Technical

[Asyn]

Babuk ransomware decryptor released to recover files for free
https://www.bleepingcomputer.com/news/security/babuk-ransomware-decryptor-released-to-recover-files-for-free/
https://files.avast.com/files/decryptor/avast_decryptor_babuk.exe

Free decryptor released for Atom Silo and LockFile ransomware
https://www.bleepingcomputer.com/news/security/free-decryptor-released-for-atom-silo-and-lockfile-ransomware/
https://files.avast.com/files/decryptor/avast_decryptor_atomsilo.exe

Avast releases decryptor for AtomSilo and LockFile ransomware
https://decoded.avast.io/threatintel/decryptor-for-atomsilo-and-lockfile-ransomware/

[Asyn]

Russian-speaking cybercrime evolution: What changed from 2016 to 2021
https://securelist.com/russian-speaking-cybercrime-evolution-2016-2021/104656/

[Asyn]

UDP RAT Malware Being Distributed via Webhards
https://asec.ahnlab.com/en/27555/

[Asyn]

FTC: ISPs collect and monetize far more user data than you’d think
https://www.bleepingcomputer.com/news/security/ftc-isps-collect-and-monetize-far-more-user-data-than-you-d-think/
https://www.ftc.gov/news-events/press-releases/2021/10/ftc-staff-report-finds-many-internet-service-providers-collect

[bob3160]

FTC: ISPs collect and monetize far more user data than you’d think
https://www.bleepingcomputer.com/news/security/ftc-isps-collect-and-monetize-far-more-user-data-than-you-d-think/
https://www.ftc.gov/news-events/press-releases/2021/10/ftc-staff-report-finds-many-internet-service-providers-collect

Talk and discussion about a problem is cheap and seems to go on forever.
Action and a solution is always hard to achieve and usually only happens after some catastrophe. 

[Asyn]

New activity from Russian actor Nobelium
https://blogs.microsoft.com/on-the-issues/2021/10/24/new-activity-from-russian-actor-nobelium/

[Asyn]

Hitting the BlackMatter gang where it hurts: In the wallet
https://blog.emsisoft.com/en/39181/on-the-matter-of-blackmatter/

[Asyn]

Threat Advisory: Hackers Are Exploiting a Vulnerability in Popular Billing Software to Deploy Ransomware
https://www.huntress.com/blog/threat-advisory-hackers-are-exploiting-a-vulnerability-in-popular-billing-software-to-deploy-ransomware

[Asyn]

Spammers use Squirrelwaffle malware to drop Cobalt Strike
https://www.bleepingcomputer.com/news/security/spammers-use-squirrelwaffle-malware-to-drop-cobalt-strike/

[Asyn]

Fake npm Roblox API Package Installs Ransomware and has a Spooky Surprise
https://blog.sonatype.com/fake-npm-roblox-api-package-installs-ransomware-spooky-surprise

[Asyn]

North Korean state hackers start targeting the IT supply chain
https://www.bleepingcomputer.com/news/security/north-korean-state-hackers-start-targeting-the-it-supply-chain/

[bob3160]

North Korean state hackers start targeting the IT supply chain
https://www.bleepingcomputer.com/news/security/north-korean-state-hackers-start-targeting-the-it-supply-chain/

Why not, the supply chain is in such perfect shape, something need to disrupt it. (Being sarcastic)

[Asyn]

Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection
https://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection/

[bob3160]

Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection
https://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection/

Which has already been fixed provided your OS is up to date.

[Asyn]

Rooting Malware Makes a Comeback: Lookout Discovers Global Campaign
https://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign