Tweets And More

Die Reise hat erst begonnen!

---

The Hacker News

• New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal
• Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council's Certified CISO Hall of Fame Report 2023
• FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring
• New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America
• The Importance of Managing Your Data Security Posture

---

Brian Krebs

• Ask Fitis, the Bear: Real Crooks Sign Their Malware
• Discord Admins Hacked by Malicious Bookmarks
• Phishing Domains Tanked After Meta Sued Freenom
• Interview With a Crypto Scam Investment Spammer
• Russian Hacker “Wazawaka” Indicted for Ransomware

---

Dark Reading

• PyPI's 2FA Requirements Don't Go Far Enough, Researchers Say
• 'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft
• 'Picture-in-Picture' Obfuscation Spoofs Delta, Kohl's for Credential Harvesting
• Streamers Ditch Netflix for Dark Web After Password Sharing Ban
• Want Sustainable Security? Find Middle Ground Between Tech & Education

---

 Threatpost | The first stop for security news RSS Feed

• Student Loan Breach Exposes 2.5M Records
• Watering Hole Attacks Push ScanBox Keylogger
• Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
• Ransomware Attacks are on the Rise
• Cybercriminals Are Selling Access to Chinese Surveillance Cameras

---

Schneier on Security

• Friday Squid Blogging: Squid Chromolithographs
• Open-Source LLMs
• On the Catastrophic Risk of AI
• Chinese Hacking of US Critical Infrastructure
• Brute-Forcing a Fingerprint Reader

---

AWS Security Blog

• New eBook: 5 Keys to Secure Enterprise Messaging
• Announcing the AWS Blueprint for Ransomware Defense
• Updated whitepaper available: Architecting for PCI DSS Segmentation and Scoping on AWS
• AWS Security Profile: Ritesh Desai, GM, AWS Secrets Manager
• Get custom data into Amazon Security Lake through ingesting Azure activity logs

---

Cisco Security

---

Google Online Security

• Announcing the Chrome Browser Full Chain Exploit Bonus
• Adding Chrome Browser Cloud Management remediation actions in Splunk using Alert Actions
• Time to challenge yourself in the 2023 Google CTF!
• Google Trust Services ACME API available to all users at no cost
• Announcing the launch of GUAC v0.1

---

Fortiguard PSIRT

• FortiADC – Path traversal vulnerability in CLI
• FortiNAC – Weak password hashing method in /etc/shadow
• FortiOS & FortiProxy – Out-of-bound-write in sslvpnd
• FortiNAC – Stored XSS triggering RCE via license key forgery
• FortiNAC – Weak authentication mechanism on device registration page

---