Top News

• OilRig APT Back in Business With New Backdoor

"An array of cyber attacks on a Middle Eastern telecom company has indicated the return of the OilRig APT"

Link

TLP¹ : Green

• Dutch Hackers Found a Simple Way to Mess With Traffic Lights

"By reverse engineering apps intended for cyclists, security researchers found they could cause delays in at least 10 cities from anywhere in the world"

Link

TLP¹ : Green

• Intelligence agencies made the right call in not banning TikTok

"Fighting cybercrime is a crucial area for national security policy but the challenge will be balancing the risks against the costs of protecting our networks"

Link

TLP¹ : Green

Cybersecurity State: Surveillance, Cyberwarfare, Cybercriminality and Hacktivism

• National Cybersecurity Authority (NCA): What You Need to Know

"In its Vision 2030 development plan, Saudi Arabia included a National Transformation Program whose purpose is to diversify the Kingdom’s income away from the oil industry"

Link

TLP¹ : Green

• Australia to spend $1.2 billion on cyber security for private sector after rise in attacks

"Australia will spend A$1.66 billion ($1.19 billion) over the next 10 years to strengthen the cyber defences of companies and households after a rise in cyber attacks"

Link

TLP¹ : Green

• Redcar and Cleveland Attack Recovery Cost Over £10m

"A cyber-attack on Redcar & Cleveland Borough Council earlier this year has reportedly cost around £10m in recovery costs"

Link

TLP¹ : Green

Breaches: Data Breaches and Hacks

• Researchers found another way to hack Android cellphones via Bluetooth

"Attackers looking to steal sensitive information like contacts, call history, and SMS verification codes from Android devices only need to target Bluetooth protocols"

Link

TLP¹ : Green

Vulnerabilities: Vulnerability Advisories, Zero-Days,Patches and Exploits

• RedHat: RHSA-2020-3344:01 Important: thunderbird security update

"An update for thunderbird is now available for Red Hat Enterprise Linux 7"

Link

TLP¹ : Green

• Microsoft Teams Vulnerable to Patch Workaround, Researchers Report

"Attackers could work around an earlier patch and use Microsoft Teams Updater to download binaries and payloads"

Link

TLP¹ : Green

Incident Response: Infrastructure, Training, SIEM and Incident Handling

• How to Install SIFT Workstation and REMnux on the Same System for Forensics and Malware Analysis

"Having the right tools at your fingertips can save hours and even days when examining digital evidence or analyzing malicious artifacts"

Link

TLP¹ : Green

Technical Articles: Forensics, Reverse Engineering, Malware, Phishing, Pentesting, Software Security and Cryptography

• UEFI_RETool - A Tool For UEFI Firmware Reverse Engineering

"A tool for UEFI firmware reverse engineering"

Link

TLP¹ : Green

¹Traffic Light Protocol (TLP) [1] for information sharing:

• Red:Not for disclosure, restricted to participants only.
• Amber: Limited disclosure, restricted to participants organizations.
• Green: Limited disclosure, restricted to the community.

[1]https://www.first.org/tlp