure USB drives on govt systems	Incindent	BleepingComputer
25.10.23	Microsoft announces Security Copilot early access program	OS	BleepingComputer
25.10.23	Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities	Vulnerebility	The Hacker News
25.10.23	Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia	BigBrothers	The Hacker News
25.10.23	34 Cybercriminals Arrested in Spain for Multi-Million Dollar Online Scams	CyberCrime	The Hacker News
24.10.23	Operation Triangulation: Experts Uncover Deeper Insights into iOS Zero-Day Attacks	Apple	The Hacker News
24.10.23	Backdoor Implant on Hacked Cisco Devices Modified to Evade Detection	Virus	The Hacker News
24.10.23	1Password Detects Suspicious Activity Following Okta Support Breach	Incindent	The Hacker News
24.10.23	Who's Experimenting with AI Tools in Your Organization?	AI	The Hacker News
24.10.23	DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan	Virus	The Hacker News
23.10.23	Quasar RAT Leverages DLL Side-Loading to Fly Under the Radar	Virus	The Hacker News
22.10.23	American Family Insurance confirms cyberattack is behind IT outages	Incindent	BleepingComputer
22.10.23	The Week in Ransomware - October 20th 2023 - Fighting Back	Ransom	BleepingComputer
22.10.23	International Criminal Court systems breached for cyber espionage	Incindent	BleepingComputer
22.10.23	Threat Brief: Cisco IOS XE Web UI Privilege Escalation Vulnerability (Updated)	Vulnerebility	Palo Alto
22.10.23	BlackCat Climbs the Summit With a New Tactic	Ransom	Palo Alto
22.10.23	R2R STOMPING – ARE YOU READY TO RUN?	Cyber	Checkpoint
22.10.23	Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities	Exploit	Cisco Blog
22.10.23	What is Cracktivator software?	Security	Cisco Blog
22.10.23	Why logging is one of the most overlooked aspects of incident response, and how Cisco Talos IR can help	Security	Cisco Blog
22.10.23	Spearphishing targets in Latin America – Week in security with Tony Anscombe	Safety	Eset
22.10.23	Strengthening the weakest link: top 3 security awareness topics for your employees	Security	Eset
22.10.23	Better safe than sorry: 10 tips to build an effective business backup strategy	Security	Eset
22.10.23	Operation King TUT: The universe of threats in LATAM	Cyber	Eset
21.10.23	Cisco discloses new IOS XE zero-day exploited to deploy malware implant	Exploit	BleepingComputer
21.10.23	Okta says its support system was breached using stolen credentials	Incindent	BleepingComputer
21.10.23	Ragnar Locker ransomware developer arrested in France	Ransom	BleepingComputer
21.10.23	Critical RCE flaws found in SolarWinds access audit solution	Vulnerebility	BleepingComputer
21.10.23	Kwik Trip finally confirms cyberattack was behind ongoing outage	Cyber	BleepingComputer
21.10.23	Fake Corsair job offers on LinkedIn push DarkGate malware	Virus	BleepingComputer
21.10.23	Over 40,000 Cisco IOS XE devices infected with backdoor using zero-day	Virus	BleepingComputer
21.10.23	E-Root admin faces 20 years for selling stolen RDP, SSH accounts	Incindent	BleepingComputer
21.10.23	BlackCat ransomware uses new ‘Munchkin’ Linux VM in stealthy attacks	Ransom	BleepingComputer
21.10.23	Microsoft extends Purview Audit log retention after July breach	Incindent	BleepingComputer
21.10.23	Fake KeePass site uses Google Ads and Punycode to push malware	Virus	BleepingComputer
21.10.23	India targets Microsoft, Amazon tech support scammers in nationwide crackdown	Spam	BleepingComputer
21.10.23	Europol Dismantles Ragnar Locker Ransomware Infrastructure, Nabs Key Developer	CyberCrime	The Hacker News
21.10.23	Okta's Support System Breach Exposes Customer Data to Unidentified Threat Actors	Incindent	The Hacker News
21.10.23	Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices	Exploit	The Hacker News
21.10.23	Malvertisers Using Google Ads to Target Users Searching for Popular Software	Virus	The Hacker News
