Malwarebytes issues fix for Chrome broken by Windows 11 KB5027231

Sophisticated zero-click exploit, and more on the Chinese spy (or weather) balloon.

Zero-click exploit affects iPhones belonging to Kaspersky employees. BlackBasta decryptor. Chinese spy balloon communicated via a US ISP. Amnesty International reports Pegasus use in India. Cyber Toufan claims attacks against Israeli targets. An assessment of Iranian cyberattacks against control systems. GRU cyber campaign incorporates novel malware. NoName057(16) claims New Year’s Day attacks against Finnish targets. Ukraine considers legislation to bring hackivists into its reserve forces.   Read More 

The CyberWire 

INTERPOL Arrests 31 in Global Operation, Identifies 1,900+ Ransomware-Linked IPs

[[{“value”:”An INTERPOL-led collaborative operation targeting phishing, banking malware, and ransomware attacks has led to the identification of 1,300 suspicious IP addresses and URLs.
The law enforcement effort, codenamed Synergia, took place between September and November 2023 in an attempt to blunt the "growth, escalation and professionalization of transnational cybercrime."
Involving 60 law”}]]   Read More 

The Hacker News | #1 Trusted Cybersecurity News Site 

Threat Landscape with Wes Drone

On this week’s episode of The Microsoft Threat Intelligence Podcast, Sherrod DeGrippo is joined by Microsoft Threat Research and Intelligence Leader Wes Drone. Wes has spent five years investigating criminal and national security computer intrusions for the FBI Cyber Division. After the FBI, he helped a Fortune 25 healthcare organization mature its security operations while gaining first-hand experience in risk management. Sherrod and Wes discuss his current role at Microsoft, where he focuses on messaging and web research. They also touch on the evolving landscape of phishing attacks and the impact of ChatGPT on code writing and security.   Read More 

The CyberWire