Sitemap - 2024 - Bob’s Newsletter

Daily Drop (911)

Action Required

Daily Drop (890A): After-Thoughts

QUICKLOOK: Salt Typhoon, Gray-Zone Tactics, and Allegations of U.S. Cyber Espionage

QUICKLOOK: Starlink vs. China's Qianfan Constellation: The Global Battle for Satellite Supremacy

Sentiment Alpha - Practical Bits

QUICKLOOK: IRGC-Linked Cyber Assault on U.S. Elections: Trump Campaign Hacked

QUICKLOOK: SoftBank Surge: China's Covert Infiltration of Global Tech

QUICKLOOK: Salt Typhoon: China's Silent Infiltration of U.S. Internet Providers

QUICKLOOK: The Evolution of Chinese Cyber Warfare: Botnet Crazy

QUICKLOOK: Global IT Disruption from CrowdStrike’s Falcon Update Sparks Concerns of State-Sponsored Cyber Activities

QUICKLOOK: Dismantling Flax Typhoon: Uncovering a Sophisticated Chinese State-Sponsored Botnet

The Little Spy Agency That Can

Troll Humor

QUICKLOOK: PART 2 - The Digital Trojan Horse: APT41 and Cozy Bear

QUICKLOOK: The Digital Trojan Horse: Unraveling the CrowdStrike Incident of 2024

Social Media & Communication Apps

QUICKLOOK: Leveraging Generative AI for Enhanced Penetration Testing

QUICKLOOK: Russian Information Warfare: Beyond the IRA

Daily Drop (799)

APT41’s Reconnaissance Techniques and Toolkit: Nmap and What Else?

QUICKLOOK: Chinese Cyber Espionage: Persistent Threats to Global Telecom Providers

Daily Drop (797)

Daily Drop (793): Night Shift News

QUICKLOOK: GitHub Token Leak Exposes New York Times Source Code

QUICKLOOK: LightSpy Malware: CVE-2018-4233 and CVE-2018-4404 (macOS flavor)

Daily Drop (787) Monday Madness

Daily Drop (786) Weekend Roundup

QUICKLOOK: Russia and China's Combined Threat to US National Security

QUICKLOOK: BlackTech: A Persistent Cyber Espionage Threat in East Asia

QUICKLOOK: MITRE Introduces EMB3D: A Game-Changing Threat Modeling Framework for Embedded Systems

QUICKLOOK: Are TP-Link Routers Chinese Trojan Horses?

Daily Drop (785)Weekend Round Up

Daily Drop (784)

Daily Drop (783)

Daily Drop (782)WRU: CN's "Great Cannon", "Goldoon" exploits routers, CN's rare earth minerals, Russians hack UA infra, HPE devices vulnerably coded, CN campaign hits Cisco, RU hacks emails, CN's EV's

Daily Drop (781)

Daily Drop (780)

Daily Drop (779)

Daily Drop (778): Weekend Round Up

Daily Drop (777)

Daily Drop (776)

Daily Drop (775)

Daily Drop (774): Weekend Wrap Up

Daily Drop (763): This will Be the last release. Thank you Team for the last Three years.

Daily Drop (758): 14 Years Chinese Hacking Campaign, Active Exploitation of Fortinet and Ivanti, OFAC Cracks Down, CVE-2024-21762 PoC For Sale, Supply Chain Attack Targets GitHub Accounts, Minecraft

Daily Drop (757): GoFetch: New Side-Channel Attack, CN: Economic Revival Plan, Nemesis Market Shutdown, CN: Intel and AMD, MuddyWater, Kimsuky: CHM, IR: Aviation, The PR of 'Made in China'

Daily Drop (756): WINELOADER, APT29: Germany, AI Talent Roundup, UNC5174: F5 BIG-IP, The Taiwan Strait, CN Spy Games, RU: UA ISPs, CrowdTangle, DoT, UN vs DPRK

Daily Drop (755): TinyTurla-NG (TTNG) Backdoor, Axis of Tyranny, 800 npm Packages Flagged, FBI vs. the Bots, AndroxGh0st Malware, DoJ: Apple Messaging Monopoly, AcidPour, AirDAO, Evasive Panda

Daily Drop (754)