21.10.23	Vietnamese Hackers Target U.K., U.S., and India with DarkGate Malware	Virus	The Hacker News
20.10.23	ExelaStealer: A New Low-Cost Cybercrime Weapon Emerges	Virus	The Hacker News
20.10.23	U.S. DoJ Cracks Down on North Korean IT Scammers Defrauding Global Businesses	Spam	The Hacker News
19.10.23	Iranian hackers lurked in Middle Eastern govt network for 8 months	Hack	BleepingComputer
19.10.23	Ragnar Locker ransomware’s dark web extortion sites seized by police	Ransom	BleepingComputer
19.10.23	Casio discloses data breach impacting customers in 149 countries	Incindent	BleepingComputer
19.10.23	Ukrainian activists hack Trigona ransomware gang, wipe servers	Ransom	BleepingComputer
19.10.23	North Korean hackers exploit critical TeamCity flaw to breach networks	Exploit	BleepingComputer
19.10.23	Ex-Navy IT head gets 5 years for selling people’s data on darkweb	CyberCrime	BleepingComputer
19.10.23	Hacker leaks millions of new 23andMe genetic data profiles	Incindent	BleepingComputer
19.10.23	Google Play Protect adds real-time scanning to fight Android malware	Android	BleepingComputer
19.10.23	MATA malware framework exploits EDR in attacks on defense firms	Virus	BleepingComputer
19.10.23	Google links WinRAR exploitation to Russian, Chinese state hackers	BigBrothers	BleepingComputer
19.10.23	Recently patched Citrix NetScaler bug exploited as zero-day since August	Exploit	BleepingComputer
19.10.23	Qubitstrike attacks rootkit Jupyter Linux servers to steal credentials	Virus	BleepingComputer
19.10.23	Twitter testing annual subscriptions for tweeting and retweeting	Social	BleepingComputer
19.10.23	Microsoft disables bad spam rule flagging all sent emails as junk	OS	BleepingComputer
19.10.23	FBI warns of extortion groups targeting plastic surgery offices	BigBrothers	BleepingComputer
19.10.23	Over 40,000 admin portal accounts use 'admin' as a password	Incindent	BleepingComputer
19.10.23	KwikTrip all but says IT outage was caused by a cyberattack	Incindent	BleepingComputer
19.10.23	Malicious Notepad++ Google ads evade detection for months	Virus	BleepingComputer
19.10.23	Amazon adds passkey support as new passwordless login option	Security	BleepingComputer
19.10.23	D-Link confirms data breach after employee phishing attack	Phishing	BleepingComputer
19.10.23	SpyNote Android malware spreads via fake volcano eruption alerts	Android	BleepingComputer
19.10.23	Microsoft fixes known issue causing Outlook freezes, slow starts	OS	BleepingComputer
19.10.23	Fighting off cyberattacks? Make sure user credentials aren’t compromised	Cyber	BleepingComputer
19.10.23	Over 10,000 Cisco devices hacked in IOS XE zero-day attacks	Hack	BleepingComputer
19.10.23	October Windows Server updates cause Hyper-V VM boot issues	OS	BleepingComputer
19.10.23	Discord still a hotbed of malware activity — Now APTs join the fun	APT	BleepingComputer
19.10.23	Kansas courts IT systems offline after ‘security incident’	Incindent	BleepingComputer
19.10.23	Hackers exploit critical flaw in WordPress Royal Elementor plugin	Exploit	BleepingComputer
19.10.23	Russian Sandworm hackers breached 11 Ukrainian telcos since May	BigBrothers	BleepingComputer
19.10.23	Cisco warns of new IOS XE zero-day actively exploited in attacks	Exploit	BleepingComputer
19.10.23	Fake 'RedAlert' rocket alert app for Israel installs Android spyware	Android	BleepingComputer
19.10.23	CISA, FBI urge admins to patch Atlassian Confluence immediately	BigBrothers	BleepingComputer
19.10.23	Microsoft fixes Windows 10 security update installation issue	OS	BleepingComputer
19.10.23	Signal says there is no evidence rumored zero-day bug is real	Social	BleepingComputer
19.10.23	Steam enforces SMS verification to curb malware-ridden updates	Virus	BleepingComputer
19.10.23	Women Political Leaders Summit targeted in RomCom malware phishing	Phishing	BleepingComputer
