News for November 24, 2024

News for November 24, 2024

By I_g_o_r | Some news | 23 Nov 2024


Microsoft 365 Admin portal abused to send sextortion emails

https://www.bleepingcomputer.com/news/security/microsoft-365-admin-portal-abused-to-send-sextortion-emails/

 

Mozilla 0Din Warns of ChatGPT Sandbox Flaws Enabling Python Execution

https://hackread.com/mozilla-0din-chatgpt-sandbox-flaws-python-execution/

 

Space tech giant Maxar confirms hacker accessed employees’ personal data

https://techcrunch.com/2024/11/18/satellite-giant-maxar-confirms-hacker-accessed-employees-personal-data/

 

Hundreds Of New UFO Sightings Reported To Pentagon

https://www.zerohedge.com/technology/hundreds-new-ufo-sightings-reported-pentagon

 

Critical Windows Kerberos Flaw Exposes Millions of Servers to Attack

https://hackread.com/windows-kerberos-flaw-millions-of-servers-attack/

 

The Anatomy of a Bubble

https://dailyreckoning.com/the-anatomy-of-a-bubble/

 

Phishing emails increasingly use SVG attachments to evade detection

https://www.bleepingcomputer.com/news/security/phishing-emails-increasingly-use-svg-attachments-to-evade-detection/

 

GERMANY’S 2021 SPACE COMMAND: SOME MORE THOUGHTS

https://gizadeathstar.com/2024/11/germanys-2021-space-command-some-more-thoughts/

 

Facebook Malvertising Campaign Spreads Malware via Fake Bitwarden

https://hackread.com/facebook-malvertising-malware-via-fake-bitwarden/

 

This New Energy Storage Idea Makes A Lot Of Sense

https://www.youtube.com/watch?v=x01Rfj12Xi0

 

Threat Actor Turns Thousands of IoT Devices Into Residential Proxies

https://www.securityweek.com/threat-actor-turns-thousands-of-iot-devices-into-residential-proxies/

 

Akira Ransomware Racks Up 30+ Victims in a Single Day

https://www.darkreading.com/cyberattacks-data-breaches/akira-ransomware-30-victims-single-day

 

Apache Kafka Vulnerability Let Attackers Escalate Privileges

https://gbhackers.com/apache-kafka-vulnerability/

 

Two more arrested in kidnapping, killing of Quebec cryptocurrency influencer

https://www.cp24.com/news/canada/2024/11/19/two-more-arrested-in-kidnapping-killing-of-quebec-cryptocurrency-influencer/

 

US space tech giant Maxar discloses employee data breach

https://www.bleepingcomputer.com/news/security/us-space-tech-giant-maxar-discloses-employee-data-breach/

 

Your ATM Card May Be Compromised

https://www.youtube.com/watch?v=qZ3v9lRXeU0

 

Citrix Virtual Apps & Desktops Zero-Day Vulnerability Exploited in the Wild

https://gbhackers.com/citrix-virtual-apps-desktops-vulnerability/

 

Hackers Redirect $250,000 Payment in iLearningEngines Cyberattack

https://www.securityweek.com/hackers-redirect-250000-payment-in-ilearningengines-cyberattack/

 

Great Plains Regional Medical Center ransomware attack impacted 133,000 individuals

https://securityaffairs.com/171156/data-breach/great-plains-regional-medical-center-data-breach.html

 

Spotify abused to promote pirated software and game cheats

https://www.bleepingcomputer.com/news/security/spotify-abused-to-promote-pirated-software-and-game-cheats/

 

New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems

https://thehackernews.com/2024/11/new-helldown-ransomware-expands-attacks.html

 

U.S. Library of Congress Hacked

https://www.nbcnews.com/tech/security/library-congress-says-hackers-accessed-emails-lawmakers-offices-rcna180662

 

AI is everywhere, and Boomers don’t trust it

https://www.malwarebytes.com/blog/news/2024/11/ai-is-everywhere-and-boomers-dont-trust-it

 

