Slándáil Research: Security Feeds

Bleeping Computer News

New stealthy Pumakit Linux rootkit malware spotted in the wild

Reddit /r/netsec/

Using a 😡 emoji to DoS Facebook Messenger

Bleeping Computer News

Police shuts down Rydox cybercrime market, arrests 3 admins

Bleeping Computer News

New IOCONTROL malware used in critical infrastructure attacks

Bleeping Computer News

US offers $5 million for info on North Korean IT worker farms

Reddit /r/netsec/

Android's CVE-2022-20201 (InstalldNativeService)

SecurityWeek News

Fake IT Workers Funneled Millions to North Korea, DOJ Says

SecurityWeek News

Phishing: The Silent Precursor to Data Breaches

Reddit /r/netsec/

Astalavista.com - Security Community - Relaunch 2024

Bleeping Computer News

Cleo patches critical zero-day exploited in data theft attacks

Bleeping Computer News

Spain busts voice phishing ring for defrauding 10,000 bank customers

Reddit /r/netsec/

300K+ Prometheus Servers and Exporters Exposed to DoS Attack

Bleeping Computer News

Bitcoin ATM firm Byte Federal hacked via GitLab flaw, 58K users exposed

SecurityWeek News

Silent Push Raises $10 Million for Preemptive Threat Intelligence Platform

SecurityWeek News

Sublime Snags $60M Series B for Email Security Tech

SecurityWeek News

Fortinet Acquires Perception Point Reportedly for $100 Million

SecurityWeek News

The Ghost of Christmas Past – AI’s Past, Present and Future

The Hacker News

Over 300K Prometheus Instances Exposed: Credentials and API Keys Leaking Online

SecurityWeek News

Mobile Surveillance Tool EagleMsgSpy Used by Chinese Law Enforcement

The Hacker News

Gamaredon Deploys Android Spyware "BoneSpy" and "PlainGnome" in Former Soviet States

Reddit /r/netsec/

Citrix Denial of Service: Analysis of CVE-2024-8534

Reddit /r/netsec/

SSPM approach of french company Decathlon

SecurityWeek News

Microsoft MFA Bypassed via AuthQuake Attack

Reddit /r/netsec/

Attacking Cortex XDR from an unprivileged user perspective

Reddit /r/netsec/

Exploiting Device Authentication Vulns in Cloud-Managed IoT Devices

The Hacker News

Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS

SecurityWeek News

27 DDoS Attack Services Taken Down by Law Enforcement

The Hacker News

SaaS Budget Planning Guide for IT Professionals

SecurityWeek News

Cleo Patches Exploited Flaw as Security Firms Detail Malware Pushed in Attacks

SecurityWeek News

Hunk Companion, WP Query Console Vulnerabilities Chained to Hack WordPress Sites

The Hacker News

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

The Hacker News

Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested

Reddit /r/netsec/

Cleo Harmony, VLTrader, and LexiCom - RCE via Arbitrary File Write (CVE-2024-50623) - watchTowr Labs

Bleeping Computer News

Hunk Companion WordPress plugin exploited to install vulnerable plugins

Reddit /r/netsec/

Facebook Messenger Group Call DoS Write-up

Bleeping Computer News

Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation

Reddit /r/netsec/

Far From Random: Three Mistakes From Dart/Flutter's Weak PRNG

Bleeping Computer News

New EagleMsgSpy Android spyware used by Chinese police, researchers say

SecurityWeek News

Apple Pushes Major iOS, macOS Security Updates

Bleeping Computer News

Microsoft lifts Windows 11 24H2 block on PCs with USB scanners

Bleeping Computer News

Facebook, Instagram, WhatsApp hit by massive worldwide outage

SecurityWeek News

No Doughnuts Today? Cyberattack Puts Krispy Kreme in a Sticky Situation

The Hacker News

Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service

Bleeping Computer News

Russian Turla hackers hit Starlink-connected devices in Ukraine

Bleeping Computer News

Russian cyber spies hide behind other hackers to target Ukraine

Bleeping Computer News

Operation PowerOFF shuts down 27 DDoS-for-hire platforms

Reddit /r/netsec/

Why Can’t You Fix This Bug Faster?