19.10.23	AI algorithm detects MitM attacks on unmanned military vehicles	AI	BleepingComputer
19.10.23	DarkGate malware spreads through compromised Skype accounts	Virus	BleepingComputer
19.10.23	Ubuntu discovers 'hate speech' in release 23.10 — how to upgrade?	OS	BleepingComputer
19.10.23	Sophisticated MATA Framework Strikes Eastern European Oil and Gas Companies	BigBrothers	The Hacker News
19.10.23	Google Play Protect Introduces Real-Time Code-Level Scanning for Android Malware	Android	The Hacker News
19.10.23	Iran-Linked OilRig Targets Middle East Governments in 8-Month Cyber Campaign	BigBrothers	The Hacker News
19.10.23	Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw	Exploit	The Hacker News
19.10.23	Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw	Exploit	The Hacker News
19.10.23	Lazarus Group Targeting Defense Experts with Fake Interviews via Trojanized VNC Apps	APT	The Hacker News
19.10.23	Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms	Exploit	The Hacker News
19.10.23	Unraveling Real-Life Attack Paths – Key Lessons Learned	Attack	The Hacker News
19.10.23	Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit Campaign	CyberCrime	The Hacker News
18.10.23	TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments	BigBrothers	The Hacker News
18.10.23	New Admin Takeover Vulnerability Exposed in Synology's DiskStation Manager	Vulnerebility	The Hacker News
18.10.23	D-Link Confirms Data Breach: Employee Falls Victim to Phishing Attack	Phishing	The Hacker News
18.10.23	Discord: A Playground for Nation-State Hackers Targeting Critical Infrastructure	BigBrothers	The Hacker News
18.10.23	Critical Vulnerabilities Uncovered in Open Source CasaOS Cloud Software	Vulnerebility	The Hacker News
17.10.23	Exploring the Realm of Malicious Generative AI: A New Digital Security Challenge	AI	The Hacker News
17.10.23	Experts Warn of Severe Flaws Affecting Milesight Routers and Titan SFTP Servers	Vulnerebility	The Hacker News
17.10.23	CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks	BigBrothers	The Hacker News
17.10.23	Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild	Vulnerebility	The Hacker News
17.10.23	Pro-Russian Hackers Exploiting Recent WinRAR Vulnerability in New Campaign	BigBrothers	The Hacker News
16.10.23	SpyNote: Beware of This Android Trojan that Records Audio and Phone Calls	Android	The Hacker News
16.10.23	Signal Debunks Zero-Day Vulnerability Reports, Finds No Evidence	Vulnerebility	The Hacker News
16.10.23	Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign	Exploit	The Hacker News
15.10.23	Understanding DNS Tunneling Traffic in the Wild	Security	Palo Alto
15.10.23	Wireshark Tutorial: Identifying Hosts and Users	Security	Palo Alto
15.10.23	STAYIN’ ALIVE – TARGETED ATTACKS AGAINST TELECOMS AND GOVERNMENT MINISTRIES IN ASIA	BigBrother	Checkpoint
15.10.23	R2R STOMPING – ARE YOU READY TO RUN?	Cyber	Checkpoint
15.10.23	What to know about the HTTP/2 Rapid Reset DDoS attacks	Attack	Cisco Blog
15.10.23	10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows	Vulnerebility	Cisco Blog
15.10.23	Microsoft patches 12 critical vulnerabilities, nine of which are in Layer 2 Tunneling Protocol	Vulnerebility	Cisco Blog
15.10.23	Staying on top of security updates – Week in security with Tony Anscombe	Cyber	Eset
15.10.23	Virus Bulletin – building digital armies	Cyber	Eset
15.10.23	6 steps to getting the board on board with your cybersecurity program	Cyber	Eset
15.10.23	Virus Bulletin PUA – a love letter	Cyber	Eset
15.10.23	Your family, home and small business need a cyber-resilience strategy, too!	Cyber	Eset
14.10.23	Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication	OS	The Hacker News
14.10.23	New PEAPOD Cyberattack Campaign Targeting Women Political Leaders	BigBrothers	The Hacker News
