National Cyber Warfare Foundation (NCWF) Forums


Is there school in Freehold Township, NJ Tuesday? - New Jersey 101.5 FM


0 user ratings
2024-01-30 02:04:10
milo
Blue Team (CND) , Education

 - archive -- 


Comments
new comment
Nobody has commented yet. Will you be the first?
CVE mentions by industry news 
Ruko Veeniix V11 drone review 
Silverfort Announces New Integration with Microsoft Entra ID EAM 
SpaceX launching 20 satellites from California tonight on 2nd leg of Starlink doubleheader 
Sources: the US Commerce Department is considering a new regulatory push to restrict the export of proprietary or closed source AI models to China (Re 
RSAC 2024: IoT Security Questions (and Answers) 
Meta announces an update to its AI ad tools, which can now make full new images, not just backgrounds, and claims it's adding strong guardrails t 
Amazon launches Bedrock Studio in public preview, a web tool to help orgs experiment with and collaborate on generative AI models and then build AI-po 
MITRE attributes the recent attack to China-linked UNC5221 
Citrix NetScaler ADC & Gateway Flaw Lets Attackers Obtain Sensitive Data Remotely 
'Sparkly' narwhal toy trades sea for space as Boeing Starliner zero-g indicator 
Best SIEM Tools List For SOC Team – 2024 
How the AI-generated music video for Washed Out's The Hardest Part was created entirely using OpenAI's Sora, a first from a major record lab 
Pro-Russia hackers target critical infrastructure in North America and Europe 
Apple adds carveouts to its EU core tech fee, exempting free app developers and giving those with annual global revenue under €10M a three-ye 
Peloton CEO Barry McCarthy steps down, as the company lays off 15% of its workforce, or 400 people, its fifth layoffs since 2021, when it had 8,600  
Vtiger SPF & DKIM Setup: Step By Step Guideline 
A look at Ukraine's combat drone startup industry, based on commercial first-person-view or photography drones; an estimated 200 local companies 
Everyone's an Expert: How to Empower Your Employees for Cybersecurity Success 
How New College Graduates Can Avoid Increasingly Personalized Job Scams 
Understanding SAP Authorization 
Thoma Bravo to Buy Cybersecurity Firm Darktrace for $5.3 Billion 
Trump is using the prospect of a TikTok ban to court younger voters, blaming Biden for setting a ban in motion, as the new law rattles pro-Biden TikTo 
Google opens its second hardware office in New Taipei City, as VP of Engineering Elmer Peng says "Taiwan is Google's largest hardware R& 
Android eXotic Visit Spyware Targets Pakistanis And Indians 
Threads expands Hidden Words to let users filter out words, phrases, or emoji, and tests the option to mute notifications and ways to select who can q 
Cloud data management startup Rubrik opens up 20% at $38.60 per share in its NYSE debut, after raising $752M at a $5.6B valuation (CNBC) 
Secure-by-Design Software in DevSecOps 
US companies racing to build data centers to serve AI demand is causing a shortage of parts, property, and power; cooling system lead times are now 5x 
Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool 
Paris-based Payflows, whose automated financial management SaaS could be deployed on top of existing ERP systems, raised a €25M Series A led  
Larry Ellison says Oracle is moving its world headquarters from Austin to Nashville to be closer to a major healthcare epicenter (Ashley Capoot CNBC) 
US Imposes Visa Restrictions on Alleged Spyware Figures 
MySQL 5.7 End of Life: What You Can Do Next? 
BreachRx Gets $6.5 Million to Automate Security Incident Response 
Ransomware Double-Dip: Re-Victimization in Cyber Extortion 
Windows DOS-to-NT flaws exploited to achieve unprivileged rootkit-like capabilities 
What is Mobile Application Security Testing? Explained 
Open-source GameCube and Wii emulator Dolphin is not coming to App Store as Apple doesn't allow JIT recompilers on iOS, possibly due to security  
Law enforcement operation dismantled phishing-as-a-service platform LabHost 
Fix: Red Dead Redemption 2 EMP.dll Not Found Error 
Stability AI makes Stable Diffusion 3 available to developers via an API and a new Stable Assistant Beta content creation platform; the models remain  
Stanford's AI Index report: training top AI models is way more expensive, AI still trails humans on complex tasks, people are more nervous about  
Dijak Says Retribution Isn't Who Is Hacking Into WWE Content: We Did Enough Shitty, Useless Hacking - Fightful 
X tells users "the hide your checkmark feature of X Premium is going away soon", after X began adding blue checks to "influential" 
Python's PyPI Reveals Its Secrets 
Client-Side Exploitation: Poisoning WebDAV+URL+LNK to Deliver Malicious Payloads 
FBI says China is 'defining threat of our generation' with hackers ready to 'wreak havoc' in US - The Mirror 
Hacker Leaks 8.5M Contact Data from U.S. Environmental Protection Agency (EPA) 
Secrets Management in the Age of AI Cybercrime: Safeguarding Enterprises from Emerging Threats 
Google, Yahoo, Perplexity, and other search companies are working on understanding user intent to decide whether to show generative AI answers or just 
Oxycorat Android RAT Spotted on Dark Web Stealing Wi-Fi Passwords 
Cyberattack disrupted services at Omni Hotels & Resorts 
Testing in Detection Engineering (Part 8) 
Vietnam-Based Hackers Steal Financial Data Across Asia with Malware 
FBI seeks to balance risks, rewards of artificial intelligence 
Google Cloud and Cloud Security Alliance survey of 2,486 IT and security professionals: 63% of security practitioners believe AI could help in threat  
Aembit Finalist for RSA Conference 2024 Innovation Sandbox 
A profile of MIT labor economist David Autor, an unlikely AI optimist who says AI may help restore "the middle-skill, middle-class heart of the U 
OWASP discloses a data breach 
Why I'm going to Missouri near the centerline for the solar eclipse on April 8 
Real Time Exposure Detection Is the Missing Element of Every Cybersecurity Strategy 
Too Much Over-optimization Is Never Enough! - Hackaday 
Payment authorization and one-time passwords Mobile Token 
It s Official: Cyber Insurance is No Longer Seen as a 'Safety Net' 
NASA is holding a total eclipse 2024 briefing today. Here's how to watch it live 
Canadian regulatory agency ISED clarifies its stance on banning Flipper Zero, saying the aim is to restrict the use of such devices "to legitimat 
7 ways to put your code on a diet and improve AppSec in the process 
The Power Shift Changing global influence in a year of elections 
Sources: SpaceX's Starshield is building a network of spy satellites under a classified, $1.8B contract with the US spy agency National Reconnais 
Woman Films the Moment She Realized Her Cat 'Is a Hacker' - Newsweek 
What is the purpose of post-quantum cryptography? 
