Threat Actor: Muddling Meerkat | Muddling Meerkat Victim: Various sectors including legal, government, and construction | Various sectors
Key Point :
Threat actors are using old, neglected domains to spoof sender addresses and evade security checks.…
Keypoints :
The ZDI Threat Hunting team identified multiple zero-day vulnerabilities exploited in the wild during 2024.…
Threat Actor: Unknown | unknown Victim: Browser Users | browser users
Key Point :
Google’s Chrome 131 update fixes four security defects, including a high-severity type confusion flaw in the V8 JavaScript engine.…
Threat Actor: Cybercriminals | cybercriminals Victim: Organizations using NFS | organizations using NFS
Key Point :
NFS is widely used but often misconfigured, leading to unauthorized access to sensitive data.…Keypoints :
Kimsuky, also known as Black Banshee, has been active since 2013 and is state-sponsored by North Korea.…The video discusses significant cybersecurity threats, including how over a million domain names are at risk of being stolen due to a vulnerability known as the Sitting Duck attack. It covers the oversight of hosting providers, a massive email spoofing operation affecting major brands, and the release of two high-profile Russian cyber criminals as part of a recent prisoner exchange.…
Summary :
Silent Push Threat Analysts have identified a significant phishing campaign led by a threat actor known as “Aggressive Inventory Zombies” (AIZ), targeting major retail brands and cryptocurrency platforms. This campaign utilizes sophisticated phishing websites and chat services to deceive users. #Phishing #CyberThreats #EcommerceSecurity
Keypoints :
Threat actor “Aggressive Inventory Zombies” (AIZ) has ramped up phishing activities in 2024.…Summary :
In 2024, law enforcement agencies worldwide have made significant strides against cybercrime through international collaboration and intelligence sharing, leading to the dismantling of major criminal operations and marketplaces. #Cybercrime #LawEnforcement #InternationalCollaboration
Keypoints :
International operations have disrupted various cybercrime networks in 2024. Law enforcement agencies collaborated to dismantle ransomware groups and Dark Web marketplaces.…Summary :
Unit 42 researchers uncovered a phishing campaign targeting European companies, particularly in the automotive and chemical sectors, aiming to harvest Microsoft Azure credentials. The campaign peaked in June 2024, impacting around 20,000 users through malicious links and documents. #Phishing #CyberSecurity #CredentialHarvesting
Keypoints :
The phishing campaign targeted European companies, primarily in the automotive and chemical industries.…Phishing is a major issue for organizations, as attackers use tricks to steal sensitive information like passwords or financial details.The 2024 Verizon Data Breach Investigations Report (DBIR) shows phishing is the top credential-related attack, with users often falling for it in under 60 seconds.Here’s a list of top email analysis tools with official links:
PhishTool: Analyze and visualize phishing threats easily – Link: https://phishtool.com/…Key Points :
Reports indicate the sale of VPS and dedicated servers with IP spoofing capabilities. These servers can be misused for DDoS attacks, phishing campaigns, and unauthorized operations.…Summary :
Threat actors known as “Aggressive Inventory Zombies” (AIZ) have been conducting large-scale phishing campaigns targeting major retailers and crypto audiences throughout 2024, utilizing sophisticated methods and tools. #PhishingCampaigns #RetailScams #CryptoFraud
Keypoints :
AIZ has ramped up phishing activities targeting major retailers and crypto audiences in 2024.…### #MicrosoftSecurity #VulnerabilityManagement #RemoteCodeExecution
Summary: A series of vulnerabilities have been identified across various Microsoft products, including critical remote code execution and elevation of privilege vulnerabilities. These issues pose significant risks to users and organizations relying on these technologies.
Threat Actor: Unknown | unknown Victim: Microsoft Products | Microsoft
Key Point :
Multiple vulnerabilities across Microsoft Office, Windows services, and Edge, with several rated as critical or important.…