Xavier «X» Santolaria :verified_paw: :donor:<p>📨 Latest issue of my curated <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> and <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> list of resources for week #42/2023 is out! It includes the following and much more:</p><p>➝ 🔓 👀 Tracking Unauthorized Access to <a href="https://infosec.exchange/tags/Okta" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Okta</span></a>'s Support System<br>➝ 🔓 🇯🇵 <a href="https://infosec.exchange/tags/Casio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Casio</span></a> discloses <a href="https://infosec.exchange/tags/databreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>databreach</span></a> impacting customers in 149 countries<br>➝ 🔓 🧬 Hacker leaks millions more <a href="https://infosec.exchange/tags/23andMe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>23andMe</span></a> user records on <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> forum<br>➝ 🔓 🇨🇳 D-Link confirms data breach after employee <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>phishing</span></a> attack<br>➝ 🔓 💰 <a href="https://infosec.exchange/tags/Equifax" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Equifax</span></a> Fined $13.5 Million Over 2017 Data Breach<br>➝ 🇺🇦 🧹 Ukrainian activists hack Trigona <a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ransomware</span></a> gang, wipe servers<br>➝ 🇺🇸 🇰🇵 FBI: Thousands of Remote IT Workers Sent Wages to <a href="https://infosec.exchange/tags/NorthKorea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NorthKorea</span></a> to Help Fund Weapons Program<br>➝ 🇮🇳 ☁️ <a href="https://infosec.exchange/tags/India" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>India</span></a> targets <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Microsoft</span></a>, <a href="https://infosec.exchange/tags/Amazon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Amazon</span></a> tech support <a href="https://infosec.exchange/tags/scammers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>scammers</span></a> in nationwide crackdown<br>➝ 🇵🇸 🇮🇷 <a href="https://infosec.exchange/tags/Hamas" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Hamas</span></a>-linked app offers window into cyber infrastructure, possible links to Iran<br>➝ 👮🏻♂️ 🥷🏻 Police seize <a href="https://infosec.exchange/tags/RagnarLocker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RagnarLocker</span></a> leak site<br>➝ 🇰🇵 North Korean Hackers Exploiting Recent <a href="https://infosec.exchange/tags/TeamCity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TeamCity</span></a> Vulnerability<br>➝ 🇨🇳 🇷🇺 <a href="https://infosec.exchange/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>China</span></a> replaces <a href="https://infosec.exchange/tags/Russia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Russia</span></a> as top <a href="https://infosec.exchange/tags/cyberthreat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberthreat</span></a><br>➝ 🇺🇦 📡 CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks<br>➝ 🇫🇷 🇪🇸 <a href="https://infosec.exchange/tags/France" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>France</span></a> frees the two biggest Spanish hackers<br>➝ 🇺🇸 ⚓️ Ex-Navy IT head gets 5 years for selling people’s data on <a href="https://infosec.exchange/tags/darkweb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>darkweb</span></a><br>➝ 🇨🇭 🗳️ <a href="https://infosec.exchange/tags/Switzerland" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Switzerland</span></a>’s e-voting system has predictable implementation blunder<br>➝ 🔓 🏭 Critical Vulnerabilities Expose <a href="https://infosec.exchange/tags/Weintek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Weintek</span></a> HMIs to Attacks<br>➝ 🔓 🏭 <a href="https://infosec.exchange/tags/Milesight" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Milesight</span></a> Industrial Router <a href="https://infosec.exchange/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerability</span></a> Possibly Exploited in Attacks<br>➝ 🦠 🇻🇳 Fake <a href="https://infosec.exchange/tags/Corsair" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Corsair</span></a> job offers on <a href="https://infosec.exchange/tags/LinkedIn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LinkedIn</span></a> push <a href="https://infosec.exchange/tags/DarkGate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DarkGate</span></a> malware<br>➝ 🦠 Google-hosted <a href="https://infosec.exchange/tags/malvertising" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>malvertising</span></a> leads to fake <a href="https://infosec.exchange/tags/Keepass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Keepass</span></a> site that looks genuine<br>➝ 🦠 💬 <a href="https://infosec.exchange/tags/Discord" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Discord</span></a> still a hotbed of <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>malware</span></a> activity — Now APTs join the fun<br>➝ 🦠 🕵🏻♂️ SpyNote: Beware of This Android <a href="https://infosec.exchange/tags/Trojan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Trojan</span></a> that Records Audio and Phone Calls<br>➝ 🛍️ 🦠 <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Android</span></a> will now scan sideloaded apps for malware at install time<br>➝ 💬 🔐 <a href="https://infosec.exchange/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WhatsApp</span></a> <a href="https://infosec.exchange/tags/passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passkeys</span></a> on the way, but as usual, for Android first<br>➝ 🇷🇺 🗂️ Pro-Russian Hackers Exploiting Recent <a href="https://infosec.exchange/tags/WinRAR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WinRAR</span></a> Vulnerability in New Campaign<br>➝ 🗓️ ❌ Signal Pours Cold Water on Zero-Day Exploit Rumors<br>➝ 🔓 💥 <a href="https://infosec.exchange/tags/Cisco" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cisco</span></a> warns of new <a href="https://infosec.exchange/tags/IOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IOS</span></a> XE <a href="https://infosec.exchange/tags/zeroday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>zeroday</span></a> actively exploited in attacks</p><p>📚 This week's recommended reading is: "RTFM: Red Team Field Manual v2" by Ben Clark and Nicholas Downer</p><p>Subscribe to the <a href="https://infosec.exchange/tags/infosecMASHUP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosecMASHUP</span></a> newsletter to have it piping hot in your inbox every week-end ⬇️</p><p><a href="https://infosec-mashup.santolaria.net/p/infosec-mashup-week-422023" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">infosec-mashup.santolaria.net/</span><span class="invisible">p/infosec-mashup-week-422023</span></a></p>