ISC StormCast for Thursday, April 25th, 2024

API Rug Pull - The NIST NVD Database and API

https://isc.sans.edu/diary/API%20Rug%20Pull%20-%20The%20NIST%20NVD%20Database%20and%20API%20%28Part%204%20of%203%29/30868

Cisco Patches Vulnerabilities and Discovers Arcane Backdoor

https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/

Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers

https://citizenlab.ca/2024/04/vulnerabilities-across-keyboard-apps-reveal-keystrokes-to-network-eavesdroppers/

MySQL2: Dangers of User-Defined Database Connections

https://blog.slonser.info/posts/mysql2-attacker-configuration/

Netgear Nighthawk Vulnerabilities

https://jvn.jp/en/vu/JVNVU91883072/

api apps april arcanedoor backdoor business cisco cisco patches computer connections cyber cybersecurity daily database defined hacking infosec internet isc keyboard keystrokes netgear network network eavesdroppers nighthawk nist node nvd patches reveal rug pull security vulnerabilities