ChatGPT Plugins Exposed to Critical Vulnerabilities, Risked User Data 
Threat Intelligence for Financial Services 
New Vcurms Malware Targets Popular Browsers for Data Theft 
Empathy, a startup offering an AI-backed service to help users navigate the bereavement process, raised a $47M Series B, sources say at a nearly $400M 
SBOMs and medical devices: An essential step but no security cureall 
Badge Launches Partner Program for ‘Enroll Once and Authenticate Any Device’ Software 
Inflection launches Inflection-2.5 and says it performs "neck and neck with" OpenAI's GPT-4; its chatbot Pi has 1M DAUs and 6M MAUs (In 
Meta details WhatsApp and Messenger interoperability under the EU's DMA, saying third parties must use Signal's protocol, which Meta already 
Network tunneling with QEMU? 
Spotify launches the Audiobooks Access Tier, which lets free US users stream 15 hours of audiobooks from its 200K+ catalog every month for $9.99 per m 
What is a Shadow API? Understanding the risks and strategies to prevent their sprawl 
Predator spyware endures even after widespread exposure, analysis shows 
BEAST AI Jailbreak Language Models Within 1 Minute With High Accuracy 
Unleashing the Power of Outcome-Driven Cybersecurity: The CARE Model and Live Patching 
How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI 
Why Smart SOAR is the Best SOAR for iZOOlogic 
'It's white-knuckle time:' NASA chief stresses safety for Crew-8 astronaut launch 
Klarna claims its ChatGPT-powered AI chatbot handles two-thirds of all customer service chats and does the equivalent work of 700 full-time human agen 
How Zero Trust Data Detection & Response is Changing the Game 
Sources: Shein is in the early stages of exploring a London IPO, as it has judged unlikely that the SEC will approve its IPO in the US (Bloomberg) 
South Korea's SK Telecom partners with Perplexity to access its proprietary models and to offer Perplexity's paid version of its AI-based se 
Apple created post-quantum cryptographic protocol PQ3 for iMessage 
The Problem is the People, but Which People? 
Intuitive Machines' Odysseus lander is alive and well on the moon 
NSFOCUS Innovative DDoS Protection Technology Secures Your Network Perimeter 
Apple Approves Fake App Before Real Rabby Wallet, Users’ Funds Stolen 
Techstars is shutting down its Seattle program, which was started in 2010, to shift focus on "hubs with the highest concentration of VC activity& 
Leaked documents show how firm supports Chinese hacking operations 
HYAS Product Enhancements – Part 1 – February 2024 
Over 40% of Firms Struggle With Cybersecurity Talent Shortage 
Sources: Apple COO Jeff Williams makes a rare Taiwan visit to celebrate Foxconn's 50th anniversary, joining Apple SVP of Operations Sabih Khan at 
Russia-linked APT TAG-70 targets European government and military mail servers exploiting Roundcube XSS 
Does moving to the cloud mean compromising on security? 
