• Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability
• Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers
• 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London
• Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft
• TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud
• Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw
• New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency
• New Android Malware 'Ajina.Banker' Steals Financial Data and Bypasses 2FA via Telegram
• Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution
• Beware: New Vo1d Malware Infects 1.3 Million Android-based TV Boxes Worldwide
• Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking
• Top 3 Threat Report Insights for Q2 2024
• Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack
• Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe
• WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers
• Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances
• DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe
• Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate
• Why Is It So Challenging to Go Passwordless?
• Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

• Port of Seattle hit by Rhysida ransomware in August attack
• TfL requires in-person password resets for 30,000 employees after hack
• 23andMe to pay $30 million in genetics data breach settlement
• Ivanti warns high severity CSA flaw is now exploited in attacks
• New Linux malware Hadooken targets Oracle WebLogic servers
• RansomHub claims Kawasaki cyberattack, threatens to leak stolen data
• New Vo1d malware infects 1.3 million Android streaming boxes
• FBI: Reported cryptocurrency losses reached $5.6 billion in 2023
• Fortinet confirms data breach after hacker claims to steal 440GB of files
• UK arrests teen linked to Transport for London cyber attack
• Hackers targeting WhatsUp Gold with public exploit since August
• Transport for London confirms customer data stolen in cyberattack

• Feeld dating app's security too open-minded as private data swings into public view
• Cambodian senator sanctioned by US over alleged forced labor cyber-scam camps
• Australia’s government spent the week boxing Big Tech
• Feds pull plug on domains linked to import of Chinese gun conversion devices
• Fortinet admits miscreant got hold of customer data in the cloud
• 'Hadooken' Linux malware targets Oracle WebLogic servers
• I stole 20 GB of data from Capgemini – and now I'm leaking it, says cybercrook
• Mastercard splurges $2.65B on another big cyber purchase – Recorded Future
• Adobe fixed Acrobat bug, neglected to mention whole zero-day exploit thing
• Google Chrome gets a mind of its own for some security fixes
• Transport for London confirms 5,000 users' bank data exposed, pulls large chunks of IT infra offline
• EU kicks off an inquiry into Google's AI model
• About that Windows Installer 'make me admin' security hole. Here's how it's exploited
• Mind your header! There's nothing refreshing about phishers' latest tactic
• NIS2, DORA, and Tiber-EU expanding cybersecurity regulation
• If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM
• Pokémon GO was an intelligence tool, claims Belarus military official
• Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics
• Cyber crooks shut down UK, US schools, thousands of kids affected
• Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang

• Newly patched Ivanti CSA flaw under active exploitation
• New cryptomining campaign infects WebLogic servers with Hadooken malware
• Fortinet confirms breach that likely leaked 440GB of customer data
• Understanding and Mitigating the Risks of Email Forwarding
• Aflac’s shift to passkeys brings big business benefits
• Mastercard acquires Recorded Future: How will threat intelligence transform the payments industry?
• Too many companies use non-enterprise grade remote access tools in their OT networks, says Claroty
• Fake recruitment campaign targets developers using trojanized Python packages
• Transport for London continues to struggle with cyber attack
• The 18 biggest data breaches of the 21st century

• Friday Squid Blogging: Squid as a Legislative Negotiating Tactic
• My TedXBillings Talk
• Microsoft Is Adding New Cryptography Algorithms
• Evaluating the Effectiveness of Reward Modeling of Generative AI Systems
• New Chrome Zero-Day
• Australia Threatens to Force Companies to Break Encryption
• Friday Squid Blogging: Live Video of Promachoteuthis Squid
• YubiKey Side-Channel Attack
• Long Analysis of the M-209
• Security Researcher Sued for Disproving Government Statements

• Rate Limit Exceeded - Query Later