Tweets And More

Die Reise hat erst begonnen!

---

The Hacker News

• Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.
• Russian Hacker Vladimir Dunaev Convicted for Creating TrickBot Malware
• New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia
• Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats
• Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

---

Brian Krebs

• Okta: Breach Affected All Customer Support Users
• ID Theft Service Resold Access to USInfoSearch Data
• Alleged Extortioner of Psychotherapy Patients Faces Trial
• Microsoft Patch Tuesday, November 2023 Edition
• It’s Still Easy for Anyone to Become You at Experian

---

Dark Reading

• Interpol Arrests Smuggler With New Biometric Screening Database
• The European Space Agency Explores Cybersecurity for Space Industry
• The Latest Delinea Secret Server Release Boosts Usability With New Features
• Flow Security Launches GenAI DLP
• North Korea APT Slapped With Cyber Sanctions After Satellite Launch

---

 Threatpost | The first stop for security news RSS Feed

• Student Loan Breach Exposes 2.5M Records
• Watering Hole Attacks Push ScanBox Keylogger
• Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
• Ransomware Attacks are on the Rise
• Cybercriminals Are Selling Access to Chinese Surveillance Cameras

---

Schneier on Security

• Friday Squid Blogging: Strawberry Squid in the Galápagos
• AI Decides to Engage in Insider Trading
• Extracting GPT’s Training Data
• Breaking Laptop Fingerprint Sensors
• Digital Car Keys Are Coming

---

AWS Security Blog

• Use CodeWhisperer to identify issues and use suggestions to improve code security in your IDE
• How to improve cross-account access for SaaS applications accessing customer accounts
• Fall 2023 SOC reports now available with 171 services in scope
• Optimize AWS administration with IAM paths
• Use IAM Roles Anywhere to help you improve security in on-premises container workloads

---

Cisco Security

---

Google Online Security

• Evolving the App Defense Alliance
• MTE – The promising path forward for memory safety
• Qualified certificates with qualified risks
• More ways for users to identify independently security tested apps on Google Play
• Increasing transparency in AI security

---

Fortiguard PSIRT

• FortiADC – Privilege escalation vulnerability using the automation cli-script feature
• FortiSIEM – Encrypted password stored in logs
• FortiSIEM – OS command injection in Report Server
• FortiOS & FortiProxy – DOS in headers management
• FortiOS & FortiProxy VM – Bypass of root file system integrity checks at boot time on VM

---