14.10.23	The Week in Ransomware - October 13th 2023 - Increasing Attacks	Ransom	BleepingComputer
14.10.23	23andMe hit with lawsuits after hacker leaks stolen genetics data	Incindent	BleepingComputer
14.10.23	Microsoft: October Windows 10 security updates fail to install	OS	BleepingComputer
14.10.23	Kwik Trip IT systems outage caused by mysterious ‘network incident’	Incindent	BleepingComputer
14.10.23	Microsoft plans to kill off NTLM authentication in Windows 11	OS	BleepingComputer
14.10.23	Hackers use Binance Smart Chain contracts to store malicious scripts	Virus	BleepingComputer
14.10.23	CISA shares vulnerabilities, misconfigs used by ransomware gangs	Ransom	BleepingComputer
14.10.23	FBI shares AvosLocker ransomware technical details, defense tips	Ransom	BleepingComputer
14.10.23	Ransomware attacks now target unpatched WS_FTP servers	Ransom	BleepingComputer
14.10.23	Malicious Solana, Kucoin packages infect NuGet devs with SeroXen RAT	Virus	BleepingComputer
14.10.23	New Microsoft bug bounty program focuses on AI-powered Bing	AI	BleepingComputer
14.10.23	Apple fixes iOS Kernel zero-day vulnerability on older iPhones	Apple	BleepingComputer
14.10.23	ToddyCat hackers use 'disposable' malware to target Asian telecoms	Virus	BleepingComputer
14.10.23	Hyped up curl vulnerability falls short of expectations	Vulnerebility	BleepingComputer
14.10.23	Shadow PC warns of data breach as hacker tries to sell gamers' info	Incindent	BleepingComputer
14.10.23	New WordPress backdoor creates rogue admin to hijack websites	Virus	BleepingComputer
14.10.23	BianLian extortion group claims recent Air Canada breach	Incindent	BleepingComputer
14.10.23	Microsoft Defender now auto-isolates compromised accounts	Incindent	BleepingComputer
14.10.23	Exchange Online mail delivery issues caused by anti-spam rules	Spam	BleepingComputer
14.10.23	Windows 11 21H2 and Windows Server 2012 reach end of support	OS	BleepingComputer
14.10.23	Microsoft: State hackers exploiting Confluence zero-day since September	Exploit	BleepingComputer
14.10.23	Simpson Manufacturing shuts down IT systems after cyberattack	Incindent	BleepingComputer
14.10.23	LinkedIn Smart Links attacks return to target Microsoft accounts	Security	BleepingComputer
13.10.23	Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration	APT	The Hacker News
13.10.23	DarkGate Malware Spreading via Messaging Services Posing as PDF Files	Virus	The Hacker News
13.10.23	FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical Infrastructure	Ransom	The Hacker News
13.10.23	Malicious NuGet Package Targeting .NET Developers with SeroXen RAT	Virus	The Hacker News
13.10.23	ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers	BotNet	The Hacker News
12.10.23	Microsoft Defender Thwarts Akira Ransomware's Large-Scale Attack	Attack	The Hacker News
12.10.23	Researchers Uncover Malware Posing as WordPress Caching Plugin	Virus	The Hacker News
12.10.23	Researchers Uncover Ongoing Attacks Targeting Asian Governments and Telecom Giants	BigBrothers	The Hacker News
12.10.23	Two High-Risk Security Flaws Discovered in Curl Library - New Patches Released	Vulnerebility	The Hacker News
12.10.23	Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023	Hack	The Hacker News
12.10.23	CISA Warns of Actively Exploited Adobe Acrobat Reader Vulnerability	Vulnerebility	The Hacker News
11.10.23	Microsoft warns of incorrect BitLocker encryption errors	OS	BleepingComputer
11.10.23	Mirai DDoS malware variant expands targets with 13 router exploits	BotNet	BleepingComputer
11.10.23	Microsoft Exchange gets ‘better’ patch to mitigate critical bug	OS	BleepingComputer
11.10.23	Windows 10 KB5031356 update released with 25 improvements	OS	BleepingComputer
11.10.23	Windows 11 KB5031354 cumulative update released with new features	OS	BleepingComputer