BounceBack - Stealth Redirector For Your Red Team Operation Security 
New MonikerLink Flaw Exposes Outlook Users to Data Theft and Malware 
Achieving IT Compliance Standards: An Essential Ingredient For Securing Successful Deals 
Massive Cloud Database Leak Exposes 380 Million Records 
Seeing into the Shadows: Tackling ChromeOS Blind Spots with Dell and CrowdStrike 
Smashing Security podcast #359: Declaring war on ransomware gangs, mobile muddles, and AI religion 
How to Analyze the MITRE Engenuity ATT&CK Evaluations: Enterprise 
Alert! 333% Surge in Hunter-Killer Malware that Bypasses Network Security Controls 
SoftBank Vision Funds co-CEO Alex Clavel says the fund is "looking very carefully" at generative AI firms, as SoftBank embraces a cautious i 
Beyond the Charts -The Human Factor in Cybersecurity and Financial Decisions 
Explainer: what is Volt Typhoon and why is it the defining threat of our generation ? - The Guardian 
Breaking Bitlocker 
Canada Gov plans to ban the Flipper Zero to curb car thefts 
Mabs.brightstarcare.com Login 2024: Abs BrightStar Care 
Microsoft partners with Bengaluru-based Sarvam AI, which is building LLMs that support Indian languages, for developing voice-based generative AI tool 
What is a Behavioral Risk Indicator? Demystifying Insider Risk Indicators 
3 New Risks That CISOs Will Face in 2024 
Vulnerability Summary for the Week of January 29, 2024 
Applying Threat Intelligence to the Diamond Model of Intrusion Analysis 
Sierra Space unveils Dream Chaser space plane ahead of 1st flight to ISS (photos) 
Watch next-generation lightweight spacesuit tested on Zero-G flight (photos, video) 
Sources: Binance's efforts to re-enter the UK market are being frustrated after UK's financial regulator expressed concerns to prospective l 
U.S. officials warn of dire Chinese cyber threats in wake of FBI operation to disrupt botnet 
BOFHound: Session Integration 
Threat Actors Selling 1.8TB Database of Indian Mobile Users 
iOS 17.4 code shows that Apple may be testing two versions of its Ajax LLM for Siri and Messages, comparing their responses to results from OpenAI&apo 
Some developers say Apple's new Core Technology Fee in the EU is eerily similar to the controversial Runtime Fee that Unity touted and withdrew a 
Apple announces a reduced commission structure for apps in the EU, including a 17% commission, or 10% for small developers, plus 3% if the app uses Ap 
Using Google Search to Find Software Can Be Risky 
QR Code Phishing Soars 587%: Users Falling Victim to Social Engineering Scams 
Ring Will Stop Giving Cops a Free Pass on Warrantless Video Requests 
Huge stars are born as twins, triplets and more, new images confirm 
Google announces AI features for Chrome on Mac and Windows: Organize Similar Tabs and custom themes rolling out soon in the US, and Help Me Write in F 
Russian Is Sanctioned Over the Hacking Release of Australian Health Insurer Client Data - U.S. News & World Report 
The Fake Fix: New Chae$ 4.1 Malware Hides in Driver Downloads 
Facebook Work-From-Home Job Posting Scam Goes the Extra Mile to Trick Victims 
X rolls out audio and video calling to Android, after launching on iOS in October 2023; all users can receive calls, but only Premium subscribers can  
New Paper: Future of the SOC: Evolution or Optimization Choose Your Path (Paper 4 of 4.5) 
Prolific Russian hacking unit using custom backdoor for the first time 
Uber is working with Tesla to urge its drivers to switch to EVs in a bid to be emissions-free in the US and Canada by 2030, including by sharing trip  
Beyond Passwords: AI-Enhanced Authentication in Cyber Defense 
China's chip imports fell 15.4% YoY to $349.4B in 2023, the sharpest fall on record and down for a second straight year; shipment volume also dec 
How to Open Yahoo Mail Photos 2024 – Step-by-Step Tutorial 
The evolution of AppSec: 4 key changes required for a new era 
Substack plans to remove some Nazi publications, but its new policy interpretation won't include proactively removing neo-Nazi and far-right extr 
DoJ charged 19 individuals in a transnational cybercrime investigation xDedic Marketplace 
How to Activate Sportsnet TV Code at Watch.sportsnet.ca 
Jacquie Lawson My Card History Login 2024: www.jacquielawson.com Birthday Cards 
What to expect at CES 2024: laptops with Intel's new Core Ultra chips, TVs with AI processing, AI-powered smart home devices and appliances, and  
Cryptocurrency wallet CEO loses $125,000 in wallet-draining scam 
HealthEC Data Breach Impacts 4.5 Million Patients 
An AWS developer claims Amazon is "silently sacking" staff by pushing them to take a different role that they would quit later, to avoid the 
In 2024, the internet will see the biggest reshuffling of power in 25 years, with a resurgent "human web" and regulators forcing tech giants 
Security Affairs newsletter Round 452 by Pierluigi Paganini INTERNATIONAL EDITION 
An AWS developer claims Amazon is silently sacking people after enforcing a strict RTO policy, without announcing the layoffs or giving severance (Jus 
