DigeeX @digeex@noc.social

Raider: A tool to test authentication in web applications | The Daily Swig: https://portswigger.net/daily-swig/raider-a-tool-to-test-authentication-in-web-applications

Cisco bug gives remote attackers root privileges via debug mode: https://www.bleepingcomputer.com/news/security/cisco-bug-gives-remote-attackers-root-privileges-via-debug-mode/

Indonesia's central bank confirms ransomware attack, Conti leaks data: https://www.bleepingcomputer.com/news/security/indonesias-central-bank-confirms-ransomware-attack-conti-leaks-data/

FBI links Diavol ransomware to the TrickBot cybercrime group: https://www.bleepingcomputer.com/news/security/fbi-links-diavol-ransomware-to-the-trickbot-cybercrime-group/

MoonBounce: the dark side of UEFI firmware | Securelist: https://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/

Unauthenticated XSS Vulnerability Patched in HTML Email Template Designer Plugin: https://www.wordfence.com/blog/2022/01/unauthenticated-xss-vulnerability-patched-in-html-email-template-designer-plugin/

Telenot Complex: Insecure AES Key Generation | X41 D-SEC: https://x41-dsec.de/lab/blog/telenot-complex-insecure-keygen/

Gorillas: Special offer - unicorn slices, 150g 🦍❤️ - zerforschung: https://zerforschung.org/posts/gorillas-en/

Red Cross cyberattack exposes data of 515,000 people seeking missing family: https://www.bleepingcomputer.com/news/security/red-cross-cyberattack-exposes-data-of-515-000-people-seeking-missing-family/

483 Crypto.com accounts compromised in $34 million hack: https://www.bleepingcomputer.com/news/security/483-cryptocom-accounts-compromised-in-34-million-hack/

Austrian DSB: EU-US data transfers to Google Analytics illegal: https://noyb.eu/en/austrian-dsb-eu-us-data-transfers-google-analytics-illegal

Bypassing required reviews using GitHub Actions | by Omer Gil | Cider Security | Medium: https://medium.com/cider-sec/bypassing-required-reviews-using-github-actions-6e1b29135cc7

Israel police uses NSO’s Pegasus to spy on citizens - CTech: https://www.calcalistech.com/ctech/articles/0,7340,L-3927410,00.html

New White Rabbit ransomware linked to FIN8 hacking group: https://www.bleepingcomputer.com/news/security/new-white-rabbit-ransomware-linked-to-fin8-hacking-group/

Project Zero: Zooming in on Zero-click Exploits: https://googleprojectzero.blogspot.com/2022/01/zooming-in-on-zero-click-exploits.html

We have been HACKED - OpenSubtitles forum: https://forum.opensubtitles.org/viewtopic.php?t=17685

Mixed Messages: Busting Box’s MFA Methods | Varonis: https://www.varonis.com/blog/box-mfa-bypass-sms

Cyber espionage campaign targets renewable energy companies: https://www.bleepingcomputer.com/news/security/cyber-espionage-campaign-targets-renewable-energy-companies/

Zoho plugs another critical security hole in Desktop Central: https://www.bleepingcomputer.com/news/security/zoho-plugs-another-critical-security-hole-in-desktop-central/

Cross-country Exposure: Analysis of the MY2022 Olympics app - The Citizen Lab: https://citizenlab.ca/2022/01/cross-country-exposure-analysis-my2022-olympics-app/

Unhappy New Year for cybercriminals as VPNLab.net goes offline | Europol: https://www.europol.europa.eu/media-press/newsroom/news/unhappy-new-year-for-cybercriminals-vpnlabnet-goes-offline