CyberAlerts

A Threat Actor Claims to be Selling National Institute of Public Administration in the Dominican Republic

Description: A Threat Actor Claims to be Selling National Institute of Public Administration in the Dominican Republic

Source: DarkWebInformer

January 8th, 2025 (6 months ago)

Description: We're back after the holiday with a ton of stories. Meta, Pornhub, and FBI's witnesses are all in this episode.

Source: 404 Media

January 8th, 2025 (6 months ago)

Facebook Is Censoring 404 Media Stories About Facebook's Censorship

Description: Instagram, Facebook, and Threads are removing 404 Media stories for “nudity” as the company is paid to put ads with explicit pornography in front of its users.

Source: 404 Media

January 8th, 2025 (6 months ago)

UN aviation agency confirms recruitment database security breach

Description: The United Nations' International Civil Aviation Organization (ICAO) has confirmed that a threat actor has stolen approximately 42,000 records after hacking into its recruitment database. [...]

Source: BleepingComputer

January 8th, 2025 (6 months ago)

Researchers Expose NonEuclid RAT Using UAC Bypass and AMSI Evasion Techniques

Description: Cybersecurity researchers have shed light on a new remote access trojan called NonEuclid that allows bad actors to remotely control compromised Windows systems. "The NonEuclid remote access trojan (RAT), developed in C#, is a highly sophisticated malware offering unauthorised remote access with advanced evasion techniques," Cyfirma said in a technical analysis published last week. "It employs

Source: TheHackerNews

January 8th, 2025 (6 months ago)

Top 5 Malware Threats to Prepare Against in 2025

Description: 2024 had its fair share of high-profile cyber attacks, with companies as big as Dell and TicketMaster falling victim to data breaches and other infrastructure compromises. In 2025, this trend will continue. So, to be prepared for any kind of malware attack, every organization needs to know its cyber enemy in advance. Here are 5 common malware families that you can start preparing to counter

Source: TheHackerNews

January 8th, 2025 (6 months ago)

Hackers Claim Breach of Location Data Giant Gravy Analytics

Description: Hackers claim to have breached Gravy Analytics, a major player in the collection and sale of smartphone location data. The attackers allege they have stolen sensitive data, including customer lists, industry insights, and precise location data tied to individuals’ smartphone movements. The breach is poised to have far-reaching consequences as the hackers threaten to publicly … The post Hackers Claim Breach of Location Data Giant Gravy Analytics appeared first on CyberInsider.

Source: CyberInsider

January 8th, 2025 (6 months ago)

Backdooring Your Backdoors - Another $20 Domain, More Governments

Description: After the excitement of our .MOBI research, we were left twiddling our thumbs. As you may recall, in 2024, we demonstrated the impact of an unregistered domain when we subverted the TLS/SSL CA process for verifying domain ownership to give ourselves the ability to issue valid and trusted TLS/

Source: Watchtower Labs

January 8th, 2025 (6 months ago)

Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks

Description: A Mirai botnet variant has been found exploiting a newly disclosed security flaw impacting Four-Faith industrial routers since early November 2024 with the goal of conducting distributed denial-of-service (DDoS) attacks. The botnet maintains approximately 15,000 daily active IP addresses, with the infections primarily scattered across China, Iran, Russia, Turkey, and the United States.

Source: TheHackerNews

January 8th, 2025 (6 months ago)

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

Description: The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things (IoT) consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission (FCC) said. "Under this program, qualifying consumer smart products that meet robust cybersecurity standards will bear

Source: TheHackerNews

January 8th, 2025 (6 months ago)

Threat and Vulnerability Intelligence Database

Example Searches:

	A Threat Actor Claims to be Selling National Institute of Public Administration in the Dominican Republic Description: A Threat Actor Claims to be Selling National Institute of Public Administration in the Dominican Republic Source: DarkWebInformer January 8th, 2025 (6 months ago)
	Podcast: Meta Goes Mask Off Description: We're back after the holiday with a ton of stories. Meta, Pornhub, and FBI's witnesses are all in this episode. Source: 404 Media January 8th, 2025 (6 months ago)
	Facebook Is Censoring 404 Media Stories About Facebook's Censorship Description: Instagram, Facebook, and Threads are removing 404 Media stories for “nudity” as the company is paid to put ads with explicit pornography in front of its users. Source: 404 Media January 8th, 2025 (6 months ago)
	UN aviation agency confirms recruitment database security breach Description: The United Nations' International Civil Aviation Organization (ICAO) has confirmed that a threat actor has stolen approximately 42,000 records after hacking into its recruitment database. [...] Source: BleepingComputer January 8th, 2025 (6 months ago)
	Researchers Expose NonEuclid RAT Using UAC Bypass and AMSI Evasion Techniques Description: Cybersecurity researchers have shed light on a new remote access trojan called NonEuclid that allows bad actors to remotely control compromised Windows systems. "The NonEuclid remote access trojan (RAT), developed in C#, is a highly sophisticated malware offering unauthorised remote access with advanced evasion techniques," Cyfirma said in a technical analysis published last week. "It employs Source: TheHackerNews January 8th, 2025 (6 months ago)
	Top 5 Malware Threats to Prepare Against in 2025 Description: 2024 had its fair share of high-profile cyber attacks, with companies as big as Dell and TicketMaster falling victim to data breaches and other infrastructure compromises. In 2025, this trend will continue. So, to be prepared for any kind of malware attack, every organization needs to know its cyber enemy in advance. Here are 5 common malware families that you can start preparing to counter Source: TheHackerNews January 8th, 2025 (6 months ago)
	Hackers Claim Breach of Location Data Giant Gravy Analytics Description: Hackers claim to have breached Gravy Analytics, a major player in the collection and sale of smartphone location data. The attackers allege they have stolen sensitive data, including customer lists, industry insights, and precise location data tied to individuals’ smartphone movements. The breach is poised to have far-reaching consequences as the hackers threaten to publicly … The post Hackers Claim Breach of Location Data Giant Gravy Analytics appeared first on CyberInsider. Source: CyberInsider January 8th, 2025 (6 months ago)
	Backdooring Your Backdoors - Another $20 Domain, More Governments Description: After the excitement of our .MOBI research, we were left twiddling our thumbs. As you may recall, in 2024, we demonstrated the impact of an unregistered domain when we subverted the TLS/SSL CA process for verifying domain ownership to give ourselves the ability to issue valid and trusted TLS/ Source: Watchtower Labs January 8th, 2025 (6 months ago)
	Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks Description: A Mirai botnet variant has been found exploiting a newly disclosed security flaw impacting Four-Faith industrial routers since early November 2024 with the goal of conducting distributed denial-of-service (DDoS) attacks. The botnet maintains approximately 15,000 daily active IP addresses, with the infections primarily scattered across China, Iran, Russia, Turkey, and the United States. Source: TheHackerNews January 8th, 2025 (6 months ago)
	FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance Description: The U.S. government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things (IoT) consumer devices. "IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission (FCC) said. "Under this program, qualifying consumer smart products that meet robust cybersecurity standards will bear Source: TheHackerNews January 8th, 2025 (6 months ago)