TL Blue

• Intro
• LockBit founder unmasked
• DFAT warns of DPRK IT workers
• New government app set to fight credential misuse
• Microsoft Secure Future Initiative
• CVE-2024-30040 - Windows MSHTML Platform Security Feature Bypass Vulnerability
• Updates from our SOC & DFIR teams

• Intro
• Qantas app debacle - exposes other customer details
• Millions of records leaked in NSW clubs data breach
• Australian losses to scams decline, but we're still losing billions
• Vulnerability of the fortnight
• Fortnightly SOC and DFIR updates

• Introduction
• Global Cybercrime Sting
• MITRE Network Breach via Ivanti Zero-Days
• Vulnerability of the fortnight CVE-2024-3400 Palo Alto PAN-OS
• What is happening in the SOC/DFIR this fortnight
• British Library cyber incident review

• Intro
• New Ivanti Vulnerability
• Threat Actor claims to have stolen data belonging to the Five Eyes intelligence group after breaching a US national security technology contractor.
• Winnti's new UNAPIMON malware
• Possible data breach at Australian immigration consultancy
• Vulnerability of the fortnight: CVE-2024-3094 (aka xz Utils backdoor)
• What is happening in the SOC/DFIR this fortnight

• ACSC Publications
• Australians being notified about data breaches impacting them
• IT contractor sentenced for cybercrime and fraud offences after swindling more than $60k
• Vulnerability of the week - CVE-2023-48788
• What we're seeing in the SOC and DFIR

Resources for charities and not-for-profits:

1. Educational pack for small businesses, including the Essential Eight and Exercise in a Box resources. These tools are valuable for conducting cyber assessments and implementing cyber security measures.
2. Small business cyber security guide
3. Cyber tips for business presentation [PPT 950KB]
4. Have you been hacked?
5. Questions for boards to ask about cyber security
6. Practical cyber security tips for business leaders
7. Securing customer personal data for small to medium businesses
8. Small business cloud security guides

Tune in this first episode to hear news from Brad Morgan and Richard Grainger, who will provide updates about

• ransomware group activities,
• the US government's Cybersecurity and Infrastructure Security Agency (CISA) being impacted by a breach,
• 14m Australian emails and addresses for sale on clear web hacking forum, 
• vulnerability of the fortnight, 
• and what we're seeing in the SOC and DFIR.