A US judge sides with the SEC, ruling that Terraform is liable for offering and selling unregistered securities, but dismisses SEC's security-bas 
Unveiling the power of external attack surface management 
Member of Lapsus$ gang sentenced to an indefinite hospital order 
St Vincent s Health Australia says data stolen in cyberattack 
International Hacker Sentenced for Leaking Grand Theft Auto 6 - Game Is Hard 
Intellexa and Cytrox: From fixer-upper to Intel Agency-grade spyware 
New JavaScript Malware Targeted 50,000+ Users at Dozens of Banks Worldwide 
Sources: Anthropic is in talks to raise $750M in a round led by Menlo Ventures at a $15B valuation, tripling from spring 2023; its final valuation may 
Aston Martin and Porsche preview bespoke interfaces for the next generation of Apple CarPlay, which integrates into all the displays of upcoming vehic 
How to Fix IXION Keep Crashing on Startup on PC 
Play Ransomware Has Hit 300 Entities Worldwide: FBI 
Year in Malware 2023: Recapping the major cybersecurity stories of the past year 
Prince Harry only won $180,000 in court against a British tabloid but the phone-hacking case is an industry landmark - Fortune 
The US DOT fines Southwest Airlines $140M, in addition to customer refunds, for the December 2022 meltdown caused by its antiquated flight scheduling  
Hackers Access Customer Info, Corporate Systems in MongoDB Data Breach 
A look at the complex Microsoft-OpenAI alliance structure, which sources say entitles Microsoft to up to 49% of the earnings from OpenAI's for-pr 
Prince Harry's phone hacking victory is a landmark in the long saga of British tabloid misconduct - Toronto Star 
Windows Defender Quarantine Folder Metadata Recovered for Forensic Investigations 
Google announces Gemini Pro for enterprises, letting Cloud clients build apps for free, with some limits, and plans to add Gemini Pro to AI Studio and 
CISA unveils Google Workspace guidelines informed by Chinese breach of Microsoft 
What is SASE and How Does it Defend Remote Businesses From Hackers? - Quick and Dirty Tips 
New Windows Linux Firmware Attack 
Toyota Ransomware Attack Exposes Customers Personal Data 
Non-Human Access is the Path of Least Resistance: A 2023 Recap 
Get a VPN for Yourself and Your Employees This Holiday Season 
MrAnon Stealer Attacking Windows Users Via Weaponized PDF Files 
OpenAI says it is aware of feedback about GPT-4 getting "lazier" and is "looking into fixing it", and notes that "model behav 
How to Fix Cannot Add or Modify PIN in Windows 11 
Defense-in-Depth: A Comprehensive Approach to Modern Cybersecurity 
Threat actors breached US govt systems by exploiting Adobe ColdFusion flaw 
ENISA published the ENISA Threat Landscape for DoS Attacks Report 
Stellar Cyber Bridges Cybersecurity Skills Gap with First-of-Its-Kind University Program 
IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including U.S. Water and Wastewater Systems Facilities 
Critical U.S. infrastructure is being targeted by a growing threat - TheStreet 
AI Decides to Engage in Insider Trading 
Fix iPhone Apps Keep Crashing After iOS 17 Update 
Sources: OpenAI is giving employees an extra month, until January 5, to decide whether they want to sell shares in the company through a tender offer  
Very precisely lost GPS jamming 
What Is Mobile Network Hacking? Definition, Methods, and Detection - EnterpriseNetworkingPlanet 
Mastering NIST Penetration Testing: Your Essential Guide to Robust Cybersecurity 
Threat actors started exploiting critical ownCloud flaw CVE-2023-49103 
AWS announces Graviton4, with up to 30% better performance, 50% more cores, and 75% more memory bandwidth than Graviton3, and Trainium2 for 4x faster  
5 Tips to Defend Against Access Brokers This Holiday Season 
Daixin Team group claimed the hack of North Texas Municipal Water District 
Canada soars into space with new moon and ISS astronaut missions 
What is Ethical Hacking? - Check Point Software - Check Point Software 
The sold-out Sega Toys star projector is back for Cyber Monday! 
The hack of MSP provider CTS potentially impacted hundreds of UK law firms 
60Hz vs 144Hz vs 240Hz Monitors Comparison 
Kinsing Crypto Malware Targets Linux Systems via Apache ActiveMQ Flaw 
CISA, FBI, MS-ISAC, and ASD s ACSC Release Advisory on LockBit Affiliates Exploiting Citrix Bleed 
MAR-10478915-1.v1 Citrix Bleed 
DarkGate and PikaBot Phishing Campaign is Using Qakbot Tactics 
Sources: Microsoft's mulling taking a role on OpenAI's board if Sam Altman returns; source: if he doesn't, Microsoft would consider inv 
SpaceX to launch 22 Starlink satellites tonight on 1st of back-to-back missions 
What is LockBit, the cybercrime gang hacking some of the world's largest organisations? - The Conversation 
2 environmentalists who were targeted by a hacking network say the public is the real victim - Yahoo Finance 
BlackCat Ransomware's New SEC Reporting Tactic: Turn Regulations Against Victims 
FBI s Warrantless Spying on US Must Continue, Says FBI 
Samsung Data Breach: Hackers Steal Data of UK Customers 
ManageEngine Information Disclosure Flaw Exposes Encryption Keys 
