Weekly Portscan — Nov. 27th, 2024

Welcome to this week’s edition of the Weekly Portscan, where we bring you a curated selection of the most captivating cybersecurity news we’ve encountered. Rather than covering every event in the field, we focus on the stories that grabbed our attention, ignited discussions, and fueled our curiosity. From cutting-edge threat research to unexpected breaches and new industry trends, we’ve compiled a blend of updates that we believe will engage and inspire you, just as they did for us!

Leveling Up Fuzzing: Finding more vulnerabilities with AI

New Ghost Tap attack abuses NFC mobile payments to steal money

US charges five linked to Scattered Spider cybercrime gang

China's Liminal Panda APT Attacks Telcos, Steals Data

US and UK Military Social Network "Forces Penpals" Exposes SSN, PII Data

Fintech giant Finastra investigates data breach after SFTP hack

CISOs can now obtain professional liability insurance

Cyberattack at French hospital exposes health data of 750,000 patients

US seizes PopeyeTools cybercrime marketplace, charges administrators

CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector…

Microsoft disrupts ONNX phishing-as-a-service infrastructure

Meta cracks down on millions of accounts it tied to pig-butchering scams

CISA says BianLian ransomware now focuses only on data theft

Over 2,000 Palo Alto firewalls hacked using recently patched bugs

DOJ Proposes Breaking Up Google: Calls for Sale of Chrome Browser

Cross-Site Scripting: 2024's Most Dangerous Software

China's Cyber Offensives Helped by Private Firms, Academia

Leaky Cybersecurity Holes Put Water Systems at Risk

US and Europe Account for 73% of Global Exposed ICS Systems

Hackers breach US firm over Wi-Fi from Russia in 'Nearest Neighbor Attack'

Yakuza Victim Data Leaked in Japanese Agency Attack

"Hilariously insecure": Andrew Tate's The Real World breached, 800,000 users affected |…

Bangkok busts SMS Blaster sending 1 million scam texts from a van

Salt Typhoon hackers backdoor telcos with new GhostSpider malware

Blue Yonder Ransomware Attack Hits Starbucks, Supermarkets

Malware linked to Salt Typhoon used to hack telcos around the world

Hacker in Snowflake Extortions May Be a U.S. Soldier

Police bust pirate streaming service making €250 million per month

Medical testing company LifeLabs failed to protect customer data, report finds | Malwarebytes