Who's Yanking Your Supply Chain?

#169 Sunday, January 12, 2025

Links:

• New Sophisticated Attack Weaponizes Windows Defender to Bypass EDR


• US Treasury says Chinese hackers stole documents in 'major incident'


• Letter to Chairman Brown and Ranking Member Scott (PDF)


• Pegasus spyware maker NSO Group is liable for attacks on 1,400 WhatsApp users


• New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites


• 15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials


• PoC Exploit Tool Released for Critical Windows LDAP Zero-click RCE Vulnerability


• New details reveal how hackers hijacked 35 Google Chrome extensions


• Ivanti warns of new Connect Secure flaw used in zero-day attacks


• Volkswagen leak exposed location data for 800,000 electric cars