The Art of JQ and Command-Line Fu

https://isc.sans.edu/diary/The%20Art%20of%20JQ%20and%20Command-line%20Fu%20%5BGuest%20Diary%5D/31006

Microsoft Outlook Vulnerablity Details

https://blog.morphisec.com/cve-2024-30103-microsoft-outlook-vulnerability

Keeping our Outlook Personal Email Users Safe

https://techcommunity.microsoft.com/t5/outlook-blog/keeping-our-outlook-personal-email-users-safe-reinforcing-our/ba-p/4164184

Exploiting ML models with pickle file attacks

https://blog.trailofbits.com/2024/06/11/exploiting-ml-models-with-pickle-file-attacks-part-1/

MSMQ Packets

https://isc.sans.edu/diary/Port%201801%20Traffic%3A%20Microsoft%20Message%20Queue/31004

Adobe Updates

https://helpx.adobe.com/security/products/magento/apsb24-40.html

Black Basta Exploited CVE-2024-26169 Prior to Patch

https://symantec-enterprise-blogs.security.com/threat-intelligence/black-basta-ransomware-zero-day

Pixel Phone 0-Day Patched

https://source.android.com/docs/security/bulletin/pixel/2024-06-01

Microsoft Patch Tuesday

https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20June%202024/31000

JetBrains IntelliJ Based IDE GitHub Plugin Vulnerability

https://blog.jetbrains.com/security/2024/06/updates-for-security-issue-affecting-intellij-based-ides-2023-1-and-github-plugin/

Veeam Recovery Orchestrator (VRO) vulnerability CVE-2024-29855

https://www.veeam.com/kb4585

Precor Threadmill Vulnerablity

https://securityintelligence.com/x-force/internet-connected-treadmill-vulnerabilities-discovered/

Veeam Exploit CVE-2024-29849

https://summoning.team/blog/veeam-enterprise-manager-cve-2024-29849-auth-bypass/

SORBS Shutdown

https://www.theregister.com/2024/06/07/sorbs_closed/

Rogue Cell Tower Shut Down in London

https://www.cityoflondon.police.uk/news/city-of-london/news/2024/june/two-people-arrested-in-connection-with-investigation-into-homemade-mobile-antenna-used-to-send-thousands-of-smishing-text-messages-to-the-public/

Malicious Comfyui Modules

https://www.youtube.com/watch?v=ntwGHjBCbeQ

PHP Unicode Remote Code Execution Exploit

https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html

https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/

PyTorch Distributed RPC Framework Remote Code Execution

https://huntr.com/bounties/39811836-c5b3-4999-831e-46fee8fcade3

https://www.cve.org/CVERecord?id=CVE-2024-5480

Malicious VSCode Extensions Used by Researchers

https://www.bleepingcomputer.com/news/security/malicious-visual-studio-code-extensions-with-millions-of-installs-discovered/

Malicious Python Script with a "Best Before" Date

https://isc.sans.edu/diary/Malicious%20Python%20Script%20with%20a%20%22Best%20Before%22%20Date/30988

FBI Obtained 7,000 LockBit Ransomware Keys

https://www.fbi.gov/news/speeches/fbi-cyber-assistant-director-bryan-vorndran-s-remarks-at-the-2024-boston-conference-on-cyber-security

Apple Guarantees 5 Years of Security Updates

https://www.androidauthority.com/iphone-software-support-commitment-3449135/

FCC Proposes New Rule for Security Routing

https://www.fcc.gov/document/fcc-proposes-internet-routing-security-reporting-requirements

WatchGuard VPN Brutefording

https://isc.sans.edu/diary/Brute%20Force%20Attacks%20Against%20Watchguard%20VPN%20Endpoints/30984

TotalRecall Tool To Extract Data from Microsoft Recall

https://github.com/xaitax/TotalRecall

WebEx Flaw

https://www.helpnetsecurity.com/2024/06/05/cisco-webex-cloud-vulnerability/

https://netzbegruenung.de/blog/netzbegruenung-findet-schwachstellen-auch-im-cisco-webex-clouddienst-behoerden-und-unternehmen-in-ganz-europa-betroffen/ (in german)

No Defender Yes Defender

https://isc.sans.edu/diary/No-Defender%2C%20Yes-Defender/30980

Fake Job Ads Lead to Stolen Crypto Currency

https://www.ic3.gov/Media/Y2024/PSA240604

Zyxel NAS Vulnerabilities

https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/

A Wireshark Lua Dissector for Fixed Field Length Protocols

https://isc.sans.edu/diary/A%20Wireshark%20Lua%20Dissector%20for%20Fixed%20Field%20Length%20Protocols/30976

COX Cable Modem Admin API Weakness

https://samcurry.net/hacking-millions-of-modems

Malicous Stack Overflow Answers

https://www.bleepingcomputer.com/news/security/cybercriminals-pose-as-helpful-stack-overflow-users-to-push-malware/

Atlasian Confluence Data Center and SErver Remote Code Execution Vuln CVE-2024-21683

https://blog.sonicwall.com/en-us/2024/05/confluence-data-center-and-server-remote-code-execution-vulnerability/

K1w1 Infostealer Uses gofile.io for Exfiltration

https://isc.sans.edu/diary/%22K1w1%22%20InfoStealer%20Uses%20gofile.io%20for%20Exfiltration/30972

Kaspersky Linux Malware Scanner

https://www.kaspersky.com/blog/kvrt-for-linux/51375/

Snowflake Incident

https://www.helpnetsecurity.com/2024/06/01/snowflake-breach-data-theft/

HuggingFace Space Secrets Leak

https://huggingface.co/blog/space-secrets-disclosure