New TorNet backdoor seen in widespread campaign - https://blog.talosintelligence.com/new-tornet-backdoor-campaign/

Security Brief: Threat Actors Take Taxes Into Account - https://www.proofpoint.com/us/blog/threat-insight/security-brief-threat-actors-take-taxes-account

Critical Vulnerabilities in Node.js Expose Systems to Remote Attacks - https://cyble.com/blog/critical-vulnerabilities-in-node-js-expose-systems/

Tempest analisa suposto ataque contra AWS Amazon pelo grupo GD LockerSec 

Exploit Me, Baby, One More Time: Command Injection in Kubernetes Log Query - https://www.akamai.com/blog/security-research/2025/jan/2024-january-kubernetes-log-query-rce-windows

[Security Advisory] CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API - https://discuss.kubernetes.io/t/security-advisory-cve-2024-9042-command-injection-affecting-windows-nodes-via-nodes-logs-query-api/31276

No Honour Among Thieves: Uncovering a Trojanized XWorm RAT Builder Propagated by Threat Actors and Disrupting Its Operations - https://www.cloudsek.com/blog/no-honour-among-thieves-uncovering-a-trojanized-xworm-rat-builder-propagated-by-threat-actors-and-disrupting-its-operations

TLP Black, minha newsletter - https://tlpblack.substack.com/ 

Product Notice: Urgent Security Notification - SMA 1000 - https://www.sonicwall.com/support/knowledge-base/product-notice-urgent-security-notification-sma-1000/250120090802840 

Threat Actors Chained Vulnerabilities in Ivanti

Cloud Service Applications - https://www.cisa.gov/sites/default/files/2025-01/aa25-022a-threat-actors-chained-vulnerabilities-in-ivanti-cloud-service-applications.pdf 

Salt Typhoon: An Analysis of Vulnerabilities Exploited by this State-Sponsored Actor - https://www.tenable.com/blog/salt-typhoon-an-analysis-of-vulnerabilities-exploited-by-this-state-sponsored-actor 

The J-Magic Show: Magic Packets and Where to find them - https://blog.lumen.com/the-j-magic-show-magic-packets-and-where-to-find-them/ 

Lumma Stealer: Fake CAPTCHAs & New Techniques to Evade Detection - https://www.netskope.com/blog/lumma-stealer-fake-captchas-new-techniques-to-evade-detection 

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List - https://thehackernews.com/2025/01/cisa-adds-five-year-old-jquery-xss-flaw.html 

Targeted supply chain attack against Chrome browser extensions - https://blog.sekoia.io/targeted-supply-chain-attack-against-chrome-browser-extensions/ 

ClamAV OLE2 File Format Decryption Denial of Service Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA 

Cisco BroadWorks SIP Denial of Service Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-sip-dos-mSySbrmt 

Cisco Meeting Management REST API Privilege Escalation Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-privesc-uy2Vf8pc 

Love and hate under war: The GamaCopy organization, which imitates the Russian Gamaredon, uses military — related bait to launch attacks on Russia - https://medium.com/@knownsec404team/love-and-hate-under-war-the-gamacopy-organization-which-imitates-the-russian-gamaredon-uses-560ba5e633fa 

Treasury Sanctions Company Associated with Salt Typhoon and Hacker Associated with Treasury Compromise - https://home.treasury.gov/news/press-releases/jy2792 

ANDROID MALWARE IN DONOT APT OPERATIONS - https://www.cyfirma.com/research/android-malware-in-donot-apt-operations/ 

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation - https://thehackernews.com/2025/01/critical-flaws-in-wgs-804hpt-switches.html 

Hack The Emulated Planet: Vulnerability Hunting Planet WGS-804HPT Industrial Switch - https://claroty.com/team82/research/hack-the-emulated-planet-vulnerability-hunting-planet-wgs-804hpt-industrial-switch 

New Star Blizzard spear-phishing campaign targets WhatsApp accounts - https://www.microsoft.com/en-us/security/blog/2025/01/16/new-star-blizzard-spear-phishing-campaign-targets-whatsapp-accounts/ 

Under the cloak of UEFI Secure Boot: Introducing CVE-2024-7344 - https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/  

Sneaky 2FA: exposing a new AiTM Phishing-as-a-Service - https://blog.sekoia.io/sneaky-2fa-exposing-a-new-aitm-phishing-as-a-service/#h-anti-bot-and-anti-analysis-features 

Threat Brief: CVE-2025-0282 and CVE-2025-0283 - https://unit42.paloaltonetworks.com/threat-brief-ivanti-cve-2025-0282-cve-2025-0283/ 

If you think you blocked NTLMv1 in your org, think again - https://www.silverfort.com/blog/ntlmv1-bypass-in-active-directory-technical-deep-dive/ 

Hackers leak configs and VPN credentials for 15,000 FortiGate devices - https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/ 

2022 zero day was used to raid Fortigate firewall configs. Somebody just released them. - https://doublepulsar.com/2022-zero-day-was-used-to-raid-fortigate-firewall-configs-somebody-just-released-them-a7a74e0b0c7f 

The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads - https://www.malwarebytes.com/blog/news/2025/01/the-great-google-ads-heist-criminals-ransack-advertiser-accounts-via-fake-google-ads 

Slew of WavLink vulnerabilities - https://blog.talosintelligence.com/slew-of-wavlink-vulnerabilities/ 

Operation 99: North Korean State Sponsored Supply Chain Attack on Tech Innovation - https://securityscorecard.com/wp-content/uploads/2025/01/Report_011325_Strike_Operation99.pdf