Sonatype Nexus Repository Manager Hit by RCE & XSS Vulnerability

https://gbhackers.com/sonatype-nexus-repository-xss-vulnerability/

 

Security of Canadian water treatment plants called into question as cyberattack threats mount

https://www.theglobeandmail.com/canada/article-duffin-creek-water-ransomware-hack/

 

Critical WordPress Plug-in Flaw Exposes 4M Sites to Takeover

https://www.darkreading.com/cloud-security/critical-wordpress-plugin-flaw-4m-sites-takeover

 

Cybersecurity Aphorisms: A Humorous and Insightful Look at the Industry’s Truths

https://www.securityweek.com/cybersecurity-aphorisms-a-humorous-and-insightful-look-at-industrys-truths/

 

Recently disclosed VMware vCenter Server bugs are actively exploited in attacks

https://securityaffairs.com/171147/security/vmware-vcenter-server-bugs-actively-exploited.html

 

Scientists Discovered An Ancient Structure Carved Into A Mountain With No Records Of Existence

https://www.youtube.com/watch?v=AqW09_bCINQ

 

Chinese hackers exploit Fortinet VPN zero-day to steal credentials

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/

 

Science is in trouble

https://www.youtube.com/watch?v=QtxjatbVb7M

 

Crypto lender Polter Finance halts operations after $12M hack

https://cointelegraph.com/news/polter-finance-12m-hack-response

 

Crook breaks into AI biz, points $250K wire payment at their own account

https://www.theregister.com/2024/11/19/ilearningengines_bec_scam/

 

Apple says Mac users targeted in zero-day cyberattacks

https://techcrunch.com/2024/11/19/apple-says-mac-users-targeted-in-zero-day-cyberattacks/

 

Coinbase to delist wBTC as Justin Sun gains influence over protocol, launches its own wrapped bitcoin token

https://www.theblock.co/post/327290/coinbase-to-delist-wbtc-as-justin-sun-gains-influence-over-protocol-launches-its-own-wrapped-bitcoin-token

 

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

https://thehackernews.com/2024/11/hackers-hijack-unsecured-jupyter.html

 

Fortinet VPN design flaw hides successful brute-force attacks

https://www.bleepingcomputer.com/news/security/fortinet-vpn-design-flaw-hides-successful-brute-force-attacks/

 

The US Patent and Trademark Office Banned Staff From Using Generative AI

https://www.wired.com/story/us-patent-trademark-office-internally-banned-generative-ai/

 

US and UK Military Social Network “Forces Penpals” Exposes SSN, PII Data

https://hackread.com/us-uk-military-forces-penpals-exposes-ssn-pii-data/

 

QNAP pulls buggy QTS firmware causing widespread NAS issues

https://www.bleepingcomputer.com/news/technology/qnap-pulls-buggy-qts-firmware-causing-widespread-nas-issues/

 

China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane

https://securityaffairs.com/171299/apt/china-linked-apt-gelsemium-linux-backdoor.html

 

Yakuza Victim Data Leaked in Japanese Agency Attack

https://www.darkreading.com/cyberattacks-data-breaches/yakuza-victim-data-leaked-japanese-attack

 

Two Kings, One Man

https://dailyreckoning.com/two-kings-one-man/

 

Cyberattack at French hospital exposes health data of 750,000 patients

https://www.bleepingcomputer.com/news/security/cyberattack-at-french-hospital-exposes-health-data-of-750-000-patients/

 

D-Link tells users to trash old VPN routers over bug too dangerous to identify

https://www.theregister.com/2024/11/20/dlink_rip_replace_router/

 

Bitcoin: The Biggest Bubble of Them All

https://www.youtube.com/watch?v=lnm2xac-iUU

 

Ford Investigating Potential Breach After Hackers Claim Data Theft

https://www.securityweek.com/ford-investigating-potential-breach-after-hackers-claim-data-theft/

 

Fintech giant Finastra investigates data breach after SFTP hack

https://www.bleepingcomputer.com/news/security/fintech-giant-finastra-investigates-data-breach-after-sftp-hack/

 

