Security Feeds

The Hacker News

• Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability
• U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown
• How to Get Going with CTEM When You Don't Know Where to Start
• Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors
• WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

Bruce Schneier

• Friday Squid Blogging: Map of All Colossal Squid Sightings
• Weird Zimbra Vulnerability
• California AI Safety Bill Vetoed
• Hacking ChatGPT by Planting False Memories into Its Data
• AI and the 2024 US Elections

Krebs on Security

• A Single Cloud Compromise Can Feed an Army of AI Sex Bots
• Crooked Cops, Stolen Laptops & the Ghost of UGNazi
• U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex
• Timeshare Owner? The Mexican Drug Cartels Want You
• This Windows PowerShell Phish Has Scary Potential

Packet Storm

• Harvard Duo Hacks Meta Ray-Bans To Dox Strangers On Site In Seconds
• China's Salt Typhoon Cyber Spies Are Deep Inside US ISPs
• Mozilla Hit With Privacy Complaint Over Firefox User Tracking
• UK Activists Targeted With Pegasus Spyware Ask Police To Charge NSO Group
• Apple Suddenly Drops NSO Group Spyware Lawsuit

Kali Linux Blogs

• Kali Linux 2024.3 Release (Multiple transitions)
• Kali Linux 2024.2 Release (t64, GNOME 46 & Community Packages)
• xz-utils backdoor: how to get started
• All about the xz-utils backdoor
• Kali Linux 2024.1 Release (Micro Mirror)

NIST

• Safeguarding Health Information: Building Assurance through HIPAA Security 2024
• NIST Awards $3 Million for Community-Based Cybersecurity Workforce Development
• Building a Cybersecurity and Privacy Learning Program: NIST Publishes SP 800-50r1
• Workshop on Whole Community Public Safety and Resilience in Smart Cities
• NIST Releases Second Public Draft of Digital Identity Guidelines for Final Review

US-Cert

• CISA Adds One Known Exploited Vulnerability to Catalog
• Russian Military Cyber Actors Target US and Global Critical Infrastructure
• #StopRansomware: RansomHub Ransomware
• Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
• North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs