Nicholas de Jong

$75M ransom paid to ransomware gang; 6M+ Vivamax subscriber records compromised; POGOs have been banned effective immediately; An awesome ISO 27001 toolkit; Secure Boot broken on millions of devices; New VMware ESXi vulnerability actively exploited

Malvertising impacting Philippines Facebook Pages; Justice Department indicts Coins.ph consultants; Five Eyes warnings on China APT40 group; Huione Guarantee named as cybercrime marketplace; Singapore banks to remove OTP in 90 days; 10 billion leaked passwords released

Four new serious Philippines data-breach events; 4,000 arrested in global Interpol led crackdown; Data Security Officer of Manila Bulletin admits hacking; regreSSHion a difficult-to-exploit OpenSSH vulnerability; Polyfill supply chain attack impacts 400K+ sites; Cisco Zero-Day vulnerability...

Maxicare patient data breach; MARINA data breaches; Dutch intelligence on Chinese FortiGate hacks; Phishing-as-a-service delivering MFA bypass; Rapid weaponization of new PHP vulnerability; VMware RCE vulnerability; Cloudsploit a cloud configuration scanner

Correlated Chinese state-sponsored cyber threats; Possible S&R and Robinsons data breaches; TikTok zero-click account takeover; Snowflake customer data breaches; Thousands Check Point VPNs vulnerable; Linux kernel vulnerability actively exploited; Awesome pentest cheat sheets

Philippines hacktivist Ikaruz Red Team ransomware; ABS-CBN ransomware attack 500 GB; Law enforcement seizes BreachForums; Nmap for LLM/AI models; GitHub SAML auth bypass; Veeam auth bypass; QNAP QTS zero-day; D-Link EXO zero-day

Dropbox breach; Threat blocklists; Government agencies not responsive to DICT cybersecurity; North Korean threat actors exploiting DMARC; DHCP options cause VPN apps to leak traffic; GitLab vulnerability; 45k+ vulnerable tinyproxy servers

Malicious cyber activity spiking in Philippines says US; Palo Alto zero-day and exploits; Telegram zero-day RCE; D-Link NAS device vulnerabilities; Japan and US cyber threat intel sharing; Sisense hack impacts critical infrastructure; AWS security playbooks

Reported Philippine Statistics Authority (PSA) data leak; vulnerable Microsoft Exchange servers; US agency scolds Microsoft on substandard cloud security; Phishing-as-a-service MFA bypass; Supply chain attack on SSH inserts backdoor via XZ library

Philippine law-enforcement frees hundreds of enslaved romance-scam workers; China backed Earth Krahang exploits inter-governmental trust; Acer confirms Philippines employee data leak; Active cyber-attacks on critical water infrastructure; More vulnerabilities from Fortinet, Fortra and Ivanti