Updates

MFA push bombing; Interpol operation rescues 400 Filipinos; Fake Wordpress plugins are infostealer malware; ATM FASTCash malware from DPRK; Vulnhuntr LLM powered SAST; SecObserve CICD management; Disposable email domains; VMware, Grafana, WebLogic, Kubernetes vulnerabilities

United Nations report on SEA cybercrime; US wiretaps hacked by China; Adobe/Magento stores hacked by CosmicSting campaigns; Critical vulnerabilities in DrayTek; SAP BusinessObjects vulnerability; Qualcomm WLAN vulnerability; CUPS-browsed scanner

China linked Earth Baxia threat; two new large PH data breaches; Telegram not encrypted; China linked Flax Typhoon threat; criminal comms platform Ghost takedown; Fake CAPTCHA verification spreads malware; Ransomware-Tool-Matrix; Unauthenticated RCE in all Linux; Zero-Click MediaTek vulnerability

Chinese cyber espionage Mustang Panda and Crimson Palace; Two new large Philippines data-breaches; a YubiKey vulnerability; Russian military GRU 29155 threats; Two air-gapped host exfiltration techniques; Two CVSS 10.0 vulnerabilities; Open source adversary simulation software

APT41 targeting Philippine military; Supreme Court data breach claim; PoC exploit Windows IPv6 zero-click RCE; Backdoor in millions of RFIDs; Open-source WAF; Grype for SAST; SonicWall vulnerability; GitHub Enterprise Server auth bypass

5x Critical cybersecurity incidents in Philippines; 1.4Bn Tencent accounts claimed leaked; 2024 Threat Hunting Report; CISA warns of destructive cyberattacks from China; Critical SAP flaw; SolarWinds critical update

$75M ransom paid to ransomware gang; 6M+ Vivamax subscriber records compromised; POGOs have been banned effective immediately; An awesome ISO 27001 toolkit; Secure Boot broken on millions of devices; New VMware ESXi vulnerability actively exploited

Malvertising impacting Philippines Facebook Pages; Justice Department indicts Coins.ph consultants; Five Eyes warnings on China APT40 group; Huione Guarantee named as cybercrime marketplace; Singapore banks to remove OTP in 90 days; 10 billion leaked passwords released

Four new serious Philippines data-breach events; 4,000 arrested in global Interpol led crackdown; Data Security Officer of Manila Bulletin admits hacking; regreSSHion a difficult-to-exploit OpenSSH vulnerability; Polyfill supply chain attack impacts 400K+ sites; Cisco Zero-Day vulnerability...

Maxicare patient data breach; MARINA data breaches; Dutch intelligence on Chinese FortiGate hacks; Phishing-as-a-service delivering MFA bypass; Rapid weaponization of new PHP vulnerability; VMware RCE vulnerability; Cloudsploit a cloud configuration scanner