TLP Black, minha newsletter - https://tlpblack.substack.com/ 

Product Notice: Urgent Security Notification - SMA 1000 - https://www.sonicwall.com/support/knowledge-base/product-notice-urgent-security-notification-sma-1000/250120090802840 

Threat Actors Chained Vulnerabilities in Ivanti

Cloud Service Applications - https://www.cisa.gov/sites/default/files/2025-01/aa25-022a-threat-actors-chained-vulnerabilities-in-ivanti-cloud-service-applications.pdf 

Salt Typhoon: An Analysis of Vulnerabilities Exploited by this State-Sponsored Actor - https://www.tenable.com/blog/salt-typhoon-an-analysis-of-vulnerabilities-exploited-by-this-state-sponsored-actor 

The J-Magic Show: Magic Packets and Where to find them - https://blog.lumen.com/the-j-magic-show-magic-packets-and-where-to-find-them/ 

Lumma Stealer: Fake CAPTCHAs & New Techniques to Evade Detection - https://www.netskope.com/blog/lumma-stealer-fake-captchas-new-techniques-to-evade-detection 

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List - https://thehackernews.com/2025/01/cisa-adds-five-year-old-jquery-xss-flaw.html