SpillTheRegister bug theory (CVE-2024-7971) [POC in v8 repo]

How EDR really works blog.deeb.ch/posts/how-edr-…

Better patch your Veeam Backup & Replication servers! Full system takeover via CVE-2024-40711, discovered by our very own frycos - no technical details from us this time because this might instantly be abused by ransomware gangs code-white.com/public-vulnera…

U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown thehackernews.com/2024/09/us-sei…

Patch diffing CVE-2024-30078 - Windows Wi-Fi Driver RCE Vulnerability reddit.com/r/ReverseEngin…

Lowe's employees phished via Google ads malwarebytes.com/blog/cybercrim…

despite shenanigans with CVSS scores, we can confirm the latest Veeam vulnerabilities (CVE-2024-40711) allow auth bypass. If you want to determine whether an instance is vulnerable, hit this endpoint. The latest version adds authentication. Speak soon.

Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed go.theregister.com/feed/www.there…

China's 'Earth Lusca' Propagates Multiplatform Backdoor darkreading.com/threat-intelli…

CVE-2024-26581 PoC Exploit Released: Linux Systems at Risk of Root Compromise securityonline.info/cve-2024-26581…

CVE-2024-7591 (CVSS 10): Critical Vulnerability Discovered in Progress LoadMaster securityonline.info/cve-2024-7591-…

North Korean Hackers Launch Job Interview Scam to Deploy BeaverTail and InvisibleFerret Malware securityonline.info/north-korean-h…

CVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access securityonline.info/cve-2024-7012-…

DarkCracks: A New Stealthy Malware Framework Exploiting GLPI and WordPress securityonline.info/darkcracks-a-n…

brutespray: Automatically attempts default creds on found services meterpreter.org/brutespray-aut…

opensquat: opensource Intelligence R&D project to identify cyber squatting threats meterpreter.org/opensquat-open…

RansomHub Claims Planned Parenthood Hack, Steals 93GB of Sensitive Data hackread.com/ransomhub-plan…

Microsoft removes revenge porn from Bing search using new tool bleepingcomputer.com/news/security/…

Even the NSA now has a podcast engadget.com/entertainment/…

Still unsure why bug bounty hunters are putting their rewards public. You work you get paid. I don't remember seeing electricians for example writing about what they earned about an electrical installation they did, or any other professional.