Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft - https://www.trendmicro.com/en_us/research/24/h/malvertising-campaign-fake-ai-editor-website-credential-theft.html 

Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry - https://unit42.paloaltonetworks.com/bola-vulnerability-impacts-container-registry-harbor/ 

Who Knew? Domain Hijacking Is So Easy - https://blogs.infoblox.com/threat-intelligence/who-knew-domain-hijacking-is-so-easy/ 

Ducks Now Sitting (DNS): Internet Infrastructure Insecurity - https://eclypsium.com/blog/ducks-now-sitting-dns-internet-infrastructure-insecurity/ 

The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean - https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/ 

Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com - https://krebsonsecurity.com/2019/01/bomb-threat-sextortion-spammers-abused-weakness-at-godaddy-com/ 

Microsoft says massive Azure outage was caused by DDoS attack - https://www.bleepingcomputer.com/news/microsoft/microsoft-says-massive-azure-outage-was-caused-by-ddos-attack/ 

Threat Actors Exploit Sora AI-themed Branding to Spread Malware - https://cyble.com/blog/threat-actors-exploit-sora-ai-themed-branding-to-spread-malware/ 

Malicious Packages Hidden in PyPI - https://www.fortinet.com/blog/threat-research/malicious-packages-hidden-in-pypl 

Research Update: Threat Actors Behind the DEV#POPPER Campaign Have Retooled and are Continuing to Target Software Developers via Social Engineering - https://www.securonix.com/blog/research-update-threat-actors-behind-the-devpopper-campaign-have-retooled-and-are-continuing-to-target-software-developers-via-social-engineering/ 

Beware the RAT: Android Remote Access malware strikes in Malaysia - https://www.group-ib.com/blog/craxs-rat-malaysia/ 

Mint Stealer: A Comprehensive Study of a Python-Based Information Stealer - https://www.cyfirma.com/research/mint-stealer-a-comprehensive-study-of-a-python-based-information-stealer/ 

Critical ServiceNow vulnerabilities being targeted by hackers, cyber agency warns - https://therecord.media/critical-servicenow-vulnerabilities-hackers-cisa 

ThreatLabz 2024_Ransomware Report - https://www.zscaler.com/resources/industry-reports/threatlabz-ransomware-report.pdf 

A VISUAL EXPLORATION OF EXPLOITATION IN THE WILD: THE INAUGURAL STUDY OF EPSS DATA AND PERFORMANCE - https://static.tenable.com/marketing/research-reports/AnalystReport-EPSS_Exploration_of_Exploits.pdf 

Malicious Python Package Targets macOS Developers To Access Their GCP Accounts - https://checkmarx.com/blog/malicious-python-package-targets-macos-developers-to-access-their-gcp-accounts/ 

Rafel RAT: A Pest Invading Droid Systems - https://www.bitdefender.com/blog/businessinsights/rafel-rat-a-pest-invading-droid-systems/ 

SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining - https://www.wiz.io/blog/seleniumgreed-cryptomining-exploit-attack-flow-remediation-steps 

APT45: North Korea’s Digital Military Machine - https://cloud.google.com/blog/topics/threat-intelligence/apt45-north-korea-digital-military-machine/ 

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs - https://www.cisa.gov/sites/default/files/2024-07/aa24-207a-dprk-cyber-group-conducts-global-espionage-campaign.pdf 

French police push PlugX malware self-destruct payload to clean PCs - https://www.bleepingcomputer.com/news/security/french-police-push-plugx-malware-self-destruct-payload-to-clean-pcs/ 

CVE-2024-6327 - Insecure Deserialization Vulnerability - https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-6327 

Polícia descobre central que funcionava como unidade móvel de golpes - https://globoplay.globo.com/v/12781788/ 

Ataque hacker em plataforma do governo afeta sistemas de nove ministérios e dois órgãos - https://folha.com/hg5ytlkn 

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine - https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/ 