Daily Drop (753): Alibaba: Server-Class RISC-V Processor, Ukraine Dismantles Cybercrime, Beijing-Backed Cyberspies Target 70+ Organizations, Adversarial Intelligence, Nvidia's NIM, EPA: Cybersecurity

Daily Drop (752): AZORult Malware, ViaSat: AcidRain, Earth Krahang: China APT, Ukrainian 'Hacktivists', Operation PhantomBlu, E-Root Marketplace, Fujitsu Reports Malware, DEEP#GOSU, Fancy Bear

Daily Drop (751): Dark Web: The 764 Network, Taiwan Satellite Network: Non-Starlink, Russia Expands Sanctions, AI Chip Innovator Groq, Raspberry Pi OS 5.2, RisePro Info Stealer, Bing Pop-up Ads

Daily Drop (750): Allegations of a CIA Anti-China Campaign, US Export Controls on China, Russia's Controversial Election, GhostRace, Google Elevates Chrome Sec, Reddit ADs, Pre-Olympic Cyber Attacks

Daily Drop (749): OpenAI's recruitment of quantum physicist, Malicious Ads Distribute Trojanized Notepad++, The Evolution from Chatbots to AI Agents, RedCurl Cybercrime Group, Cerebras' WSE-3 chip

Daily Drop (748): Shanghai Zhenhua Port Machinery, DarkGate Malware, Bitcoin Fog Cryptocurrency Mixer, StriX-3 SAR Sat, FortiClientEMS, LockBit ADMIN, Meduza, Blind Eagle APT, PixPirate, TikTok

Daily Drop (747): South Africa: CIPC, Liping Geng Denied Residency, CISA: Chinese Tech, DOE: China, Iron Ore, China's Copper Smelters, KrustyLoader, IoT-Satellite, MicroSoft 61 Vul. Vcurms, TikTok

Daily Drop (746): France: Poss. Anonymous Sudan, CHAVECLOAK, US IC: Foreign AI, RU: Arrested Won-soon, Open Source Grok, CISA hit, SVR: U.S. Interference, BianLian, Pentagon: UFO , Iran Sanctions

Daily Drop (745): RU: Sanctions, IS RU using Starlink, Palantir: US Army AI, Nvidia AI, Tehran Metro CEO Resigns, Cloudflare: LLM Protection, CN: Censorship, Magnet Goblin, Petrobras: Venezuel Oil

Daily Drop (744): Canadian: Cyber Warfare, UA Cyber: Russian Missile Manufacturers, Midnight Blizzard, OpenAI welcomes back CEO Sam Altman, Chinese-Made Cranes at US Ports, DeepFakes: Middle School

Daily Drop (743): CN: Linked BlackCat (ALPHV) Group, QEMU: Tunneling, Singapore Sting, CN: CNO Tibet, WordPress: Hacked, CN: ASML, Hamilton Canada, Lithuanian intel, Duvel Moortgat Brewery

Daily Drop (742): US: ByteDance to Divest TikTok, NJ: LexisNexis, Spinning YARN campaign, AlphV/BlackCat, DoJ: Linwei Ding, SEMI: EU Semiconductors, CASC far behind SpaceX, Snake Info Stealer

Daily Drop (741): U.S. Sanctions Greek-Based Spyware Consortium, Apple Rolls Out Fixes for Actively Exploited Zero-Day, Google : Combating AI-Generated Clickbait, XRISM Space Telescope, Savvy Seahorse

Daily Drop (740): China’s AI-Enabled Cyber, China-Russia Axis, Exploiting India's UPI for Money Laundering, DPRK Cyber, Claude 3, Ukraine claims it has sunk another Russian warship using high-tech sea

Daily Drop (739): RU: Taurus KEPD-350, DIU: Russian Military Data, Phobos Ransomware, Scaleway: EM-RV1 Alibaba's T-Head C910 SoC, CN: RU Sancions CA, RU SVR: Microsoft, IoT: Regs, RepoJacking

Daily Drop (738): South Korea: IMINT SAT, OSAM-1, Morris II, RU & CN: UKA Talks, Chargoon Software, Kiribati: CN, GURMO, Rabbit's R1, GitHub: RepoJacking, RU: Leaked Talks, Starlink: Direct-to-Cell

Daily Drop (737): DoJ: Alireza Shafie Nasab, Waymo, UnitedHealth Group, OpenAI: licensed AGI tech, Nvidia's Surge, NATO Mobility Through Tech, Bifrost Adopts Domain Deception, Buffett Energy Utilities

Daily Drop (736): CN: Vehicle Imports, Water Scarcity: Chips, GTPDOOR Malware, Ivanti Gateway Vul, Canadian Scientist's Alleged Espionage for CN, Gemini AI Controversy

Daily Drop (735): RU: Sanctions Bypass, CN: Cyber Taiwan Strait, RU: GRU-led botnet, CN Drones: Ag Threat, Ivanti VPN, Maidan-3, UNC1549, ALPHV Blackcat, PH: South China Sea, Cyber Warfare Regulation

Daily Drop (734): Leaked Russian Military, CN: "Work Secrets" Laws, SVR CNO: TTP, Nood RAT, MooBot, CN: Cyber Threats Indo-Pacom, POTUS: Sensitive Data from Foreign Adversaries, CN: Quant Turmoil

Daily Drop (733): Underwater Cable Damage: Red Sea, EW: Philippine Sea, Cozy Bear, Election Disinformation, Critical SQL Injection Vul, Cranes at Port of Oakland, Memory-Safe Programming, CN: CND

Daily Drop (732): Non-English Chatbots: Bioterrorism Concerns, RU PSYOPS: Ethnic Hungarians, SVR CNO: Targets Cloud, Banking Trojans, Space Force, i9 13900K and 14900K, LockBit, Subdomains Hijacked

Daily Drop (731): AT&T Outage: Mysterious High-Altitude Balloon, U-Haul: Data Breach, CN: Blockchain and Metaverse Crime, CN: Surveillance of Citizens Abroad, LockBit Taunts FBI, Nvidia's Big Boom

Daily Drop (730): AT&T Outage, Apple's PQ3 Protocol, Yakuza: Uranium and Weapons-Grade Plutonium, APT attack Impacting US Pharmacies, Avast Selling User Data, SugarLocker, Meta: ASIC Engineers

Daily Drop (729): Albedo Space, LockBit: Wallets, New Wifi Vul, DPRK: CNO, ZPMC Cranes, MSS: Contract Cyber, "Lucifer" Botnet, SSH-Snake, Hacktivist Activity, Konni RAT, Operation Cronos, ASAT Weapons

Daily Drop (728): ERS-2 SAT, Port CyberSec, Operation Texonto, Kazakh Telecom, CN: Censorship Inefficiencies & Gaps, VietCredCare, Mustang Panda, RU: Chips, IR & RU: Drones

Daily Drop (727): ADRAS-J, Mao-Era Militias, LockBit, iSoon Breach, RU: Political Warfare, WordPress Bricks Theme, Google Cache, ASML Export Ban, NVIDIA Eos, Red Sea UUVs, OpenAI: USPTO, META: Spyware

Daily Drop (726): UA UAV VS RU EW, MPS Leak Github, Winter Vivern, Charming Kitten, CN Gray Zone Operations, Anatsa Android Trojan, DPRK CNO, U.S. Chip Manufacturing, CN: EV, CN IO Ops, AMD's Zen 5

Daily Drop (725): RU: Anti-SAT CAP, CN Abandoned Buildings, Academia Exploiting LLMs, Nvidia's H20 Chip, Nuctech X-ray, DOJ Redirects Funds RU to UA, Intel: Seeks $10 Billion, SoftBank: Nvida Rival

Daily Drop (724): RU: Threat Leak, Winter Vivern, RustDoor macOS, EU: Russian Interference, Cloudflare, CN: VPN Usage, Air Canada: Chatbot, GoldPickaxe.iOS, RU: Ubiquiti Routers, Belarus: Propaganda

Daily Drop (723): MV Behshad, AU: Nickel, ABA: Spyware, APT28: Botnet, Renesal, India Semicondutors, CISA, GOOGLE: AI Cyber tool, Starlink: Deorbit 100 SAT's, PWN'd: AWS SNS, Nuke-Detection SAT, Akira

Daily Drop (722): OpenAI: APT's Caught, ASML's: AI Revolution, CN: Using Deepfakes, CN: EV Sales Fake, CVE-2024-21410, Munich Spirit, DPRK: Gambling Sites, CN: Spanish Propaganda