From Heartbleed to Now: Evolving Threats in OpenSSL and How to Guard Against Them 
Download SQL Server Management Studio (SSMS) All Versions FREE 
Teenager who stole more than $600K bragged to friends 'fraud is fun' - Daily Mail 
How To Make Drupal Migration Successful: 6 Useful Tips 
Dark matter-hunting satellite ARRAKIHS to launch in 2030. Here's how it will work 
The sun may be smaller than we thought 
Hackers Selling Exploits for Critical Vulnerabilities on the Dark Web 
Top 6 Ways to Fix COD Modern Warfare 3 Controller Not Working 
How to Know your Wi-Fi is Hacked - KahawaTungu 
Authorities Took Down Massive Phishing-as-a-service Provider BulletProftLink 
The Lorenz ransomware group hit Texas-based Cogdell Memorial Hospital 
McLaren Health Care revealed that a data breach impacted 2.2 million people 
Experts say LockBit is behind the Industrial and Commercial Bank of China hack, a "ransomware as a service" group that hacked the UK's  
Kai-Fu Lee, CEO of Chinese startup 01.AI, says the company stockpiled enough Nvidia chips to last for next 18 months before the US' China chip ba 
Arm CEO Rene Haas says Arm is working on a "complex deal" that, if closed by year-end, would boost Q3 revenue, expresses optimism about US-C 
Getting Started with Terraform and AKS: a Step-by-Step Guide to Deploying Your First Cluster 
MITRE ATT&CK Technique-Driven Automation with Smart SOAR 
Win First and Then Go to War: Truly Protecting Your APIs | Impart Security 
Pro-Palestinian hackers group ‘Soldiers of Solomon’ disrupted the production cycle of the biggest flour production plant in Israel 
Hackers Actively Exploiting Linux Privilege Escalation Flaw to Attack Cloud Environments 
Apple MacBook Pro 16 (2023) review: M3 Max surpasses the M1 Ultra, nice design, and ProMotion display, but 8GB of RAM in the $1,599 config and memory  
Configuration of SPF and DKIM for Adobe Marketo 
Monero (XMR) Wallet Hacked: Is Coin No Longer Safe? - U.Today 
Kinsing threat actors probed the Looney Tunables flaws in recent attacks 
CVE-2023-21378 (android) 
CVE-2023-21347 (android) 
Guarding against social engineering attacks 
How to Activate Titanium Apple Card 2023: Apply, Replace 
Block reports Q3 revenue up 24% YoY to $5.62B, vs. $5.4B est., profit up 21% YoY to $1.9B, Square profit up 15% YoY, and Cash App profit up 27% YoY; S 
CVE-2023-45341 
CVE-2023-45016 
Netflix Student Discount (November 2023) How To Get, Offers Guide 
CVE-2023-42648 
CVE-2022-48458 
British Library suffers major outage due to cyberattack 
President Biden’s Proclamation: National Native American Heritage Month, 2023 
Turla Updates Kazuar Backdoor with Advanced Anti-Analysis to Evade Detection 
CVE-2023-2622 
CVE-2023-5306 
SEC sues SolarWinds and CISO for fraud 
Understanding CMMC 2.0 Requirements 
AAAI Fall Symposium: Patr cia Alves-Oliveira on human-robot interaction design 
CVE-2023-43792 
CVE-2023-41891 
CVE-2023-21397 
CVE-2023-21387 
CVE-2023-40136 (android) 
CVE-2023-21352 
How to Get HITRUST Certified and Why 
CVE-2023-5666 
The Outstanding ROI of KnowBe4's Trusted Security Awareness Training 
IT Army of Ukraine disrupted internet providers in territories occupied by Russia 
SpaceX to launch 22 Starlink satellites from California early Oct. 29 
This ombre nails hack is the easiest thing you'll try today and it ... - GLAMOUR UK 
Google Expands Bug Bounty Program to Find Generative AI Flaws 
What to expect from Apple's "Scary Fast" event on October 30: high-end MacBook Pros with M3 Pro and M3 Max, a new 24-inch iMac with an  
France agency ANSSI warns of Russia-linked APT28 attacks on French entities 
CVE-2023-43737 
Successful Cyber Risk Quantification: Webinar Takeaways 
Phony Corsair job vacancy targets LinkedIn users with DarkGate malware 
CVE-2023-5783 
CVE-2023-46234 
CVE-2023-5780 
Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data 
CVE-2023-37909 
Google adds foundation and hair dye options to its AR shopping tool for trying beauty products, and expands the tool to mobile browsers and Google Sho 
Bankruptcy hearing: FTX is considering proposals from three bidders to restart trading, without disclosing the names, and will make a decision by mid- 
Qualcomm unveils the S7 and S7 Pro chips with increased memory, AI capabilities, and more, designed for earbuds, headphones, and speakers to be releas 
Three Recommendations for a Next-Generation Cybersecurity Framework 
Open Source Security: Trends and Predictions for 2024 
Windows 11 Media Creation Tool (2023): How to Install Upgrade 
How to Fix OpenJDK Platform Binary High CPU on Windows 10 11 
Meta is "listening to feedback" after some users noticed the company is cross-posting Threads posts to users' Facebook feeds without of 
Twitch CEO Dan Clancy says big-money deals with top livestreaming gamers is not a "sustainable business"; sources: YouTube is also backing a 
Valve's 2FA Mandate for Game Developers Shows SMS Stickiness 
Cisco warns of a second IOS XE zero-day used to infect devices worldwide 
Google Chrome to Mask User IP Addresses to Protect Privacy 
Realistic attacks for useful results 
City of Philadelphia suffers a data breach 