Bleeping Computer News

Lynx ransomware behind Electrica energy supplier cyberattack

Reddit /r/netsec/

Forget PSEXEC: DCOM Upload & Execute Backdoor

SecurityWeek News

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections

Ubuntu Security Notices

USN-7158-1: Smarty vulnerabilities

Cisco Security Updates

Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability

Ubuntu Security Notices

USN-7159-1: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7156-1: Linux kernel (GKE) vulnerabilities

Ubuntu Security Notices

USN-7155-1: Linux kernel (NVIDIA) vulnerabilities

Ubuntu Security Notices

USN-7154-1: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7153-1: PHP vulnerability

Ubuntu Security Notices

USN-7108-2: AsyncSSH vulnerabilities

Debian Security

DSA-5829-1 chromium - security update

Debian Security

DSA-5830-1 smarty4 - security update

Ubuntu Security Notices

USN-7151-1: oFono vulnerabilities

Palo Alto Advisories

PAN-SA-2024-0017 Chromium: Monthly Vulnerability Updates (Severity: MEDIUM)

Ubuntu Security Notices

USN-7150-1: Tornado vulnerabilities

Ubuntu Security Notices

USN-7149-1: Intel Microcode vulnerabilities

Debian Security

DSA-5828-1 python-aiohttp - security update

Ubuntu Security Notices

USN-7148-1: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7147-1: Apache Shiro vulnerabilities

Ubuntu Security Notices

USN-7146-1: Dogtag PKI vulnerabilities

Ubuntu Security Notices

USN-7145-1: Expat vulnerability

Debian Security

DSA-5826-1 smarty3 - security update

Debian Security

DSA-5827-1 proftpd-dfsg - security update

Ubuntu Security Notices

USN-7141-1: oFono vulnerabilities

Ubuntu Security Notices

USN-7144-1: Linux kernel (Intel IoTG) vulnerabilities

Ubuntu Security Notices

USN-7143-1: RabbitMQ Server vulnerabilities

Ubuntu Security Notices

USN-7142-1: WebKitGTK vulnerabilities

Microsoft Advisories

Mitigating NTLM Relay Attacks by Default

Ubuntu Security Notices

USN-7140-1: Tinyproxy vulnerability

Microsoft Advisories

Announcing the Adaptive Prompt Injection Challenge (LLMail-Inject)

Debian Security

DSA-5824-1 chromium - security update

Debian Security

DSA-5825-1 ceph - security update

Ubuntu Security Notices

USN-7117-3: needrestart regression

Ubuntu Security Notices

USN-7139-1: Apache Shiro vulnerability

Ubuntu Security Notices

USN-7138-1: Ghostscript vulnerabilities

Cisco Security Updates

Cisco NX-OS Software Image Verification Bypass Vulnerability

Ubuntu Security Notices

USN-7137-1: recutils vulnerabilities

Ubuntu Security Notices

USN-7136-2: Django vulnerability

Ubuntu Security Notices

USN-7136-1: Django vulnerabilities

Ubuntu Security Notices

USN-7135-1: HAProxy vulnerability

Cisco Security Updates

Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability

Ubuntu Security Notices

USN-7134-1: Firefox vulnerabilities

Ubuntu Security Notices

USN-7133-1: HAProxy vulnerability

Ubuntu Security Notices

USN-7132-1: PostgreSQL vulnerabilities

Ubuntu Security Notices

USN-6846-2: Ansible regression

Debian Security

DSA-5822-1 simplesamlphp - security update

Debian Security

DSA-5823-1 webkit2gtk - security update

Debian Security

DSA-5815-2 needrestart - regression update

Ubuntu Security Notices

USN-7131-1: Vim vulnerability

Ubuntu Security Notices

USN-7092-2: mpg123 vulnerability

Jenkins advisories

Jenkins Security Advisory 2024-11-27

Ubuntu Security Notices

USN-7126-1: libsoup vulnerabilities

CVE-2024-11767 | NewsmanApp Plugin up to 2.7.6 on WordPress cross site scripting

CVE-2024-11809 | Primer MyData for Woocommerce Plugin up to 4.2.1 on WordPress cross site scripting