Daily Drop (721): ChatGPT: More Memory, Section 230 CDA, Anti-Abortion Ad Campaign Location Data, Bumblebee Malware, Win 0-days, DSLog Backdoor, PikaBot Malware, CATL Batteries, Rogue Packages, ARM

Daily Drop (720): RU DISINFO: Portal Kombat, 23andMe, Project December: DeathBots, RTX 2000 Ada Gen, WuXi AppTec, Ivanti: DSLog Backdoor, NYC Cabbies, Austria: Gazprom, LeoLab: Debris Tracking

Daily Drop (719): UA: RU & CN Cyber Attacks, RU: Starlink Access, CN: Cyber Victim Claims, Goody-2, Role of Cyber, AI, VR/AR in War, NATO: Dark Storm Team, Rhysida Ransomware, Hive, Semicon India

Daily Drop (718): CN: Ethereum, Psychedelic Drug Start-Ups, 3 Million Hacked Toothbrushes, American VC Role in China's Tech, Warzone RAT, Space Tech Startup, Tech Giants Realigned 34,000 Jobs

Daily Drop (718): Epik: Shadow Services, OpenAI: Chip Fab, G42 Divests in CN, Nvidia: Chip Fab, MoqHao Android Malware, Kyivstar, RustDoor, Cyber Mercenaries

Daily Drop (717): Coyote Trojan, Hive Ransomware Gang, UA CNO RU, Super Bowl LVIII Cybersecurity, Raspberry Robin Worm, APT's Asia-Pacific, FortiOS, Zardoor Backdoor, UA Disables RU Drone Control

Daily Drop (716): SATs: Plasma Dust, 'Troll Stealer' and 'GoBear', CN & RU: Texas Border, HijackLoader, America's Water, ADRAS-J: Debris Inspection, KV-Botnet: Resilient, CVE-2023-4054, GAC

Daily Drop (715): CN: EW, ResumeLooter, CN: Starlink, OpenAI: Bioterrorism, COATHANGER malware, Pall Mall Process, SpaceDrone , Spyware Thrives Minus Bans, Iran Enhances CNO Capabilities

Daily Drop (714): SUNY RF Sues JSR, 5nm: SMIC & Huawei, Rocket Lab, DoS: Visa Restriction, JP FM, UK & FR: Reg Spyware, Penn Courts' : DDoS, Yandex: Sold, PH: CN Cyber, Ivanti VPN: SSRF, VajraSpy Mal.

Daily Drop (713): Deepfake CFO Scam, Dell & VMware, SAT: China Mobile 01 & Xinghe 6G, NSO: Jordan, SSST's Mega Satellite Constellation, JP Foreign Ministry, RISC-V, CN Cyber Threat, Mispadu Trojan

Daily Drop (712): CN APT: U.S. Utilities, AnyDesk, ESA: Competitive Rocket Manufacturing, U.S. & CN: Biotech Race, RU & CN: Joint Disinformation Efforts, OT Ransomware, Ohio Semiconductor's, CN: YMTC

Daily Drop (711): CN: Texas Secession, Tesla Recall, APT28: NTLM v2, MOEA: CNC RU, Geely-02 SATS, IRGC Cyber, France Flight 447, Mastodon, Mozilla Critiques Edge, Meta's In-House AI Chips

Daily Drop (710): US: OSINT vs CN, Anonymous Sudan, CN: Crypto Anti-Laundering, Bao Fan, Joshua Schulte (POS), DirtyMoe/PurpleFox, Operation Synergia, Okta Creds, FritzFrog, Blackbaud, RU: Spies

Daily Drop (709): 2024 U.S. Elections, KV-Botnet, UNC5221: Ivanti, AI: Biological Threat Creation, CN: EV's, CISA: Apple OS PWN's, Jordan: NSO, CIA Focuses on China, DPRK: Brainwashing

Daily Drop (708): RU: Defense Ministry CNO, .RU Domain Outage, UK: Facial Recognition, Schneider Electric, U.S. Anti-Robocall Efforts, Glibc Vul, CN: Spy SAT's, Aminia TELCOM, 'miniSLR', ZLoader

