Technical

[Asyn]

Bugs in billions of WiFi, Bluetooth chips allow password, data theft
https://www.bleepingcomputer.com/news/security/bugs-in-billions-of-wifi-bluetooth-chips-allow-password-data-theft/
https://arxiv.org/pdf/2112.05719.pdf

[bob3160]

Bugs in billions of WiFi, Bluetooth chips allow password, data theft
https://www.bleepingcomputer.com/news/security/bugs-in-billions-of-wifi-bluetooth-chips-allow-password-data-theft/
https://arxiv.org/pdf/2112.05719.pdf

Also covered here, https://youtu.be/AKUHgwwPi3I

[Asyn]

Driver-Based Attacks: Past and Present
https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/

[Asyn]

Espionage Campaign Targets Telecoms Organizations across Middle East and Asia
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/espionage-campaign-telecoms-asia-middle-east

[Asyn]

Catching malware red-handed: Behavioral threat fingerprinting
https://blog.avast.com/behavioral-threat-fingerprinting-avast

[Asyn]

Owowa: the add-on that turns your OWA into a credential stealer and remote access panel
https://securelist.com/owowa-credential-stealer-and-remote-access/105219/

[Asyn]

Magecart Skimmers Are Alive and Well – Constant Vigilance Is Required
https://www.akamai.com/blog/security/magecart-skimmers-are-alive-and-well-constant-vigilance-is-required

[Asyn]

Log4j Vulnerability: Attackers Shift Focus From LDAP to RMI
https://blogs.juniper.net/en-us/threat-research/log4j-vulnerability-attackers-shift-focus-from-ldap-to-rmi

[Asyn]

Large-scale phishing study shows who bites the bait more often
https://www.bleepingcomputer.com/news/security/large-scale-phishing-study-shows-who-bites-the-bait-more-often/
http://arxiv.org/pdf/2112.07498.pdf

[Asyn]

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution
https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html

[Asyn]

DarkWatchman: A new evolution in fileless techniques.
https://www.prevailion.com/darkwatchman-new-fileness-techniques/

[Asyn]

How does your location affect your online privacy?
https://blog.avast.com/location-and-online-privacy-avast

[Asyn]

Phorpiex botnet returns with new tricks making it harder to disrupt
https://www.bleepingcomputer.com/news/security/phorpiex-botnet-returns-with-new-tricks-making-it-harder-to-disrupt/

[Asyn]

Understanding the Impact of Apache Log4j Vulnerability
https://security.googleblog.com/2021/12/understanding-impact-of-apache-log4j.html

[bob3160]

Countering disinformation requires a more coordinated approach.
https://blog.avast.com/countering-disinformation-report-avast