CVE-2024-12579 | Minify HTML Plugin up to 2.1.10 on WordPress incorrect regex

Full Disclosure

APPLE-SA-12-11-2024-9 Safari 18.2

Full Disclosure

APPLE-SA-12-11-2024-8 visionOS 2.2

Full Disclosure

APPLE-SA-12-11-2024-7 tvOS 18.2

Full Disclosure

APPLE-SA-12-11-2024-6 watchOS 11.2

Full Disclosure

APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2

Full Disclosure

APPLE-SA-12-11-2024-4 macOS Sonoma 14.7.2

Full Disclosure

APPLE-SA-12-11-2024-3 macOS Sequoia 15.2

Full Disclosure

APPLE-SA-12-11-2024-2 iPadOS 17.7.3

Full Disclosure

APPLE-SA-12-11-2024-1 iOS 18.2 and iPadOS 18.2

Full Disclosure

SEC Consult SA-20241211-0 :: Reflected Cross-Site Scripting in Numerix License Server Administration System Login

Full Disclosure

St. Poelten UAS | Multiple Vulnerabilities in ORing IAP

CVE-2024-55886 | opensearch-project data-prepper 2.10.0/2.10.1 getHttpAuthenticationService improper authentication (GHSA-725p-63vv-v948)

CVE-2024-55875 | http4k up to 5.40.x xml external entity reference (GHSA-7mj5-hjjj-8rgw)

CVE-2024-31670 | rizin up to 0.6.2 dyldcache.c buffer overflow

CVE-2024-47238 | Dell Client Platform BIOS 1.18.x/1.24.x/1.28.x input validation (dsa-2024-355)

CVE-2024-55888 | scidsg hushline up to 0.3.4 ui layer (GHSA-m592-g8qv-hrqx)

CVE-2024-55878 | shuchkin simplexlsx up to 1.1.11 toHTMLEx cross site scripting (GHSA-x6mh-rjwm-8ph7)

CVE-2024-55663 | xwiki-platform up to 13.10.4/14.2 request.sort request escape output (GHSA-wh34-m772-5398)

CVE-2024-55885 | beego up to 2.3.3 weak hash (GHSA-9j3m-fr7q-jxfw)

CVE-2024-55662 | xwiki-platform up to 15.10.8/16.2.x neutralization of directives (GHSA-j2pq-22jj-4pm5)

CVE-2024-55879 | xwiki-platform up to 15.10.8/16.2.x XWiki.ConfigurableClass authorization (GHSA-r279-47wg-chpr)

CVE-2024-49071 | Microsoft Defender for Endpoint on Windows Global Files Search improper authorization of index containing sensitive information

CVE-2024-52901 | IBM InfoSphere Information Server 11.7 GUI improper validation of specified quantity in input

CVE-2024-55877 | xwiki-platform up to 15.10.10/16.4.0 xwiki.WikiMacroClass neutralization of directives (GHSA-2r87-74cx-2p7c)

CVE-2024-54811 | PHPGurukul Park Ticketing Management System 1.0 /index.php login sql injection

CVE-2024-49147 | Microsoft Update Catalog deserialization

CVE-2024-54810 | PHPGurukul Pre-School Enrollment System 1.0 password-recovery.php mobileno sql injection

CVE-2024-55876 | xwiki-platform up to 15.10.8/16.2.x Scheduling Operation authorization (GHSA-cwq6-mjmx-47p6)

CVE-2024-12572 | Hello in All Languages Plugin up to 1.0.6 on WordPress cross-site request forgery

CVE-2024-12574 | SVG Shortcode Plugin up to 1.0.1 on WordPress SVG Upload cross site scripting