11.10.23	Microsoft October 2023 Patch Tuesday fixes 3 zero-days, 104 flaws	OS	BleepingComputer
11.10.23	Air Europa data breach: Customers warned to cancel credit cards	Incindent	BleepingComputer
11.10.23	Microsoft to kill off VBScript in Windows to block malware delivery	OS	BleepingComputer
11.10.23	New critical Citrix NetScaler flaw exposes 'sensitive' data	Vulnerebility	BleepingComputer
11.10.23	New 'HTTP/2 Rapid Reset' zero-day attack breaks DDoS records	Attack	BleepingComputer
11.10.23	Google makes passkeys the default sign-in for personal accounts	Security	BleepingComputer
11.10.23	D-Link WiFi range extender vulnerable to command injection attacks	Attack	BleepingComputer
11.10.23	ALPHV ransomware gang claims attack on Florida circuit court	Ransom	BleepingComputer
11.10.23	GNOME Linux systems exposed to RCE attacks via file downloads	Vulnerebility	BleepingComputer
11.10.23	Over 17,000 WordPress sites hacked in Balada Injector attacks last month	Hack	BleepingComputer
11.10.23	Hackers modify online stores’ 404 pages to steal credit cards	CyberCrime	BleepingComputer
11.10.23	Hackers hijack Citrix NetScaler login pages to steal credentials	Incindent	BleepingComputer
11.10.23	HelloKitty ransomware source code leaked on hacking forum	Ransom	BleepingComputer
11.10.23	Google Chrome's organize tabs will automatically reorder tabs	Security	BleepingComputer
11.10.23	Microsoft 365 admins warned of new Google anti-spam rules	Security	BleepingComputer
11.10.23	Third Flagstar Bank data breach since 2021 affects 800,000 customers	Incindent	BleepingComputer
11.10.23	Bounty offered for secret NSA seeds behind NIST elliptic curves algo	BigBrothers	BleepingComputer
11.10.23	Microsoft Releases October 2023 Patches for 103 Flaws, Including 2 Active Exploits	Vulnerebility	The Hacker News
11.10.23	Microsoft Warns of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability	Exploit	The Hacker News
11.10.23	HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS Attacks	Attack	The Hacker News
11.10.23	Google Adopts Passkeys as Default Sign-in Method for All Users	Security	The Hacker News
10.10.23	New Report: Child Sexual Abuse Content and Online Risks to Children on the Rise	Security	The Hacker News
10.10.23	Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries	APT	The Hacker News
10.10.23	New Magecart Campaign Alters 404 Error Pages to Steal Shoppers' Credit Cards	CyberCrime	The Hacker News
10.10.23	libcue Library Flaw Opens GNOME Linux Systems Vulnerable to RCE Attacks	Vulnerebility	The Hacker News
10.10.23	Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials	Exploit	The Hacker News
10.10.23	PEACHPIT: Massive Ad Fraud Botnet Powered by Millions of Hacked Android and iOS	Android	The Hacker News
9.10.23	Cybercriminals Using EvilProxy Phishing Kit to Target Senior Executives in U.S. Firms	Phishing	The Hacker News
9.10.23	High-Severity Flaws in ConnectedIO's 3G/4G Routers Raise Concerns for IoT Security	IoT	The Hacker News
9.10.23	Security Patch for Two New Flaws in Curl Library Arriving on October 11	Vulnerebility	The Hacker News
9.10.23	Gaza-Linked Cyber Threat Actor Targets Israeli Energy and Defense Sectors	BigBrothers	The Hacker News
8.10.23	Leveraging a Hooking Framework to Expand Malware Detection Coverage on the Android Platform	OS Blog	Palo Alto
8.10.23	Threat Brief - MOVEit Transfer SQL Injection Vulnerabilities: CVE-2023-34362, CVE-2023-35036 and CVE-2023-35708 (Updated Oct 4)	Vulnerebility blog	Palo Alto
8.10.23	Qakbot-affiliated actors distribute Ransom Knight malware despite infrastructure takedown	Malware blog	Cisco Blog
8.10.23	What is the dark web?	Security blog	Cisco Blog
8.10.23	10 new vulnerabilities disclosed by Talos, including use-after-free issue in Google Chrome	Vulnerebility blog	Cisco Blog
8.10.23	ICS protocol coverage using Snort 3 service inspectors	ICS blog	Cisco Blog
8.10.23	Is it bad to have a major security incident on your résumé? (Seriously I don’t know)	Incident blog	Cisco Blog
8.10.23	Threat Roundup for September 22 to September 29	Security blog	Cisco Blog
8.10.23	The security pitfalls of social media sites offering ID-based authentication	Social blog	Cisco Blog
8.10.23	What’s the point of press releases from threat actors?	Security blog	Cisco Blog
8.10.23	DinodasRAT used against governmental entity in Guayana – Week in security with Tony Anscombe	Malware blog	Eset
8.10.23	Fake friends and followers on social media – and how to spot them	Social blog	Eset
8.10.23	Operation Jacana: Foundling hobbits in Guyana	BigBrother blog	Eset
8.10.23	Playing your part in building a safer digital world: Why cybersecurity matters	Cyber blog	Eset
8.10.23	How Lazarus impersonated Meta to attack a target in Spain – Week in security with Tony Anscombe	APT blog	Eset
8.10.23	Lazarus luring employees with trojanized coding challenges: The case of a Spanish aerospace company	APT blog	Eset
8.10.23	5 of the top programming languages for cybersecurity	Cyber blog	Eset
8.10.23	Can open-source software be secure?	Security blog	Eset
8.10.23	North Korea's Lazarus Group Launders $900 Million in Cryptocurrency	Cryptocurrency	The Hacker News
7.10.23	D.C. Board of Elections confirms voter data stolen in site hack	Incindent	BleepingComputer
7.10.23	Blackbaud agrees to $49.5 million settlement for ransomware data breach	Ransom	BleepingComputer
7.10.23	FTC warns of ‘staggering’ losses to social media scams since 2021	BigBrothers	BleepingComputer
7.10.23	Genetics firm 23andMe says user data stolen in credential stuffing attack	Incindent	BleepingComputer
7.10.23	MGM Resorts ransomware attack led to $100 million loss, data theft	Ransom	BleepingComputer
7.10.23	Microsoft officially removes Cortana for Windows 11 Insiders	OS	BleepingComputer
7.10.23	Exploits released for Linux flaw giving root on major distros	Exploit	BleepingComputer
7.10.23	China-linked cyberspies backdoor semiconductor firms with Cobalt Strike	Virus	BleepingComputer
7.10.23	NSA and CISA reveal top 10 cybersecurity misconfigurations	BigBrothers	BleepingComputer
7.10.23	Amazon to make MFA mandatory for 'root' AWS accounts by mid-2024	Security	BleepingComputer
7.10.23	Lyca Mobile investigates customer data leak after cyberattack	Incindent	BleepingComputer
7.10.23	Hundreds of malicious Python packages found stealing sensitive data	Virus	BleepingComputer
7.10.23	Apple emergency update fixes new zero-day used to hack iPhones	Apple	BleepingComputer
7.10.23	Atlassian patches critical Confluence zero-day exploited in attacks	Vulnerebility	BleepingComputer
7.10.23	Researchers warn of 100,000 industrial control systems exposed online	ICS	BleepingComputer
7.10.23	Cisco fixes hard-coded root credentials in Emergency Responder	Vulnerebility	BleepingComputer
7.10.23	Microsoft: Hackers target Azure cloud VMs via breached SQL servers	Hack	BleepingComputer
7.10.23	Sony confirms data breach impacting thousands in the U.S.	Incindent	BleepingComputer
7.10.23	New 'Looney Tunables' Linux bug gives root on major distros	Vulnerebility	BleepingComputer
7.10.23	Microsoft now lets you play a game during Windows 11 installs	OS	BleepingComputer
7.10.23	Google to bolster phishing and malware delivery defenses in 2024	Phishing	BleepingComputer
7.10.23	Android October security update fixes zero-days exploited in attacks	Android	BleepingComputer
7.10.23	ShellTorch flaws expose AI servers to code execution attacks	Vulnerebility	BleepingComputer
7.10.23	Qualcomm says hackers exploit 3 zero-days in its GPU, DSP drivers	Exploit	BleepingComputer
7.10.23	Microsoft Edge, Teams get fixes for zero-days in open-source libraries	Vulnerebility	BleepingComputer
7.10.23	EvilProxy uses indeed.com open redirect for Microsoft 365 phishing	Phishing	BleepingComputer
