Babuk Ransomware: a victim of Indodax hack - https://theravenfile.com/2025/02/06/babuk-ransomware-a-victim-of-indodax-hack/?source=post_page-----eefdf1af2e3c--------------------------------

 Code injection attacks using publicly disclosed ASP.NET machine keys - https://www.microsoft.com/en-us/security/blog/2025/02/06/code-injection-attacks-using-publicly-disclosed-asp-net-machine-keys/

 ThreatMon on X:A New Hannibal Stealer Shared” - https://x.com/MonThreat/status/1887121738229600582

8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur - https://labs.watchtowr.com/8-million-requests-later-we-made-the-solarwinds-supply-chain-attack-look-amateur/

 CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks - https://www.trendmicro.com/en_us/research/25/a/cve-2025-0411-ukrainian-organizations-targeted.html

 Stealers on the Rise: A Closer Look at a Growing macOS Threat - https://unit42.paloaltonetworks.com/macos-stealers-growing/

 Boletim de segurança do Android de fevereiro de 2025 - https://source.android.com/docs/security/bulletin/2025-02-01?hl=pt-br

Malicious packages deepseek and deepseekai published in Python Package Index - https://www.google.com/url?q=https://global.ptsecurity.com/analytics/pt-esc-threat-intelligence/malicious-packages-deepseeek-and-deepseekai-published-in-python-package-index&sa=D&source=docs&ust=1738667193797493&usg=AOvVaw3E9BNcNdMeT3UO3xeP4Sgr

 Coral Jasmine on X - https://x.com/Fact_Finder03/status/1885209370868203740

 OPA Gatekeeper Bypass Reveals Risks in Kubernetes Policy Engines - https://www.aquasec.com/blog/risks-misconfigured-kubernetes-policy-engines-opa-gatekeeper/

WhatsApp says journalists and civil society members were target of Israeli spyware  - https://www.theguardian.com/technology/2025/jan/31/whatsapp-israel-spyware

 How scammers are exploiting DeepSeek’s rise - https://www.welivesecurity.com/en/cybersecurity/scammers-exploiting-deepseek-hype/

Coyote Banking Trojan: A Stealthy Attack via LNK files  - https://www.fortinet.com/blog/threat-research/coyote-banking-trojan-a-stealthy-attack-via-lnk-files

No need to RSVP: a closer look at the Tria Stealer campaign - https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/115295/

HTTP Client Tools Exploitation for Account Takeover Attacks - https://www.proofpoint.com/us/blog/threat-insight/http-client-tools-exploitation-account-takeover-attacks

Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign  - https://securityscorecard.com/blog/operation-phantom-circuit-north-koreas-global-data-exfiltration-campaign/

Devil-Traff: A New Bulk SMS Platform Driving Phishing Campaigns - https://slashnext.com/blog/devil-traff-a-new-bulk-sms-platform-driving-phishing-campaigns/

FBI seizes Cracked.io, Nulled.to hacking forums in Operation Talent - https://www.bleepingcomputer.com/news/security/fbi-seizes-crackedio-nulledto-hacking-forums-in-operation-talent/

New TorNet backdoor seen in widespread campaign - https://blog.talosintelligence.com/new-tornet-backdoor-campaign/

Security Brief: Threat Actors Take Taxes Into Account - https://www.proofpoint.com/us/blog/threat-insight/security-brief-threat-actors-take-taxes-account

Critical Vulnerabilities in Node.js Expose Systems to Remote Attacks - https://cyble.com/blog/critical-vulnerabilities-in-node-js-expose-systems/

Tempest analisa suposto ataque contra AWS Amazon pelo grupo GD LockerSec 

Exploit Me, Baby, One More Time: Command Injection in Kubernetes Log Query - https://www.akamai.com/blog/security-research/2025/jan/2024-january-kubernetes-log-query-rce-windows

[Security Advisory] CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API - https://discuss.kubernetes.io/t/security-advisory-cve-2024-9042-command-injection-affecting-windows-nodes-via-nodes-logs-query-api/31276

No Honour Among Thieves: Uncovering a Trojanized XWorm RAT Builder Propagated by Threat Actors and Disrupting Its Operations - https://www.cloudsek.com/blog/no-honour-among-thieves-uncovering-a-trojanized-xworm-rat-builder-propagated-by-threat-actors-and-disrupting-its-operations