Updates

Correlated Chinese state-sponsored cyber threats; Possible S&R and Robinsons data breaches; TikTok zero-click account takeover; Snowflake customer data breaches; Thousands Check Point VPNs vulnerable; Linux kernel vulnerability actively exploited; Awesome pentest cheat sheets

Philippines hacktivist Ikaruz Red Team ransomware; ABS-CBN ransomware attack 500 GB; Law enforcement seizes BreachForums; Nmap for LLM/AI models; GitHub SAML auth bypass; Veeam auth bypass; QNAP QTS zero-day; D-Link EXO zero-day

Dropbox breach; Threat blocklists; Government agencies not responsive to DICT cybersecurity; North Korean threat actors exploiting DMARC; DHCP options cause VPN apps to leak traffic; GitLab vulnerability; 45k+ vulnerable tinyproxy servers

Malicious cyber activity spiking in Philippines says US; Palo Alto zero-day and exploits; Telegram zero-day RCE; D-Link NAS device vulnerabilities; Japan and US cyber threat intel sharing; Sisense hack impacts critical infrastructure; AWS security playbooks

Reported Philippine Statistics Authority (PSA) data leak; vulnerable Microsoft Exchange servers; US agency scolds Microsoft on substandard cloud security; Phishing-as-a-service MFA bypass; Supply chain attack on SSH inserts backdoor via XZ library

Philippine law-enforcement frees hundreds of enslaved romance-scam workers; China backed Earth Krahang exploits inter-governmental trust; Acer confirms Philippines employee data leak; Active cyber-attacks on critical water infrastructure; More vulnerabilities from Fortinet, Fortra and Ivanti

Predator spyware detected in Philippines; Russian APT29 targeting cloud environments; Australia signs cybersecurity agreements with Philippines; Maria Ressa deepfake targeting Philippines audiences; Lazarus exploited Windows zero-day that Microsoft knew about

AFP bans TikTok; Stolen facial recognition data; 28k vulnerable MS Exchange servers; LockBit ransomware gang disrupted; ScreenConnect CVSS10 vulnerability

PBBM approves National Cybersecurity Plan 2024; Espionage group observed using USB devices to hack targets in the Philippines; Microsoft is the supply chain threat, New critical Exchange bug exploited as zero-day; more awesome Cybersecurity Engineering tools

Analyzing the DICT reported “China-linked’ cyber attack; Volt Typhoon threat group preparing for destructive cyberattacks; Fortinet SIEM two CVSS level 10 vulnerabilities; Cybersecurity engineering tools