CVE-2019-25221 | Responsive Filterable Portfolio Plugin up to 1.0.8 on WordPress sql injection

CVE-2024-12300 | AR Plugin up to 7.3 on WordPress unrestricted upload

CVE-2024-54842 | PHPGurukul Online Nurse Hiring System 1.0 password-recovery.php mobileno sql injection

CVE-2024-55633 | Apache Superset up to 4.0.x Postgres Analytic Database improper authorization

CVE-2024-55099 | PHPGurukul Online Nurse Hiring System 1.0 /admin/index.php username sql injection

CVE-2024-21575 | ltdrdata ComfyUI-Impact-Pack up to 7.6.1 POST Request /upload/temp filename path traversal

CVE-2024-54118 | Huawei HarmonyOS 5.0.0 UIExtension Module information disclosure

CVE-2024-54117 | Huawei HarmonyOS 5.0.0 UIExtension Module information disclosure

CVE-2024-54116 | Huawei HarmonyOS 5.0.0 M3U8 Module unusual condition

CVE-2024-54122 | Huawei HarmonyOS 5.0.0 Ability Module race condition

CVE-2024-54119 | Huawei HarmonyOS 5.0.0 UIExtension Module information disclosure

CVE-2024-54115 | Huawei HarmonyOS 5.0.0 DASH Module unusual condition

CVE-2024-54114 | Huawei HarmonyOS 5.0.0 DASH Module unusual condition

CVE-2024-54113 | Huawei HarmonyOS 5.0.0 Print Module denial of service

CVE-2024-54112 | Huawei HarmonyOS 5.0.0 UIExtension Module access control

CVE-2024-54111 | Huawei HarmonyOS 5.0.0 Image Decoding Module data authenticity

CVE-2024-54110 | Huawei HarmonyOS 5.0.0 UIExtension Module privileges management

Windows Tooling Updates: OleView.NET

McAfee Securing Tomorrow

A New Android Banking Trojan Masquerades as Utility and Banking Apps in India

Qualys Security Blog

Qualys Performance Tuning Series: Remove Stale Compliance Data for the Best Performance

SpecterOps Team Blog

Unwrapping BloodHound v6.3 with Impact Analysis

Amazon Security Bulletins

Issue with DynamoDB local - CVE-2022-1471

Krebs on Security

How Cryptocurrency Turns to Cash in Russian Banks

Qualys Security Blog

Qualys Achieves 100% Major Step Detection in the 2024 MITRE ATT&CK Evaluations, Enterprise

Auditing the Ruby ecosystem’s central package repository

McAfee Securing Tomorrow

The Stealthy Stalker: Remcos RAT

Krebs on Security

Patch Tuesday, December 2024 Edition

Qualys Security Blog

Microsoft and Adobe Patch Tuesday, December 2024 Security Update Review

SpecterOps Team Blog

SPA is for Single-Page Abuse! - Using Single-Page Application Tokens to Enumerate Azure

35 more Semgrep rules: infrastructure, supply chain, and Ruby

Qualys Security Blog

Qualys TotalAI: The Journey from LLM Scanner to Comprehensive AI Security Solution

Microsoft Security Blog

Why security leaders trust Microsoft Sentinel to modernize their SOC

Qualys Security Blog

Secure Your Generative Investments: Qualys Advances Enterprise TruRisk Platform with Qualys TotalAI to Protect Your LLM Investments

Microsoft Security Blog

8 years as a Leader in the Gartner® Magic Quadrant™ for Access Management

Business Advisory Committees Elections Are Now Open - Vote for Your Community Representative

McAfee Securing Tomorrow

How to Protect Your Data While On-the-Go

McAfee Securing Tomorrow

Winter Travel Wi-Fi Safety: How to Protect Your Data While On-the-Go

Microsoft Security Blog

Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage

Qualys Security Blog

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

Microsoft Security Blog

Explore new Microsoft Entra capabilities at Gartner® Identity & Access Management Summit 2024