Daily Drop (707): Volt Typhoon, RU: Telegram, Iran and Hells Angels, Myanmar: KK Park Compound, CVE-2023-35636, Ukraine’s POW Agency, Amazon Rekognition AI, UK Biometrics

Daily Drop (706): Takeover of JSR by JIC, WhiteSnake Stealer, EU: GNSS, SBU: IPL Consulting, Killnet 2.0, Tencent: HPC, Quantum & Cloud, Compact Laser Satellite, PoC: Jenkins, CloudSEK, Tesla Pwn2Own

Daily Drop (706): RU & CN Pipeline, UK & US Nukes, AllaKore RA, Nadezhdi, SBU: Cyber, Senator Wyden, Nvidia & AMD, Parkovy Data Center, CVE-2024-20253, TSCM: Guaiguai snacks, Canon's nanoimprint Tech

Daily Drop (705): TW & JP: RU Cyber TTP, Predatory Sparrow, Farm and Food Cybersecurity Act, Musk: xAI, GEODSS, Roskomnadzor, Arab Support of Houthis, SystemBC, FTC: OpenAI, AllaKore, CN: FakeAPP

Daily Drop (704): CN: ASML Sales, Cozy Bear: HPE Emails, NSO: Fed Judge Regects Motion, F-35: Software Delay, Kasseika, Apple AI, CherryLoader Malware, NSPX30, LODEINFO, China Dark Matter Experiment

Daily Drop (703): Water Facility Systems, US Weapons Stockpile, Gcore: DDoS, Warbeast2000 & Kodiak2k, Deepfack Robocall Biden, Atlassian Confluence, GSA: CN CAMs, 01.AI, Nuclear-Powered Datacenter

Daily Drop (702): CN: MSS, ScarCruft Group Targets DPRK, Ransomware, Apple Exploit, Airman conducts NFT fraud, Nvidia Supplier Kinsus, NGA SAT, Brainwashing in Mao's China, CN: Microchip Kits

Daily Drop (701): HarmonyOS, Lt. Gen. Budanov, Nightshade 1.0, FTC Ban: InMarket, SpinLaunch, BreachForums, Payoneer, Win 10 Vuls, VNM: Indig SAT, Godzilla Web Shell, SVR: SolarWinds, Ootbi

Daily Drop (700): CN: VMware Zero-Day, RU: SAT Early Warning, IR: Soraya, RU: LNG Explosion, 'Blackjack': RU .MIL, TikTok: Layoffs, ICBC: Fines, ZX Spectrum, GER: EV Struggles, CN: RU Oil

Daily Drop (699): DoJ: Racial Bias, Midnight Blizzard, Ilya Kahn, Jailbreak: LLMs, CVE-2023-34048, CN: iOS, TA866, NoaBot: Linux Devices, RU: Protests, Ivanti Zero-Day, JP: Moon Lander, CN Cranes

Daily Drop (698): CN: Private Hacker Army, Pirated macOS Apps, Foxconn & HCL, Myanmar: Cybercrime, (EPMM) & MobileIron, MLFlow Vul, Illicit "Stablecoins", Intel, NoName: DDoS Davos, XMRig, VMware

Daily Drop (697): CN Crypto: Underworld, FSB: COLDRIVER, CN: A4 Protests, UAS, IR: Charming Kitten, iOS: iShutdown, Ransomware: Foxsemicon, FITI, PAX PoS, Arab States, TensorFlow , UK: DMA

Daily Drop (696): MegaPixxel, LulzSec France, Ford: Patent, Houthi Rebels, Remcos RAT, LeftoverLocals, Ivanti, Androxgh0st, SonicWall Firewalls, Chrome: JS, Citrix +, Inferno Drainer, GitHub, Warlock

Daily Drop (695): John Deere: Starlink, UK: Cyber Abroad, UNODC: Casinos, MyFlaw, ICO: Scraping for AI, CN: UK VISA Scheme, Juniper RCE, Israeli Ports, British Library Recovers, EX-Fusion, Starship

Daily Drop (694): Baidu & PLA, Scotts Miracle-Gro, Balada Injector Malware, SpaceX: 23 Sats, RU: Western Tech, DDoS, X: Job Cuts, Phemedrone Stealer, JP: Optical-8, Ukraine Arms, AirDrop, CN: NVIDIA

