Tweets And More

Die Reise hat erst begonnen!

The Hacker News

Brian Krebs

• Microsoft: Happy 2025. Here’s 161 Security Updates
• A Day in the Life of a Prolific Voice Phishing Crew
• U.S. Army Soldier Arrested in AT&T, Verizon Extortions
• Happy 15th Anniversary, KrebsOnSecurity!
• Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Dark Reading

• As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks
• Microsoft Rings in 2025 With Record Security Update
• Apple Bug Allows Root Protections Bypass Without Physical Access
• FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware
• Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

 Threatpost | The first stop for security news RSS Feed

• Student Loan Breach Exposes 2.5M Records
• Watering Hole Attacks Push ScanBox Keylogger
• Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
• Ransomware Attacks are on the Rise
• Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Schneier on Security

• Upcoming Speaking Engagements
• The First Password on the Internet
• Microsoft Takes Legal Action Against AI “Hacking as a Service” Scheme
• Friday Squid Blogging: Cotton-and-Squid-Bone Sponge
• Apps That Are Spying on Your Location

AWS Security Blog

• AWS achieves HDS certification for 24 AWS Regions
• How to implement IAM policy checks with Visual Studio Code and IAM Access Analyzer
• AWS re:Invent 2024: Security, identity, and compliance recap
• How to monitor, optimize, and secure Amazon Cognito machine-to-machine authorization
• Securing a city-sized event: How Amazon integrates physical and logical security at re:Invent

Cisco Security

• Advancing AI Security and Contributing to CISA’s JCDC AI Efforts 
• Strengthening Docker Security: Best Practices for Resilient Containers
• The Impacts of Government Regulations on PQC Product Availability
• GenAI to Advanced Microsegmentation: Secure Workload 3.10 Has It All!
• A New Approach to Network Troubleshooting in the Multicloud World

Google Online Security

• Google Cloud expands vulnerability detection for Artifact Registry using OSV
• Announcing the launch of Vanir: Open-source Security Patch Validation
• Leveling Up Fuzzing: Finding more vulnerabilities with AI
• Retrofitting spatial safety to hundreds of millions of lines of C++
• Safer with Google: New intelligent, real-time protections on Android to keep you safe

Fortiguard PSIRT

• HTML Content Injection
• FortiAP – Restricted Shell Escape via CLI Command Injection
• FortiWeb – Stack overflow in execute backup command
• Exposure of sensitive information in RADIUS Accounting-Request
• File-Filter Bypass in Explicit Web Proxy Policy