7.10.23	Microsoft Defender no longer flags Tor Browser as malware	Virus	BleepingComputer
7.10.23	Exim patches three of six zero-day bugs disclosed last week	Vulnerebility	BleepingComputer
7.10.23	New BunnyLoader threat emerges as a feature-rich malware-as-a-service	Virus	BleepingComputer
7.10.23	Ransomware gangs now exploiting critical TeamCity RCE flaw	Ransom	BleepingComputer
7.10.23	Exploit available for critical WS_FTP bug exploited in attacks	Exploit	BleepingComputer
7.10.23	Arm warns of Mali GPU flaws likely exploited in targeted attacks	Exploit	BleepingComputer
7.10.23	Motel One discloses data breach following ransomware attack	Ransom	BleepingComputer
7.10.23	FBI warns of surge in 'phantom hacker' scams impacting the elderly	CyberCrime	BleepingComputer
7.10.23	Amazon sends Mastercard, Google Play gift card order emails by mistake	Security	BleepingComputer
7.10.23	Meet LostTrust ransomware — A likely rebrand of the MetaEncryptor gang	Ransom	BleepingComputer
7.10.23	New Marvin attack revives 25-year-old decryption flaw in RSA	Attack	BleepingComputer
6.10.23	Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike	APT	The Hacker News
6.10.23	GitHub's Secret Scanning Feature Now Covers AWS, Microsoft, Google, and Slack	Security	The Hacker News
6.10.23	Supermicro's BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities	Vulnerebility	The Hacker News
6.10.23	QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks	Virus	The Hacker News
6.10.23	Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems	Vulnerebility	The Hacker News
5.10.23	Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities	Virus	The Hacker News
5.10.23	Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack	BigBrothers	The Hacker News
5.10.23	GoldDigger Android Trojan Targets Banking Apps in Asia Pacific Countries	Android	The Hacker News
5.10.23	CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities	Exploit	The Hacker News
5.10.23	Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw	Apple	The Hacker News
5.10.23	Atlassian Confluence Hit by New Actively Exploited Zero-Day – Patch Now	Exploit	The Hacker News
5.10.23	Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware	Android	The Hacker News
5.10.23	Wing Disrupts the Market by Introducing Affordable SaaS Security	Security	The Hacker News
5.10.23	Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack	Virus	The Hacker News
4.10.23	Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance	Attack	The Hacker News
4.10.23	Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions	Vulnerebility	The Hacker News
4.10.23	Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation	Exploit	The Hacker News
4.10.23	Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch	Vulnerebility	The Hacker News
4.10.23	Over 3 Dozen Data-Stealing Malicious npm Packages Found Targeting Developers	Virus	The Hacker News
3.10.23	Protecting your IT infrastructure with Security Configuration Assessment (SCA)	Security	The Hacker News
3.10.23	Researcher Reveals New Techniques to Bypass Cloudflare's Firewall and DDoS Protection	Hack	The Hacker News
3.10.23	Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation	Exploit	The Hacker News
3.10.23	LUCR-3: Scattered Spider Getting SaaS-y in the Cloud	Security	The Hacker News
3.10.23	Silent Skimmer: A Year-Long Web Skimming Campaign Targeting Online Payment Businesses	CyberCrime	The Hacker News
3.10.23	OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code	Vulnerebility	The Hacker News
3.10.23	BunnyLoader: New Malware-as-a-Service Threat Emerges in the Cybercrime Underground	Virus	The Hacker News
3.10.23	Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users	Android	The Hacker News
1.10.23	Cloudflare DDoS protections ironically bypassed using Cloudflare	Security	BleepingComputer