API error knocks PayPal, Venmo offline around the globe

https://www.theregister.com/2024/11/21/api_error_knocks_paypal_venmo/

 

Timing the market is for suckers

https://financialpost.com/wealth/smart-money/timing-market-suckers-wealth-killer-average-investor

 

Slot Machine Operator International Game Reports Hacker Incident

https://www.bloomberg.com/news/articles/2024-11-19/slot-machine-operator-international-game-reports-hacker-incident

 

LET ME THINK ABOUT IT | UCLA DANCE TEAM

https://www.youtube.com/watch?v=_IIK6uuiokU

 

'Water Barghest' Sells Hijacked IoT Devices for Proxy Botnet Misuse

https://www.darkreading.com/cloud-security/water-barghest-sells-hijacked-iot-devices-proxy-botnet-misuse

 

Bert Dohmen’s Chilling Warning: “They Put a Bounty on Our Heads!”

https://www.youtube.com/watch?v=xrU7nJ8gQLw

 

Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments

https://thehackernews.com/2024/11/ghost-tap-hackers-exploiting-nfcgate-to.html

 

Researchers Detailed FrostyGoop Malware Attacking ICS Devices

https://gbhackers.com/frostygoop-malware-ics/

 

Shuffle Dance ♫ Jump For Joy

https://www.youtube.com/watch?v=Da0Q8h0LBk4

 

US Charges 5 Suspected MGM Hackers from Scattered Spider Gang

https://hackread.com/us-charges-suspected-mgm-hackers-scattered-spider/

 

'Alarming' bugs lay low in Ubuntu Server utility for 10 years

https://www.theregister.com/2024/11/21/qualys_ubuntu_server_vulnerabilities/

 

Apple Confirms Zero-Day Attacks Hitting macOS Systems

https://www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/

 

Webb Falsified Dark Matter Prediction – And No One Cares

https://www.youtube.com/watch?v=AagyRrIm2W0

 

Cyber attack on an administration in Germany

https://www.nordkurier.de/regional/ruegen/hacker-legen-verwaltung-des-amtes-bergen-auf-ruegen-lahm-3087990

 

Cheap Dollars For The U.S. Is Done - China Drops Economic Bombshell In Saudi Arabia

https://www.youtube.com/watch?v=4fkW3pnzgJU

 

Now BlueSky hit with crypto scams as it crosses 20 million users

https://www.bleepingcomputer.com/news/security/now-bluesky-hit-with-crypto-scams-as-it-crosses-20-million-users/

 

South Korea confirms North Korea behind $50M Upbit hack

https://cointelegraph.com/news/upbit-hack-lazarus-south-korea-police

 

Florida's Citizens Insurance NOW DENYING OVER HALF OF ALL CLAIMS!

https://www.youtube.com/watch?v=x8G8zHkcOng

 

Chinese hackers target Linux with new WolfsBane malware

https://www.bleepingcomputer.com/news/security/chinese-gelsemium-hackers-use-new-wolfsbane-linux-malware/

 

Acrobatics

https://www.youtube.com/shorts/ZZSIC_lwR9k

 

Ghost Tap Attack, Hackers Stolen Credit Card Linked To Google Pay Or Apple Pay

https://gbhackers.com/ghost-tap-mobile-fraud/

 

Warning after data of 500,000 Auchan shoppers is targeted in cyber attack

https://www.connexionfrance.com/news/warning-after-data-of-500000-auchan-shoppers-is-targeted-in-cyber-attack/690319

 

Insurance Broker in France affected by cyber attack on a service provider

https://www.usine-digitale.fr/article/direct-assurance-victime-d-une-cyberattaque-les-donnees-de-15-000-clients-derobees.N2222978

 

Will Layoffs Surge Soon?

https://www.youtube.com/watch?v=LVpKMVrpLIs

 

Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online

https://thehackernews.com/2024/11/over-145000-industrial-control-systems.html

 

China Wiretaps Americans in 'Worst Hack in Our Nation's History'

https://yro.slashdot.org/story/24/11/22/2336254/china-wiretaps-americans-in-worst-hack-in-our-nations-history

