#Lazarus APT group used CVE-2024-38193(0day in wild) gendigital.com/blog/news/inno…

Charming Kitten IOCs update github.com/blackorbird/AP…

MSC file distribution exploiting Amazon services asec.ahnlab.com/ko/82554/

Approach to mainframe penetration testing on z/OS securelist.com/zos-mainframe-…

Jailbreaking a Cisco Switch Appliance using a 0-Day NX-OS CLI Exploit (CVE-2024-20399) sygnia.co/blog/china-thr…

Analysis of puNK-003’s Lilith RAT ported to AutoIt Script medium.com/s2wblog/threat…

Versa Director servers vulnerability exploit in wild CVE-2024-39717 blog.lumen.com/taking-the-cro…

This is a honeypot securelist.com/hz-rat-attacks…

0day vulnerability techniques and tactics used by APT-Q-12 disclosed ti.qianxin.com/blog/articles/…

Analysis of two arbitrary code execution vulnerabilities affecting WPS Office CVE⁠-⁠2024⁠-⁠7262 & CVE-2924-7263 ESET said that APT-C-60 is a South Korea-aligned cyberespionage group. welivesecurity.com/en/eset-resear…

#Oceanlotus Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders huntress.com/blog/advanced-…

The campaigns first delivered an iOS WebKit exploit affecting iOS versions older than 16.6.1 and then later, a Chrome exploit chain against Android users running versions from m121 to m123. #APT29 blog.google/threat-analysi…

#Patchwork collectors3.0 blog.talosintelligence.com/threat-actors-…

Breaking down CVE-2024–38063: remote exploitation of the Windows kernel bi-zone.medium.com/breaking-down-…

WhisperGate Group Cyber ​​arsenal cisa.gov/news-events/cy…

Who’s next?

#Predator Spyware Infrastructure Update recordedfuture.com/research/preda… github.com/blackorbird/AP…

#Lazarus malicious javascript code group-ib.com/blog/apt-lazar…