GXC Team Unmasked: The cybercriminal group targeting Spanish bank users with AI-powered phishing tools and android malware - https://www.group-ib.com/blog/gxc-team-unmasked/?utm_source=telegram&utm_campaign=GXC%20Team%20Unmasked&utm_medium=social 

How safe is Wi-Fi in Paris? - https://www.kaspersky.com/blog/how-safe-is-wi-fi-in-paris/51772/ 

ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions - https://www.tenable.com/blog/confusedfunction-a-privilege-escalation-vulnerability-impacting-gcp-cloud-functions 

Operation ShadowCat: Targeting Indian Political Observers via a Stealthy RAT - https://cyble.com/blog/operation-shadowcat-targeting-indian-political-observers-via-a-stealthy-rat/ 

FLAME STEALER - https://www.cyfirma.com/research/flame-stealer/ 

STARGAZERS GHOST NETWORK - https://research.checkpoint.com/2024/stargazers-ghost-network/ 

Daggerfly: Espionage Group Makes Major Update to Toolset - https://symantec-enterprise-blogs.security.com/threat-intelligence/daggerfly-espionage-updated-toolset 

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed - https://www.fortinet.com/blog/threat-research/exploiting-cve-2024-21412-stealer-campaign-unleashed 

CVE-2024-21412 - Internet Shortcut Files Security Feature Bypass Vulnerability - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412 

REMEDIATION AND GUIDANCE HUB: FALCON CONTENT UPDATE FOR WINDOWS HOSTS - https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ 

Fake CrowdStrike repair manual pushes new infostealer malware - https://www.bleepingcomputer.com/news/security/fake-crowdstrike-repair-manual-pushes-new-daolpu-infostealer-malware/ 

How a North Korean Fake IT Worker Tried to Infiltrate Us - https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-infiltrate-us 

SocGholish: Fake update puts visitors at risk - https://www.gdatasoftware.com/blog/2024/07/37976-socgholish-fake-update 

Impact of FrostyGoop ICS Malware on

Connected OT Systems - https://hub.dragos.com/hubfs/Reports/Dragos-FrostyGoop-ICS-Malware-Intel-Brief-0724_.pdf 

Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android - https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/ 

Solving the 7777 Botnet enigma: A cybersecurity quest - https://blog.sekoia.io/solving-the-7777-botnet-enigma-a-cybersecurity-quest/ 

VIGORISH VIPER: A VENOMOUS BET - https://insights.infoblox.com/resources-report/infoblox-report-vigorish-viper-a-venomous-bet 

REMEDIATION AND GUIDANCE HUB: FALCON CONTENT UPDATE FOR WINDOWS HOSTS - https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ 

Fake CrowdStrike fixes target companies with malware, data wipers - https://www.bleepingcomputer.com/news/security/fake-crowdstrike-fixes-target-companies-with-malware-data-wipers/ 

Threat Actors Exploit Recent CrowdStrike Outage to Ramp Up Suspicious Domain Creation - https://cyble.com/blog/threat-actors-exploit-recent-crowdstrike-outage-to-ramp-up-suspicious-domain-creation/ 

Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma - https://www.trendmicro.com/en_us/research/24/g/new-play-ransomware-linux-variant-targets-esxi-shows-ties-with-p.html 

SolarWinds Security Vulnerabilities - https://www.solarwinds.com/trust-center/security-advisories 

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts - https://www.wiz.io/blog/sapwned-sap-ai-vulnerabilities-ai-security 

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts - https://www.wiz.io/blog/sapwned-sap-ai-vulnerabilities-ai-security 

APT41 Has Arisen From the DUST - https://cloud.google.com/blog/topics/threat-intelligence/apt41-arisen-from-dust/ 

CrowdStrike code update bricking Windows machines around the world - https://www.theregister.com/2024/07/19/crowdstrike_falcon_sensor_bsod_incident/ 

Tweet de BRODY NISBET - https://x.com/brody_n77/status/1814185935476863321