Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 

Exploit released for critical WhatsUp Gold RCE flaw, patch now - https://www.bleepingcomputer.com/news/security/exploit-released-for-critical-whatsup-gold-rce-flaw-patch-now/ 

Veeam Service Provider Console Vulnerabilities (CVE-2024-42448 | CVE-2024-42449) - https://www.veeam.com/kb4679 

Enhanced Visibility and Hardening Guidance for Communications Infrastructure - https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure 

SmokeLoader Attack Targets Companies in Taiwan - https://www.fortinet.com/blog/threat-research/sophisticated-attack-targets-taiwan-with-smokeloader 

Unveiling RevC2 and Venom Loader - https://www.zscaler.com/blogs/security-research/unveiling-revc2-and-venom-loader 

Gafgyt Malware Targeting Docker Remote API Servers - https://www.trendmicro.com/en_us/research/24/l/gafgyt-malware-targeting-docker-remote-api-servers.html 

Shady Bets: How to Protect Yourself from Gambling Fraud Online - https://www.group-ib.com/blog/shady-bets/

IT threat evolution in Q3 2024. Non-obile statistics - https://securelist.com/malware-report-q3-2024-non-mobile-statistics/114695/

Ransomware Roundup - Interlock - https://www.fortinet.com/blog/threat-research/ransomware-roundup-interlock

Over Two Dozen Flaws Identified in Advantech Industrial Wi-Fi Access Points – Patch ASAP - https://thehackernews.com/2024/11/over-two-dozen-flaws-identified-in.html 

Malicious PyPI crypto pay package aiocpa implants infostealer code - https://www.reversinglabs.com/blog/malicious-pypi-crypto-pay-package-aiocpa-implants-infostealer-code 

Malicious NPM Package Exploits React Native Documentation Example - https://checkmarx.com/blog/malicious-npm-package-exploits-react-native-documentation-example/ 

Bootkitty: Analyzing the first UEFI bootkit for Linux - https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/ 

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers - https://thehackernews.com/2024/11/critical-flaw-in-projectsend-under.html 

VMware fixed five vulnerabilities in Aria Operations product - https://securityaffairs.com/171472/security/vmware-fixed-five-vulnerabilitiesaria-operations.html 

正規サービスを悪用した攻撃グループAPT-C-60による攻撃 - https://blogs.jpcert.or.jp/ja/2024/11/APT-C-60.html 

Gaming Engines: An Undetected Playground for Malware Loaders - https://research.checkpoint.com/2024/gaming-engines-an-undetected-playground-for-malware-loaders/ 

TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ 

RomCom exploits Firefox and Windows zero days in the wild - https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/ 

Analysis of Elpaco: a Mimic variant - https://securelist.com/elpaco-ransomware-a-mimic-variant/114635/ 

Matrix Unleashes A New Widespread DDoS Campaign - https://www.aquasec.com/blog/matrix-unleashes-a-new-widespread-ddos-campaign/ 

TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ 

CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks - https://www.sentinelone.com/labs/cybervolk-a-deep-dive-into-the-hacktivists-tools-and-ransomware-fueling-pro-russian-cyber-attacks/ 

Guess Who’s Back - The Return of ANEL in the Recent Earth Kasha Spear-phishing Campaign in 2024 - https://www.trendmicro.com/en_us/research/24/k/return-of-anel-in-the-recent-earth-kasha-spearphishing-campaign.html 

Dozens of Machines Infected: Year-Long NPM Supply Chain Attack Combines Crypto Mining and Data Theft - https://checkmarx.com/blog/npm-supply-chain-attack-combines-crypto-mining-and-data-theft/ 

Zyxel firewalls targeted in recent ransomware attacks - https://securityaffairs.com/171382/cyber-crime/zyxel-firewall-ransomware-attacks.html 

QNAP addresses critical flaws across NAS, router software - https://www.bleepingcomputer.com/news/security/qnap-addresses-critical-flaws-across-nas-router-software/  

TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ 

Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions - https://www.trendmicro.com/en_us/research/24/k/earth-estries.html 

The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access - https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ 

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON - https://www.microsoft.com/en-us/security/blog/2024/11/22/microsoft-shares-latest-intelligence-on-north-korean-and-chinese-threat-actors-at-cyberwarcon/ 

⁠Post da Fundação Shadowserver sobre a exploração das falhas no PAN-OS - https://bsky.app/profile/shadowserver.bsky.social/post/3lbh6k7p7pc27 

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) - https://security.paloaltonetworks.com/CVE-2024-0012 

⁠CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface - https://security.paloaltonetworks.com/CVE-2024-9474 

Forti-fied? Logging blind spot revealed in FortiClient VPN - https://pentera.io/blog/FortiClient-VPN_logging-blind-spot-revealed/ 

Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine - https://www.welivesecurity.com/en/eset-research/unveiling-wolfsbane-gelsemiums-linux-counterpart-to-gelsevirine/ 

Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPY - https://www.recordedfuture.com/research/russia-aligned-tag-110-targets-asia-and-europe 

Unveiling the Past and Present of APT-K-47 Weapon: Asyncshell - https://medium.com/@knownsec404team/unveiling-the-past-and-present-of-apt-k-47-weapon-asyncshell-5a98f75c2d68 

DPRK IT Workers | A Network of Active Front Companies and Their Links to China - https://www.sentinelone.com/labs/dprk-it-workers-a-network-of-active-front-companies-and-their-links-to-china/ 

Microsoft disrupts ONNX phishing-as-a-service infrastructure - https://www.bleepingcomputer.com/news/security/microsoft-disrupts-onnx-phishing-as-a-service-infrastructure/