CVE-2023-5702 
Sources: Apple was caught off guard by the generative AI fever and is on course to spend $1B year to deploy the tech across iOS 18, Siri, Music, and  
CVE-2023-5684 
CVE-2023-45681 
CVE-2023-45677 
CVE-2023-45661 
CVE-2023-44693 (dar-7000_firmware) 
CVE-2023-5414 
CVE-2023-4598 
CVE-2023-4274 
CVE-2023-3996 
OpenAI rolls out DALL-E 3 access to ChatGPT Plus and Enterprise customers and says it has prepared a safety mitigation stack for the model (Umar Shaki 
Amazon launches 60-minute drone deliveries for 500 medications purchased from Amazon Pharmacy for customers in College Station, Texas; delivery is fr 
Elon Musk’s X (Twitter) to Charge $1 for Basic Features 
CVE-2023-3392 (read_more_&_accordion) 
UK and Chinese officials say China plans to attend the AI summit at Bletchley Park in December, despite controversy over alleged spying by Beijing in  
Digital Personal Data Protection Act (DPDP ACT) 2023, India s Privacy Law 
CVE-2023-38720 
Snap's stock closes up 11.98% after a report that the company's internal "stretch" goal was to pass 475M DAUs in 2024, above Wall  
CVE-2023-40180 
Interview with Marek uppa: insights into RoboCupJunior 
Hands-on with Wi-Charge's wireless charging system that delivers power of up to 2 or 3 watts but requires a line of sight between transmitter and 
How Dustin Moskovitz's Open Philanthropy is pushing policymakers to focus on AI's long-term risks by funding salaries of staff in Congress a 
CVE-2023-5492 (smart_s45f_firmware) 
SpaceX Falcon Heavy rocket launches NASA's Psyche probe to bizarre metal asteroid (photos) 
CVE-2023-45130 
Jobs-to-be-Done: See the current state of security and understand what is exposed and how it has evolved over time 
CVE-2023-43149 
Sources: Sam Altman told staff that OpenAI is generating $1.3B in revenue per year, implying the company is now generating $100M+ month, up 30% in thr 
CVE-2023-35645 
CISA adds Adobe Acrobat Reader flaw to its Known Exploited Vulnerabilities catalog 
CVE-2023-40646 (android) 
CVE-2023-40639 (android) 
A draft of ASEAN's "guide to AI ethics and governance" shows the bloc is taking a business-friendly approach to AI, in contrast to the  
CVE-2020-27213 
Phishers Spoof USPS, 12 Other Natl’ Postal Services 
EXCLUSIVE: Joe Biden's younger brother Frank admits naked selfie on GuysWithiPhones gay dating site is genuine - Daily Mail 
CVE-2023-45355 
How To Type in a Phone Number and Find out who it is 
CVE-2023-40639 
The Basics of Digital Forensics 
Sales teams at Google, Twilio, and other companies say productivity spiked after they started using ChatGPT-like tools to answer prospective customers 
23andMe says the genetics company is aware of user data from its platform circulating on hacker forums and attributes the leak to a credential-stuffin 
Source: Microsoft plans to close its $68.7B Activision Blizzard acquisition on October 13, with a final approval of the deal from the UK CMA expected  
Setting up a Kubernetes cluster 
CVE-2023-4099 (qsige) 
Mastering SECaaS: Your Ultimate Implementation Guidance for 2023 
Top 3 Tips Learned from Getting Fairwinds Insights into AWS Marketplace 
Online Dating: Cybercrime Red Flags 
CVE-2023-44123 (android) 
CVE-2023-5283 (engineers_online_portal) 
What to expect from the "Made by Google" event on October 4: Pixel 8 and Pixel 8 Pro, Pixel Watch 2, Android 14 release, and more (Emma Roth 
Making Sense of Today's Payment Cybersecurity Landscape 
A Compilation of Personally Identifiable Email Address Accounts from Verified.cm Forum Team Members An OSINT Analysis 
Going Live on Twitter Spaces Today! 
Lasers cut through star trails in beautiful photo from the European Southern Observatory 
CVE-2023-43708 
CVE-2023-5284 
CVE-2023-42453 (synapse) 
Liquidators say Singapore arrested 3AC co-founder Su Zhu when he tried to leave the country and sentenced him to four months for not complying with co 
KRNL KPong Key (2023): KPONG Krnl Key Bypass Method 
How to Fix COD Warzone 2 Bonus Challenge Not Working Issue 
What Is mTLS? The Essential Guide You Can t Afford to Miss 
CVE-2023-43664 
CVE-2023-41232 (ipados, iphone_os, macos) 
What we know about BlackCat and the MGM hack 
Russian firm is offering $20mn for hacking iPhone, Android ... - NewsBytes 
Hands-on with ChatGPT's image recognition and voice features: image recognition isn't perfect and refuses to discuss faces, voice is fluid a 
Smashing Security podcast #341: Another T-Mobile breach, ThemeBleed, and farewell Naked Security 
How to View Incognito History on Android Without Them Knowing 
CVE-2023-37448 (macos) 
Mammals may be driven to extinction by volcanic new supercontinent Pangaea Ultima 
Hands-on with Meta Quest 3: an iterative update, but its mixed reality pass through video is less grainy than the Quest Pro and offers color, unlike t 
CVE-2023-4506 
CVE-2023-44129 
CVE-2023-42460 
CVE-2023-41986 
CVE-2023-40419 
Lu0Bot Node.js Malware Takes Complete Control Over Victim’s Computer 
QR codes in email phishing 
New APT Group AtlasCross Using Weaponized Word Documents to Deploy Malware 
Is Your Workforce Ready for Passwordless MFA? 