1.10.23	Microsoft fixes Outlook prompts to reopen closed windows	OS	BleepingComputer
1.10.23	The Week in Ransomware - September 29th 2023 - Dark Angels	Ransom	BleepingComputer
1.10.23	Millions of Exim mail servers exposed to zero-day RCE attacks	Exploit	BleepingComputer
1.10.23	Exploit released for Microsoft SharePoint Server auth bypass flaw	Exploit	BleepingComputer
1.10.23	ShinyHunters member pleads guilty to $6 million in data theft damages	Incindent	BleepingComputer
1.10.23	Discord is investigating cause of ‘You have been blocked’ errors	Security	BleepingComputer
1.10.23	Lazarus hackers breach aerospace firm with new LightlessCan malware	Virus	BleepingComputer
1.10.23	Progress warns of maximum severity WS_FTP Server vulnerability	Vulnerebility	BleepingComputer
1.10.23	Microsoft breach led to theft of 60,000 US State Dept emails	Incindent	BleepingComputer
1.10.23	Bing Chat responses infiltrated by ads pushing malware	Virus	BleepingComputer
1.10.23	FBI: Dual ransomware attack victims now get hit within 48 hours	Ransom	BleepingComputer
1.10.23	Cisco urges admins to fix IOS software zero-day exploited in attacks	Vulnerebility	BleepingComputer
1.10.23	Cisco Catalyst SD-WAN Manager flaw allows remote server access	Vulnerebility	BleepingComputer
1.10.23	Security researcher stopped at US border for investigating crypto scam	Spam	BleepingComputer
1.10.23	Budworm hackers target telcos and govt orgs with custom malware	Virus	BleepingComputer
1.10.23	Google fixes fifth actively exploited Chrome zero-day of 2023	Vulnerebility	BleepingComputer
1.10.23	SSH keys stolen by stream of malicious PyPI and npm packages	Virus	BleepingComputer
1.10.23	Fake Bitwarden sites push new ZenRAT password-stealing malware	Virus	BleepingComputer
1.10.23	Building automation giant Johnson Controls hit by ransomware attack	Ransom	BleepingComputer
1.10.23	US and Japan warn of Chinese hackers backdooring Cisco routers	BigBrothers	BleepingComputer
1.10.23	Modern GPUs vulnerable to new GPU.zip side-channel attack	Attack	BleepingComputer
1.10.23	GitHub repos bombarded by info-stealing commits masked as Dependabot	Virus	BleepingComputer
1.10.23	New ZeroFont phishing tricks Outlook into showing fake AV-scans	Phishing	BleepingComputer
1.10.23	Windows 11's new ‘Never Combine’ icons feature is almost usable	OS	BleepingComputer
1.10.23	Sony investigates cyberattack as hackers fight over who's responsible	Cyber	BleepingComputer
1.10.23	Windows 11 KB5030310 update adds recommended websites, fixes 24 issues	OS	BleepingComputer
1.10.23	Windows 11 ‘Moment 4’ update released, here are the many new features	OS	BleepingComputer
1.10.23	Windows 11 22H2 adds a built-in passkey manager for Windows Hello	OS	BleepingComputer
1.10.23	Google assigns new maximum rated CVE to libwebp bug exploited in attacks	Vulnerebility	BleepingComputer
1.10.23	New AtlasCross hackers use American Red Cross as phishing lure	Phishing	BleepingComputer
1.10.23	Hackers actively exploiting Openfire flaw to encrypt servers	Exploit	BleepingComputer
1.10.23	SickKids impacted by BORN Ontario data breach that hit 3.4 million	Incindent	BleepingComputer
1.10.23	ShadowSyndicate hackers linked to multiple ransomware ops, 85 servers	Hack	BleepingComputer
1.10.23	BORN Ontario child registry data breach affects 3.4 million people	Incindent	BleepingComputer
1.10.23	Google is retiring its Gmail Basic HTML view in January 2024	Security	BleepingComputer
1.10.23	Mixin Network suspends operations following $200 million hack	Incindent	BleepingComputer
1.10.23	Fake celebrity photo leak videos flood TikTok with Temu referral codes	Social	BleepingComputer
1.10.23	FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies	Ransom	The Hacker News
1.10.23	Iranian APT Group OilRig Using New Menorah Malware for Covert Operations	APT	The Hacker News