S2 Ep2: Top 5 Threat Hunting Headlines - 22 Jan 2024

Top 5 Threat Hunting Headlines - 22 January 2024 1. MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries https://thehackernews.com/2024/01/hackers-hijack-popular-java-and-android.html https://blog.oversecured.com/Introducing-MavenGate-a-supply-chain-attack-method-for-Java-and-Android-applications/#maven-philosophy 2. North Korea's ScarCruft Attackers Gear Up to Target Cybersecurity Pros https://www.darkreading.com/threat-intelligence/north-koreasc-arcruft-attackers-target-cybersecurity-pros https://www.sentinelone.com/labs/a-glimpse-into-future-scarcruft-campaigns-attackers-gather-strategic-intelligence-and-target-cybersecurity-professionals/ 3. The Fake Fix: New Chae$ 4.1 Malware Hides in Driver Downloads https://www.hackread.com/fake-fix-chaes-4-1-malware-hides-driver-downloads/?web_view=true 4. Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes https://www.varonis.com/blog/outlook-vulnerability-new-ways-to-leak-ntlm-hashes 5. Bulletproof Hosting: A Critical Cybercriminal Service https://intel471.com/blog/bulletproof-hosting-a-critical-cybercriminal-service?&web_view=true ----- Follow Us! Twitter: https://twitter.com/CyborgSecInc LinkedIn: https://www.linkedin.com/company/cyborg-security/ YouTube: https://www.youtube.com/cyborgsecurity

Om Podcasten

Intel 471's podcast with a twist! Join us for the first fully interactive threat hunting podcast where you can hang out with threat hunters from all over the world! Join a rag-tag bunch of threat hunters as they come out of the woods to explore some of the most burning issues related to cyber security. The Out of the Woods podcast is a casual talk covering the topics of threat hunting, security research, and threat intelligence, and some ranting and raving along the way, all over a cocktail or two! The Out of the Woods cyber security podcast is filmed in front of a live studio audience, and by that we mean YOU! We're inviting folks to join us once a month for a LIVE evening of great technical discussions, where you can ask questions and give your opinion in real time on a variety of discussions about threat hunting, security research, blue teaming, and wherever else the evening takes us!