CVE-2023-42456 (sudo) 
Essential Guide to Cybersecurity Compliance 
CVE-2015-6964 
CVE-2023-42464 (debian_linux, netatalk) 
CVE-2023-0829 (plesk) 
CVE-2023-43135 (tl-er5120g_firmware) 
Smashing Security podcast #340: Heated seats, car privacy, and Graham s porn video 
CVE-2023-43135 
CVE-2023-42454 (sqlpage) 
CVE-2023-43494 
Finnish Dark Web Marketplace PIILOPUOTI Seized 
CVE-2023-5063 (widget_responsive_for_youtube) 
CVE-2023-3025 (dropbox_folder_share) 
How to Fix Upgrade to iCloud for Windows Failed Error 
#mWISE: Chinese Cyber Power Bigger Than the Rest of the World Combined 
CVE-2023-37281 (contiki-ng) 
The Chan Zuckerberg Initiative is funding an AI GPU cluster made up of 1K+ Nvidia H100 GPUs to run "openly available" models of human cells  
Flawed Implementation of RCS Standard putting data of millions at risk 
CVE-2023-42454 
CVE-2023-4806 
German intelligence warns cyberattacks could target liquefied natural gas (LNG) terminals 
Q&A with Apple executives Jeremy Sandmel and Tim Millet on the company's gaming ambitions for the iPhone 15 Pro, MetalFX upscaling, gaming co 
CVE-2023-38507 
Dariy Pankov, the NLBrute malware author, pleads guilty 
CVE-2023-29305 (connect) 
CVE-2019-8884 
CVE-2018-4767 
CVE-2018-4765 
CVE-2018-4705 
CVE-2018-4706 
CVE-2018-4654 
CVE-2018-4603 
CVE-2018-4531 
CVE-2018-4519 
CVE-2018-4515 
CVE-2018-4492 
CVE-2017-13980 
CVE-2017-13976 
CVE-2017-13967 
CVE-2017-13957 
CVE-2017-13915 
CVE-2017-13896 
CVE-2015-20002 
CVE-2013-5146 
CVE-2011-3465 
CVE-2010-4017 
CVE-2010-3807 
CVE-2023-38070 (jt2go, teamcenter_visualization) 
CVE-2023-35666 (android) 
CVE-2023-4847 (simple_book_catalog_app) 
CVE-2023-40611 
CVE-2023-38076 
Cybercriminals Selling "Golden Tickets" to Phish Microsoft 365... $500,000 in Sales in 10 Months 
Top 9 Ways to Fix MetaMask Not Connecting or Working 
CVE-2023-4060 
WhatsApp releases an Android beta that adds a "Third-party chats" screen, revealing how Meta plans to comply with the EU's DMA chat int 
Hive0117 Group Attacking Employees of Energy, Finance, & Software Industries 
CVE-2023-4865 
CVE-2023-4487 (cimplicity) 
CVE-2023-4844 
CVE-2023-40015 (vyper) 
The Conti Ransomware Gang and the Trickbot Cybercrime Enterprise XMPP’s and Jabber Account IDs 
India's Aditya-L1 solar probe takes an epic selfie with Earth and moon (photos, video) 
CVE-2023-41775 
CVE-2023-38456 (android) 
CVE-2023-38448 (android) 
CVE-2023-40584 
CVE-2023-41061 
CVE-2023-20832 (android, openwrt, rdk-b, yocto) 
What Is Network Hacking? How to Avoid Being Hacked - EnterpriseNetworkingPlanet 
Cybercriminals target graphic designers with GPU miners 
8 Actions You Should Take if You Think Your Mac Is Hacked - MUO - MakeUseOf 
Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks 
CVE-2023-41053 
CVE-2023-41330 
CVE-2020-10132 
After debuting math lessons in 2022, Duolingo plans to add "hundreds of bite-sized" music lessons to its app, helping users learn from a lib 
Back to Basics: The Key Elements of a Strong Security Program 
CVE-2023-32432 
CVE-2023-28195 
CVE-2023-30534 
Understanding the Evolution of OWASP API Top 10 from 2019 to 2023 
Malaysia says it is in discussions with Google, Meta and others over a regulatory framework to compensate news outlets for their content on online pla 
An interview with Apple executives Susan Prescott and Steve Sinclair on building Vision Pro apps and how Apple is trying to convince developers to cre 
Deep Instinct takes a prevention-first approach to stopping ransomware and other malware using deep learning 
Fix: Starfield Low FPS, Stuttering, Freezing or Lags Issues 
CVE-2023-38466 
CVE-2023-38443 
CVE-2023-38437 
Interviews with AI red team heads at Microsoft, Google, Nvidia, and Meta on why breaking AI models is important for safety, challenges of fixing them, 
CVE-2023-4709 
CVE-2022-3407 
Honor says its foldable phone Magic V2, launched in China in July 2023, is coming to Europe, the UK, Latin America, and other markets, except the US,  
From frustration to clarity: Embracing Progressive Disclosure in security design 
CVE-2023-4481 
Annular solar eclipse 2023: How to watch Oct. 14 'ring of fire' in person and online 
Infamous Chisel Malware Analysis Report 
Paramount Global disclosed a data breach 
Are schools legally responsible for student safety? 
CVE-2023-4315 
CVE-2023-3636 
Hackers Exploiting Juniper RCE Flaw Following PoC Release 
CVE-2023-40706 (snap_pac_s1_firmware) 
CVE-2023-40751 (fundraising_script) 
New data reveal US space economy's output is shrinking an economist explains in 3 charts 
CVE-2023-40766 
CVE-2023-40762 
Rhysida ransomware group claims the hack of Prospect Medical 
CVE-2023-4558 
X launches a private beta of X Hiring, a job posting feature for verified organizations, allowing them to "organically reach millions of relevant 
Sources: a company that spent $800M+ to buy thousands of acres in Bay Area for a new city is backed by Michael Moritz, Reid Hoffman, Marc Andreessen,  
Defending the Virtual Kingdom: Exploring Modern Cybersecurity Landscapes 
Elevating Data Security: Key Considerations When Transferring Your Digital Workspace 
CoinGecko: Worldcoin's WLD fell 9.1% over 24 hours to $1.33 and is down 43.6% since its launch a month ago, after scrutiny over data collection  
Why are CEOs Cyber Resilient? 
