Disrupting the first reported AI orchestrated cyber espionage campaign github.com/blackorbird/...

Independent graphics card of the future

#Deepseek 's chat subdomain is under a UDP amplification-based DDoS attack.

😆

Why

Omg

Malicious actors exploit in virtual office services and hosting infrastructure, using jurisdictions with lax oversight to establish seemingly legitimate shell companies and hosting environments, thereby obscuring their identity and conducting illicit activities. www.team-cymru.com/post/how-vir...

Lazarus group evolves its infection chain with old and new malware securelist.com/lazarus-new-...

Link Trap: GenAI Prompt Injection Attack www.trendmicro.com/en_us/resear...

The evolution of LATAM-based malware in 2024 highlights the adaptability and ingenuity of its developers, who continue to refine their tools to sustain successful eCrime campaigns. www.crowdstrike.com/en-us/blog/l...

Censeye is designed to help researchers identify hosts with characteristics similar to a given target. #threathunting github.com/Censys-Resea...

APT trends report Q3 2024 securelist.com/apt-report-q...

A popular open-source game engine, to execute crafted GDScript, code which triggers malicious commands and delivers malware. The technique remains undetected by almost all antivirus engines in VirusTotal. research.checkpoint.com/2024/gaming-...

I really like the freedom of BlueSky's API and hope it can be maintained. I will use the API to push more IOCs.

Ekoparty 2024: 20 años no es nada www.youtube.com/playlist?lis...

Advanced threat predictions for 2025 securelist.com/ksb-apt-pred...

RomCom/Storm-0978 exploits Firefox and Windows zero days in the wild Firefox 0day CVE-2024-9680 + Windows privilege escalation 0day CVE‑2024‑49039 welivesecurity.com/en/eset-rese...