Top News

• Hackers use Github bot to steal $1,200 in ETH within 100 seconds

"Hackers are remotely stealing cryptocurrencies using bots on Github."

Link

TLP¹ : Green

• Mitron app removed from Google Play store for violating policy

"Mitron app -- the popular Indian alternative for TikTok -- has been removed from Google Play store. We recommend you to beware of all the clones of Mitron available on Google Play store."

Link

TLP¹ : Green

• Inside hackers' pivot to medical espionage

"A wave of cyber-spying around COVID-19 medical research is once more demonstrating the perils of treating cybersecurity as a separate, walled-off realm."

Link

TLP¹ : Green

Cybersecurity State: Surveillance, Cyberwarfare, Cybercriminality and Hacktivism

• Aarogya Setu open source code: Experts, IT Ministry spar over suggestions on changes & process

"The government had on May 27 released the source code of its contact tracing app Aarogya Setu and announced cash prizes for those who find a bug or vulnerability in it."

Link

TLP¹ : Green

• Can Cloud Access Security Broker Solve Growing Threat of Security Breaches in 2020?

"Digital security breaches have become a growing concern in recent years. Between 2005 and 2020, over 10 billion data breacheshave occurred in the United States alone."

Link

TLP¹ : Green

• Spike in attempts to hijack computers for cryptocurrency mining: Cyber-security firm

"SINGAPORE - Digital hijackers are taking over computers to mine for cryptocurrency, with cyber-security firm Kaspersky saying that Singapore has had a spike in cryptojacking attempts in the first three months of 2020."

Link

TLP¹ : Green

Breaches: Data Breaches and Hacks

• Amtrak Breach Rolls Over Frequent Travelers

"The breach exposed usernames and passwords of an undisclosed number of program members."

Link

TLP¹ : Green

• Ransomware gang says it breached one of NASA's IT contractors

"DopplePaymer ransomware gang claims to have breached DMI, a major US IT and cybersecurity provider, and one of NASA IT contractors."

Link

TLP¹ : Green

Vulnerabilities: Vulnerability Advisories, Zero-Days,Patches and Exploits

• Class Action against Google for Tracking Private Browsing

"Google is the subject of a class action, and the accusations are regarding the invasion of the privacy of millions of users."

Link

TLP¹ : Green

• Two Critical Android Bugs Open Door to RCE

"Google and Qualcomm both addressed significant vulnerabilities in their June updates."

Link

TLP¹ : Green

Incident Response: Infrastructure, Training, SIEM and Incident Handling

• Machine Learning Security Evasion Competition 2020 Invites Researchers to Defend and Attack

"Machine learning (ML) is an increasingly valuable tool in cyber security as adversaries continually evolve their tactics and techniques to evade detection. "

Link

TLP¹ : Green

Technical Articles: Forensics, Reverse Engineering, Malware, Phishing, Pentesting, Software Security and Cryptography

• GhostShell - Malware Indetectable, With AV Bypass Techniques, Anti-Disassembly, And More

"In this malware, are used some techniques to try bypass the AVs, VMs, and Sandboxes, with only porpuse to learning more. I'm not responsible for your actions."

Link

TLP¹ : Green

• Inshackle - Instagram Hacks: Track Unfollowers, Increase Your Followers, Download Stories, Etc

"Instagram hacks: Track unfollowers, Increase your followers, Download Stories, etc"

Link

TLP¹ : Green

¹Traffic Light Protocol (TLP) [1] for information sharing:

• Red:Not for disclosure, restricted to participants only.
• Amber: Limited disclosure, restricted to participants organizations.
• Green: Limited disclosure, restricted to the community.

[1]https://www.first.org/tlp