 

Heat Is Radiating From A Huge Mass Under The Moon

https://www.zerohedge.com/technology/heat-radiating-huge-mass-under-moon-0

 

Grant Williams: The Perversion Of Money Is The Great Existential Risk Investors Now Face

https://www.youtube.com/watch?v=1TLy1IzkqMs

 

Operation Shipwrecked: US Seizes PopeyeTools Marketplace, Charges 3

https://hackread.com/us-seized-popeyetools-marketplace-chrges-3/

 

ADDING THE SEAS TO SPACE: SEIZING THE SHELVES

https://gizadeathstar.com/2024/11/adding-the-seas-to-space-seizing-the-shelves/

 

AES encryption remains the most secure out of the three, but quantum computers still have the ability to crack this in a fraction of the time that classical computers can.

https://it.umd.edu/news/quantum-computing-how-it-changes-encryption-we-know-it#:~:text=AES%20encryption%20remains%20the%20most,time%20that%20classical%20computers%20can.

https://www.pcmag.com/news/chinese-researchers-reportedly-crack-encryption-with-quantum-computer

 

APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

https://thehackernews.com/2024/11/apt-k-47-uses-hajj-themed-lures-to.html

 

Mexico’s President Says Government Is Investigating Reported Ransomware Hack of Legal Affairs Office

https://www.securityweek.com/mexicos-president-says-government-is-investigating-reported-ransomware-hack-of-legal-affairs-office/

 

The Economy is in Shambles, What's Trump Going to do About It?

https://www.youtube.com/watch?v=DsvGxw8eXn8

 

The company that sold cameras with ‘terrible’ security flaw has a new problem

https://www.theverge.com/2024/11/21/24302544/eken-video-doorbell-fcc-fine-fishbot-cutepanda

 

The end of ChromeOS is a new dawn for cheap Android laptops

https://www.zdnet.com/article/the-end-of-chromeos-is-a-new-dawn-for-cheap-android-laptops/

 

Hundreds More Nazca Lines Emerge in Peru’s Desert

https://www.nytimes.com/2024/11/23/science/nazca-lines-peru-ai.html

 

The Pentagon’s battle inside the U.S. for control of a new Cyber Force

https://www.cnbc.com/2024/11/22/pentagon-battle-military-control-new-national-cyber-force.html

 

How to Defend Against Dog Attack

https://www.youtube.com/watch?v=VFlo7fPlAE8

 

Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack

https://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/

 

US Takes Down Stolen Credit Card Marketplace PopeyeTools

https://www.securityweek.com/us-takes-down-stolen-credit-card-marketplace-popeyetools/

 

North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

https://thehackernews.com/2024/11/north-korean-hackers-steal-10m-with-ai.html

 

'We've Passed the Point of No Return' : Clive Thompson

https://www.youtube.com/watch?v=0NyKfoKCOyA

 

Over 2,000 Palo Alto firewalls hacked using recently patched bugs

https://www.bleepingcomputer.com/news/security/over-2-000-palo-alto-firewalls-hacked-using-recently-patched-bugs/

 

Bitcoin vs Gold DEBATE 2024: Peter Schiff vs Robert Breedlove

https://www.youtube.com/watch?v=9xvsCTNBMNI

 

US and Europe Account for 73% of Global Exposed ICS Systems

https://hackread.com/us-europe-account-73-global-exposed-ics-systems/

 

People are Bailing Out

https://www.youtube.com/watch?v=WnDtggFZluU

 

Toshiba’s Proposed Double-Transmon Coupler for Superconducting Quantum Computers Achieves World-Class Two-Qubit Gate Performance

https://www.insidequantumtechnology.com/news-archive/quantum-news-briefs-november-22-toshibas-proposed-double-transmon-coupler-for-superconducting-quantum-computers-achieves-world-class-two-qubit-gate-performance-ibm-pasqal-plan-to-expand/

 