Krebs on Security

U.S. Offered $10M for Hacker Just Arrested by Russia

Krebs on Security

Why Phishers Love New TLDs Like .shop, .top and .xyz

Microsoft Security Blog

Follow-up on Ignite with Ask Microsoft Anything: Microsoft Security edition

Exodus Intel Blog

Windows Sockets: From Registered I/O to SYSTEM Privileges

McAfee Securing Tomorrow

2024 Data Breaches Wrapped

Cisco Talos - Threat Research

Decoding the Tech Industry

Cisco Talos - Threat Research

Navigating the Future of Cisco Distribution: Insights from the Black Belt Academy

Cisco Talos - Threat Research

Securing Ireland’s Technology Future

Krebs on Security

Hacker in Snowflake Extortions May Be a U.S. Soldier

Nominations Remain Open Until Wednesday, December 4, 2024 - Based on Your Feedback!

Cisco Talos - Threat Research

Recognizing Excellence: Highlights from the FY24 Cisco Learning Partner Awards

Cisco Talos - Threat Research

Cisco unveils SD-WAN Configuration Catalog to streamline industrial deployments

Qualys Security Blog

Elevate Cyber Defense with Qualys Advanced Hunting

Cisco Talos - Threat Research

From Service to Security: My Path to Empowerment at Cisco

Cisco Talos - Threat Research

How Cisco Uses the Isovalent Platform to Secure Cloud Workloads

Websites mirrors

Qualys Security Blog

AI Under the Microscope—What’s Changed in the OWASP Top 10 for LLMs 2025

Remote Code Execution with Spring Properties

Cisco Talos - Threat Research

Not Ready For AI? Time To Lay The Groundwork

McAfee Securing Tomorrow

This Holiday Season, Watch Out for These Cyber-Grinch Tricks Used to Scam Holiday Shoppers

Cisco Talos - Threat Research

The evolving rate of patch management and eISSU for financials

McAfee Securing Tomorrow

SpyLoan: A Global Threat Exploiting Social Engineering

Cisco Talos - Threat Research

Why Cisco Leads with Wi-Fi 7: Transforming Future Connectivity

McAfee Securing Tomorrow

How to Protect Your Social Media Passwords with Multi-factor Verification

Cisco Talos - Threat Research

The Customer Adoption Journey of Cisco Secure Workload

Microsoft Security Blog

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON

Krebs on Security

Feds Charge Five Men in ‘Scattered Spider’ Roundup

Canada Cyber Centre

Ivanti security advisory (AV24-711)

Canada Cyber Centre

Drupal security advisory (AV24-710)

Canada Cyber Centre

Apple security advisory (AV24-709)

Belgium CERT.BE

WARNING: CRITICAL PATH TRAVERSAL VULNERABILITY IN MITEL MICOLLAB, POC AVAILABLE FOR CVE-2024-41713, PATCH IMMEDIATELY!

Belgium CERT.BE

WARNING: CRITICAL VULNERABILITY IN APACHE STRUTS, CVE-2024-53677 CAN LEAD TO RCE, PATCH IMMEDIATELY!

Canada Cyber Centre

Apache security advisory (AV24-708)

Canada Cyber Centre

[Control systems] Schneider Electric security advisory (AV24-707)

Canada Cyber Centre

GitLab security advisory (AV24-706)

Canada Cyber Centre

Atlassian security advisory (AV24-705)

Canada Cyber Centre

Ivanti security advisory (AV24-704)

Canada Cyber Centre

Vulnerability impacting all versions of Cleo VLTrader, Harmony, and LexiCom software

Belgium CERT.BE

WARNING: A CRITICAL VULNERABILITY IS AFFECTING ANGULAR EXPRESSIONS

Belgium CERT.BE

WARNING: A CRITICAL AUTHENTICATION BYPASS VULNERABILITY IS AFFECTING IVANTI CLOUD SERVICES APPLIANCE

Canada Cyber Centre

Google Chrome security advisory (AV24-703)

Canada Cyber Centre

Adobe security advisory (AV24–702)

Belgium CERT.BE

WARNING: MICROSOFT PATCH TUESDAY DECEMBER 2024 PATCHES 70 VULNERABILITIES (16 CRITICAL, 54 IMPORTANT), PATCH IMMEDIATELY!!

