📋 SECURITY BULLETINS 1[−]
27 JulCybersecurity Today Week in Review: CrowdStrike and more.Cybersecurity Weekly Review: CrowdStrike, Malware, and Major IT Outages Join Jim Love and a panel of experts as they delve into the top cybersecurity stories of the week. This episode covers the major CrowdStrike incident, AT&T's February outage affecting millions of calls, a…CYBERSECURITYTODAY.LIBSYN.COM
🔥 INCIDENT REPORTING 1[−]
27 JulFrench Authorities Launch Operation to Remove PlugX Malware from Infected SystemsFrench judicial authorities, in collaboration with Europol, have launched a so-called "disinfection operation" to rid compromised hosts of a known malware called PlugX. The Paris Prosecutor's Office, Parquet de Paris, said the initiative was launched on July 18 and that it's expe…THEHACKERNEWS.COM
🕵️ THREAT INTELLIGENCE 5[−]
27 JulPhishing Campaign Targeting Mobile Users in India Using India Post LuresFortiGuard Labs Threat Research team has identified a fraud campaign targeting India Post users on social media, specifically iPhone users through smishing attacks. The Smishing Triad, a Chinese threat actor, is believed to be behind this campaign.FORTINET.COM
27 JulHow The Whole World Now Knows About Fake North Korean IT WorkersWow. Last week's blog post went viral, hitting major media outlets and receiving over 100K hits in just a few days. Most responses, coming from all over the world, praised our transparency and commitment to doing what's right. However, some people reacted negatively.KNOWBE4.COM
27 JulDon't Ever Expose Modbus to the Internet! Here's Why...🚨 "Don't ever expose Modbus to the internet. Ever. For any reason." 🚨 Security expert Doug White explains why opening port 502 without proper security measures like VPN and multifactor authentication is a critical mistake. Learn the risks and best practices to protect your ICS fr…YOUTUBE.COM
27 JulCreate Your Own BSOD: NotMyFault, (Sat, Jul 27th)With all the Blue Screen Of Death screenshots we saw lately, I got the idea to write about Sysinternals&#;x26;#;39; tool NotMyFault .
ISC.SANS.EDU
27 JulWindows Security best practices for integrating and managing security toolsWe examine the recent CrowdStrike outage and provide a technical overview of the root cause. The post Windows Security best practices for integrating and managing security tools appeared first on Microsoft Security Blog .MICROSOFT.COM
🌐 CYBER THREAT LANDSCAPE 3[−]
27 JulPKfail Secure Boot bypass Lets Attackers Install UEFI MalwareThe issue originates from a test Secure Boot key provided by American Megatrends International (AMI) that was not replaced by OEMs, resulting in devices shipping with untrusted keys.BLEEPINGCOMPUTER.COM
27 JulMalicious PyPI Package Targets macOS to Steal Google Cloud CredentialsCybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a tot…THEHACKERNEWS.COM
27 JulUnveiling the Latest Banking Trojan Threats in Latin AmericaThe malicious Chrome extension campaign in LATAM involves infecting victims through phishing websites and installing rogue extensions to steal sensitive information. The extensions mimic Google Drive, giving them access to a wide range of user data.SECURITYINTELLIGENCE.COM
📡 INFOSEC NEWS 3[−]
27 JulWindows 11 taskbar has a hidden "End Task" feature, how to turn it onMicrosoft has added a feature to Windows 11 that allows you to end tasks directly from the taskbar. [...]BLEEPINGCOMPUTER.COM
27 JulX begins training Grok AI with your posts, here's how to disableX has quietly begun training its Grok AI chat platform using members' public posts without first alerting anyone that it is doing it by default. Here's how to block Grok from using your data. [...]BLEEPINGCOMPUTER.COM
27 JulWhatsApp for Windows lets Python, PHP scripts execute with no warningA security issue in the latest version of WhatsApp for Windows allows sending Python and PHP attachments that are executed without any warning when the recipient opens them. [...]BLEEPINGCOMPUTER.COM