Hackers break into Andrew Tate’s online ‘university,’ steal user data and flood chats with emojis

https://techcrunch.com/2024/11/21/hackers-break-into-andrew-tates-online-university-steal-user-data-and-flood-chats-with-emojis/

 

Understanding a known-plaintext attack

https://cointelegraph.com/explained/known-plaintext-attacks-explained

 

SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

https://www.theregister.com/2024/11/22/safepay_microlise/

 

Researchers identify previously unknown compound in drinking water

https://www.sciencedaily.com/releases/2024/11/241121141048.htm

 

Retailers IN PANIC MODE AS 1000s of STORES CLOSE!

https://www.youtube.com/watch?v=F_1NmLCwSgs

 

Meta takes down more than 2 million accounts in fight against pig butchering

https://www.malwarebytes.com/blog/news/2024/11/meta-takes-down-more-than-2-million-accounts-in-fight-against-pig-butchering

 

Microsoft seized 240 sites used by the ONNX phishing service

https://securityaffairs.com/171287/cyber-crime/microsoft-disrupted-the-onnx-phishing-service.html

 

Malware Bypasses Microsoft Defender and 2FA to Steal $24K in Crypto

https://hackread.com/malware-bypasses-microsoft-defender-2fa-crypto/

 

Cyberattack Disrupts Systems of Gambling Giant IGT

https://www.securityweek.com/cyberattack-disrupts-systems-of-gambling-giant-igt/

 

10 Self-Defense moves You MUST Know | Aikido Martial Art

https://www.youtube.com/watch?v=3xbHFSidMW8

 

Scientists Report Superconducting Qubit Hits 72 GHz, Offering Path to Scalable Quantum Systems

https://thequantuminsider.com/2024/11/19/scientists-report-superconducting-qubit-hits-72-ghz-offering-path-to-scalable-quantum-systems/

 

IBM Quantum delivers on performance challenge made two years ago

https://www.ibm.com/quantum/blog/qdc-2024

 

Microsoft & Atom Computing Offer Commercial Quantum Machine with Largest Number of Entangled Logical Qubits on Record!!!

https://www.insidequantumtechnology.com/news-archive/quantum-news-briefs-november-19-q-ant-launches-first-commercial-photonic-processor-for-energy-efficient-high-performance-computing-real-time-ai-ionq-to-advance-hybrid-quantum-computing-wi/

https://techcrunch.com/2024/11/19/microsoft-and-atom-computing-will-launch-a-commercial-quantum-computer-in-2025/

https://siliconangle.com/2024/11/19/microsoft-partners-atom-computing-launch-commercial-quantum-computer/

 

For the first time ever researchers crack RSA and AES data encryption, using quantum computers!!!

https://www.thebrighterside.news/post/for-the-first-time-ever-researchers-crack-rsa-and-aes-data-encryption/

 

A Closer Look Into The Microsoft-Atom Computing Logical Qubit Study

https://thequantuminsider.com/2024/11/23/a-closer-look-into-the-microsoft-atom-computing-logical-qubit-study/

 

Download this eBook on the state of quantum computing and why it creates an urgent need (P.S. It is a little outdated, but useful for non-experts)

https://go.entrust.com/post-quantum-cryptography-ebook

 

3rd Quarter Break Routine- I Love Rock 'N Roll

https://www.youtube.com/watch?v=xrWxrhSMLJs

 

 

 

 

P.S. For those who want to have a list of annotations, here is the link to the article on how to do it with ChatGPT and Zapier

https://zapier.com/blog/how-to-use-chatgpt-to-summarize-an-article/

 

Some links:

Get highly discounted domains

Get public DPG for mobile devices

Get free XNO

Get an offline public DPG

Get working memory stimulator

Get post-quantum crypto wallet

Get your passwords and private keys to be prepared for the Q day

How do you rate this article?

35


I_g_o_r
I_g_o_r

I am curious about science, technologies and their applications to solving real problems.


Some news
Some news

News on cyber security, data breaches, crypto security, trends, etc. Image of Suzy Hazelwood from pexels.com

Publish0x

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.

Page not displaying correctly?