Canada Cyber Centre

Microsoft security advisory – December 2024 monthly rollup (AV24–701)

Security Alert: Microsoft Releases December 2024 Security Updates

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB24-92)

HongKong HKCERT

Microsoft Monthly Security Update (December 2024)

HongKong HKCERT

Adobe Monthly Security Update (December 2024)

Canada Cyber Centre

[Control systems] Siemens security advisory (AV24-700)

Belgium CERT.BE

WARNING: MULTIPLE CRITICAL AND HIGH VULNERABILITIES PATCHED BY DELL IN POWERFLEX, POWER MANAGER, INSIGHTIQ, AND DATA LAKEHOUSE, PATCH IMMEDIATELY!

Canada Cyber Centre

SAP security advisory – December 2024 monthly rollup (AV24-699)

Canada Cyber Centre

Drupal security advisory (AV24-698)

Canada Cyber Centre

[Control systems] CISA ICS security advisories (AV24–697)

Canada Cyber Centre

Dell security advisory (AV24-696)

Canada Cyber Centre

IBM security advisory (AV24-695)

Belgium CERT.BE

Warning: SailPoint Patched A Critical Vulnerability, CVE-2024-10905, In IdentityIQ, Patch Immediately!

Belgium CERT.BE

WARNING: MULTIPLE HIGH AND MEDIUM BUFFER OVERFLOW AND CODE EXECUTION VULNERABILITIES IN SONICWALL SMA100 SSLVPN, PATCH IMMEDIATELY!

Canada Cyber Centre

Microsoft Edge security advisory (AV24-694)

Vulnerabilities in Tungsten Automation TotalAgility software

Canada Cyber Centre

SonicWall security advisory (AV24-693)

Belgium CERT.BE

WARNING: 2 VULNERABILITIES PATCHED IN VEEAM SERVICE PROVIDER CONSOLE, PATCH IMMEDIATELY!

Belgium CERT.BE

WARNING: VULNERABILITY IN MULTIPLE SYNOLOGY DSM PRODUCTS & VERSIONS ENABLES REMOTE DENIAL OF SERVICE ATTACKS, SENSITIVE INFORMATION EXPOSURE, AND PRIVILEGE ESCALATION

Canada Cyber Centre

Veeam security advisory (AV24-692)

Canada Cyber Centre

Google Chrome security advisory (AV24-691)

Belgium CERT.BE

Warning: High-Severity vulnerability found in proftpd, Patch Immediately!

Finland NCSC-Fi

Stay safe on social media – tips for using social media securely

Vulnerability in Infinix Mobile devices

Ad fraud on large online platforms

Algeria DZ-CERT

Lettre de consultation N° 013/sg/2024 relative à la sélection d’un fournisseur spécialisé pour l'intégration d'un système de détection de similarité dans la plateforme de gestion éditoriale des revues scientifique (ASJP)

Canada Cyber Centre

Zyxel security advisory (AV24-689)

Canada Cyber Centre

Android security advisory – December 2024 Monthly Rollup (AV24-690)

Canada Cyber Centre

Trellix security advisory (AV24-688)

Canada Cyber Centre

[Control systems] CISA ICS security advisories (AV24–687)

Canada Cyber Centre

IBM security advisory (AV24-686)

Belgium CERT.BE

WARNING: HIGH SEVERITY UNAUTHORISED INCREASE OF AUTHENTICATION LEVEL VULNERABILITY IN LEMONLDAP. PATCH IMMEDIATELY!

Canada Cyber Centre

Ubuntu security advisory (AV24-685)

Canada Cyber Centre

[Control systems] ABB security advisory (AV24-684)

Bug Bounty & Red Teaming

COMING SOON! - Researcher blogs