BlueAlpha Abuses Cloudflare Tunneling Service for GammaDrop Staging Infrastructure - https://go.recordedfuture.com/hubfs/reports/cta-ru-2024-1205.pdf 

Mitel Product Security Advisory MISA-2024-0029 MiCollab Path Traversal Vulnerability - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 

Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day - https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/ 

U.S. Organization in China Targeted by Attackers - https://www.security.com/threat-intelligence/us-china-espionage 

Something to Remember Us By Device Confiscated by Russian Authorities Returned with Monokle-Type Spyware Installed - https://citizenlab.ca/2024/12/device-confiscated-by-russian-authorities-returned-with-monokle-type-spyware-installed/ 

Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 

Exploit released for critical WhatsUp Gold RCE flaw, patch now - https://www.bleepingcomputer.com/news/security/exploit-released-for-critical-whatsup-gold-rce-flaw-patch-now/ 

Veeam Service Provider Console Vulnerabilities (CVE-2024-42448 | CVE-2024-42449) - https://www.veeam.com/kb4679 

Enhanced Visibility and Hardening Guidance for Communications Infrastructure - https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure 

SmokeLoader Attack Targets Companies in Taiwan - https://www.fortinet.com/blog/threat-research/sophisticated-attack-targets-taiwan-with-smokeloader 

Unveiling RevC2 and Venom Loader - https://www.zscaler.com/blogs/security-research/unveiling-revc2-and-venom-loader 

Gafgyt Malware Targeting Docker Remote API Servers - https://www.trendmicro.com/en_us/research/24/l/gafgyt-malware-targeting-docker-remote-api-servers.html 

Shady Bets: How to Protect Yourself from Gambling Fraud Online - https://www.group-ib.com/blog/shady-bets/

IT threat evolution in Q3 2024. Non-obile statistics - https://securelist.com/malware-report-q3-2024-non-mobile-statistics/114695/

Ransomware Roundup - Interlock - https://www.fortinet.com/blog/threat-research/ransomware-roundup-interlock

Over Two Dozen Flaws Identified in Advantech Industrial Wi-Fi Access Points – Patch ASAP - https://thehackernews.com/2024/11/over-two-dozen-flaws-identified-in.html 

Malicious PyPI crypto pay package aiocpa implants infostealer code - https://www.reversinglabs.com/blog/malicious-pypi-crypto-pay-package-aiocpa-implants-infostealer-code 

Malicious NPM Package Exploits React Native Documentation Example - https://checkmarx.com/blog/malicious-npm-package-exploits-react-native-documentation-example/ 

Bootkitty: Analyzing the first UEFI bootkit for Linux - https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/ 

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers - https://thehackernews.com/2024/11/critical-flaw-in-projectsend-under.html 

VMware fixed five vulnerabilities in Aria Operations product - https://securityaffairs.com/171472/security/vmware-fixed-five-vulnerabilitiesaria-operations.html 

正規サービスを悪用した攻撃グループAPT-C-60による攻撃 - https://blogs.jpcert.or.jp/ja/2024/11/APT-C-60.html 

Gaming Engines: An Undetected Playground for Malware Loaders - https://research.checkpoint.com/2024/gaming-engines-an-undetected-playground-for-malware-loaders/ 

TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ 

RomCom exploits Firefox and Windows zero days in the wild - https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/ 

Analysis of Elpaco: a Mimic variant - https://securelist.com/elpaco-ransomware-a-mimic-variant/114635/ 

Matrix Unleashes A New Widespread DDoS Campaign - https://www.aquasec.com/blog/matrix-unleashes-a-new-widespread-ddos-campaign/ 

TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ 

CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks - https://www.sentinelone.com/labs/cybervolk-a-deep-dive-into-the-hacktivists-tools-and-ransomware-fueling-pro-russian-cyber-attacks/ 

Guess Who’s Back - The Return of ANEL in the Recent Earth Kasha Spear-phishing Campaign in 2024 - https://www.trendmicro.com/en_us/research/24/k/return-of-anel-in-the-recent-earth-kasha-spearphishing-campaign.html 

Dozens of Machines Infected: Year-Long NPM Supply Chain Attack Combines Crypto Mining and Data Theft - https://checkmarx.com/blog/npm-supply-chain-attack-combines-crypto-mining-and-data-theft/ 

Zyxel firewalls targeted in recent ransomware attacks - https://securityaffairs.com/171382/cyber-crime/zyxel-firewall-ransomware-attacks.html 

QNAP addresses critical flaws across NAS, router software - https://www.bleepingcomputer.com/news/security/qnap-addresses-critical-flaws-across-nas-router-software/  

TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ 

Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions - https://www.trendmicro.com/en_us/research/24/k/earth-estries.html 

The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access - https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ 

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON - https://www.microsoft.com/en-us/security/blog/2024/11/22/microsoft-shares-latest-intelligence-on-north-korean-and-chinese-threat-actors-at-cyberwarcon/