Daily Drop (694): IN & DPRK: Missiles for RU, SpaceX Starship, Bug Bounties, Denmark's Energy Sector, Taiwan: Post-Election, China train AI-general, SoundCloud, Medical Devices: Open Source, US Navy

Daily Drop (693): MicroSoft: OpenAI, Medusa, Jupiter-3 SAT, AI Code-Copying Lawsuit, Semiconductor Industry, Ukrainian Military-Industrial Targets, CVE-2023-29357, Ivanti VPN, Cryptojacking, Yemen

Daily Drop (692): Lulzsec: Yemen, Apache OfBiz: PoC, CIA 'Red Cell': CN, Banco Promerica, AgentTesla, Apache Hadoop & Flink, FCC: Automakers, CISA: SharePoint, SektorCERT, GitHub: Hacker's Playground

Daily Drop (691): JP: Solar Tech, CN: Vul. Laws, US & CN: AI, Riken: Trapped-ion H1 Systems, NoaBot, CN: Undersea Mapping, Gravity-1, STMicroelectronic, UTA0178: Ivanti, ShinyHunters, CLINKSINK

From Beijing's Botnets to Shanghai's Shady Pills: A Tangled Tale of Tech and Trafficking

Daily Drop (690): IR/RU/CN: IO, Graphene chips, ShanghaiChemicals, XRISM SAT, CISA: Vuls, AI CND Success, PikaBot, Suez Canal: Houthi Attacks, Outlogic, SEC ETF, Stealthy Silver, MS SQL, CN: Nvidia

Daily Drop (689): AirDrop Claims, Nutrunner, CN: Digital Silk Road, Rumble, Lobster Eye, Stealthy Silver RAT, LoanDepot, New Space Race, M9 Telecom, QNAP and Kyocera, Water Batteries, MS SQL, Cacti

Daily Drop (688): CN: Gaza, Space Junk, Peregrine lunar lander, Wibu & Apache, CN: Spies, IntelBroker: DOT, xDedic, CN & US: Political Warfare, Rosgvardia, IntelBroker: FAA, DPRK Hackers, NADA DB Leak

Daily Drop (687): CN: ANTI-SAT, RU: EW, Nvidia: RISC-V Complaints, CN: Grey Zone OPs, Mexico: COLEMNA Lunar Mission, Zeppelin Ransomware, Rhysida Attack, AI and Satellite Imagery, 23andMe, CN: IO

Daily Drop (686): Tesla: CN Patch, Huawei, SpectralBlur, Aircraft Collisions, Mobileye, Colorado: Trump, No-Justice Wiper, Sea Turtle, Fred Hutchinson Cancer Center, Taiwan: Elections, SpaceX, PLASSF

Daily Drop (685): CN: Space TTP, Tambov Bread Factory, Sinking Shores, CVE-2023-39336, Remcos Malware, Orange Spain: BGP, BreachForums Admin, Microchip Technology Inc, AirTags Stalking, Bandook RAT

QUICKLOOK: Navigating Quantum Frontiers: The Mozi Satellite and Security Implications

Daily Drop (684): Sandworm: Kyivstar, CN & RU: Quantum SAT link, CN: Espionage Laws, Qualcomm: AI, PyPI Linux, South China Sea, SMTP Smuggling, SpaceX: Direct-to-Cell, Arctic Ambitions, Mandiant: X

Action Required

Daily Drop (683): CN: Data Export, NoName057(16), Saleh al-Arouri, DoJ: XCast, SBU: RU Hacks Cameras, Amazon Crackdown, ASML: End Deliveries to CN, Orbit Chain, Alibaba, Finnish Intel, Softbank

Daily Drop (682): RU: Reserves, Lumma Infostealer, CN: CNC To RU, Orbit Chain, Victoria's Court Services, RU: UK Politics, Ukraine: Fuel The EU, WinSxS: DLL, ChatGPT, Google: incognito

Daily Drop (681): US & South Korea: Export Markets, RWM: Targeted, Houthi Rebels, CVE-2023-48795, Disney's IP: Copyright, Xi Jinping: Warns Taiwan, JinxLoader, Merck: Bids JSR, RU: Lancet Drones

Action Required