Nicholas de Jong

Multi-cloud security testing tool; Awesome GPT agents for cybersecurity; DocuSign abused to send authentic looking invoices; Synology urges updates for critical zero-click RCE; 22k addresses taken down in INTERPOL operation; Signed Remote Desktop Protocol files from Russia; Google Researchers ...

MFA push bombing; Interpol operation rescues 400 Filipinos; Fake Wordpress plugins are infostealer malware; ATM FASTCash malware from DPRK; Vulnhuntr LLM powered SAST; SecObserve CICD management; Disposable email domains; VMware, Grafana, WebLogic, Kubernetes vulnerabilities

United Nations report on SEA cybercrime; US wiretaps hacked by China; Adobe/Magento stores hacked by CosmicSting campaigns; Critical vulnerabilities in DrayTek; SAP BusinessObjects vulnerability; Qualcomm WLAN vulnerability; CUPS-browsed scanner

China linked Earth Baxia threat; two new large PH data breaches; Telegram not encrypted; China linked Flax Typhoon threat; criminal comms platform Ghost takedown; Fake CAPTCHA verification spreads malware; Ransomware-Tool-Matrix; Unauthenticated RCE in all Linux; Zero-Click MediaTek vulnerability

Chinese cyber espionage Mustang Panda and Crimson Palace; Two new large Philippines data-breaches; a YubiKey vulnerability; Russian military GRU 29155 threats; Two air-gapped host exfiltration techniques; Two CVSS 10.0 vulnerabilities; Open source adversary simulation software

APT41 targeting Philippine military; Supreme Court data breach claim; PoC exploit Windows IPv6 zero-click RCE; Backdoor in millions of RFIDs; Open-source WAF; Grype for SAST; SonicWall vulnerability; GitHub Enterprise Server auth bypass

$75M ransom paid to ransomware gang; 6M+ Vivamax subscriber records compromised; POGOs have been banned effective immediately; An awesome ISO 27001 toolkit; Secure Boot broken on millions of devices; New VMware ESXi vulnerability actively exploited

Malvertising impacting Philippines Facebook Pages; Justice Department indicts Coins.ph consultants; Five Eyes warnings on China APT40 group; Huione Guarantee named as cybercrime marketplace; Singapore banks to remove OTP in 90 days; 10 billion leaked passwords released

Four new serious Philippines data-breach events; 4,000 arrested in global Interpol led crackdown; Data Security Officer of Manila Bulletin admits hacking; regreSSHion a difficult-to-exploit OpenSSH vulnerability; Polyfill supply chain attack impacts 400K+ sites; Cisco Zero-Day vulnerability...