Why Chandrayaan-3 landed near the moon's south pole and why everyone else wants to get there too 
The Price of Grandeur: Unveiling the Costs Behind Creating a Triple-A Game 
An Interview with Dasha Deckwerth – Stealth ISS Group 
Lazarus Group's infrastructure reuse leads to discovery of new malware 
Sources: TikTok plans to bar links to Amazon and other e-commerce sites to force people to use TikTok Shop; source says Shop will lose $500M+ in the U 
CVE-2023-4409 (nbs&happysoftwechat) 
CVE-2023-4443 (free_hospital_management_system_for_small_practices) 
CVE-2023-4441 (free_hospital_management_system_for_small_practices) 
Social Engineering Is the Number One Cybersecurity Problem by Far 
TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwords 
Mendaera, which is developing a collaborative robotic system for healthcare providers that uses real-time imaging and AI, raised a $24M Series A led b 
Newer, Better XLoader Signals a Dangerous Shift in macOS Malware 
Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders. 
How to Fix This App Has Been Blocked For Your Protection 
Ransomware-as-a-Service cheat sheet 
US tech firms offer data protections for Europeans to comply with EU big tech rules 
CISA adds critical Adobe ColdFusion flaw to its Known Exploited Vulnerabilities catalog 
A cyber attack hit the Australian software provider Energy One 
DotRunpeX Malware Injector Widely Delivers Known Malware Families to Attack Windows 
August 2023 Patch Tuesday: Two Actively Exploited Zero-Days and Six Critical Vulnerabilities Addressed 
Who is Ahsoka Tano? 
We still don't know what dark matter is, but here's what it's not 
Spoofing an Apple device and tricking users into sharing sensitive data 
Analysis: Books3, a dataset used to train Meta's Llama, BloombergGPT, and EleutherAI's GPT-J, contains 170K+ books from authors like Stephen 
People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection 
Vulnerability Summary for the Week of July 10, 2023 
Vulnerability Summary for the Week of July 31, 2023 
CVE-2023-4335 
CVE-2023-4330 
CVE-2023-4328 
CVE-2023-40168 
CVE-2023-39125 
CVE-2023-2915 
Experts urge caution in assessing Ukraine cyberattacks 
More countries participate in international cyber exercise 
Why the US chose to name and shame Russia over cyberattacks 
New InsightCloudSec Compliance Pack for CIS AWS Benchmark 2.0.0 
Are You Being Tracked by an AirTag? Here s How to Check 
Researcher: malicious packages lurked on npm for months 
The Cloud Has Complicated Attack Surface Management 
Fortinet CVE-2023-27997: Impact and Mitigation Techniques 
Education and healthcare are set for a high-tech boost 
Robot Talk Episode 44 – Kat Thiel 
The 5 Laws of Robotics 
#RoboCup2023 in tweets – part 2 
Avoiding data backup failures Week in security with Tony Anscombe 
Quantum computing: Will it break crypto security within a few years? 
Time is money, and online game scammers have lots of it 
Africa Cyber Surge II law enforcement operation has led to the arrest of 14 suspects 
Smuggler - An HTTP Request Smuggling Desync Testing Tool 
How SSPM Simplifies Your SOC2 SaaS Security Posture Audit 
ECDX - Exploit Development Student 
Crimeware server used by NetWalker ransomware seized and shut down 
Teach a Man to Phish and He’s Set for Life 
Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’ 
Karma Catches Up to Global Phishing Service 16Shop 
Microsoft Patch Tuesday, August 2023 Edition 
What is an SQL Injection and how do you fix it? 
IT Security FAQ 4: Is two-factor authentication really necessary online? How do you activate it? 
IT Security FAQ 10: What is malware, phishing, spyware, data mining and DDoS? 
What is server side request forgery (SSRF)? 
Eray Mitrani: Stumbling upon a new way to exploit authorization bypass in Jira 
10 Quick Ways to Fix Baldur s Gate 3 Stuck on Loading Screen 
Baldur’s Gate 3 Low FPS? Here’s 7 Ways to Fix and Improve it 
Vulnerability Scanning with OpenVAS 9 part 2: Vulnerability Scanning 
APT trends report Q2 2023 
Breach Forums to Remain Offline Permanently 
Data Fabric: The Intricate Shield Against Evolving Cyber Threats 
The 10 Best Cybersecurity Companies in the UK 
ASIS Article – Preparing for OT Incident Response 
Houston consulate one of worst offenders in Chinese espionage, say U.S. officials 
CredNinja – Test Credential Validity of Dumped Credentials or Hashes 
CFRipper – CloudFormation Security Scanning & Audit Tool 
White House hosts roundtable on harmful data broker practices 
 
Forum
Blue Team (CND)
Education



© Copyright 2012 through 2024 - National Cyber War Foundation - All rights reserved worldwide.