Tycoon 2FA phishing service resurfaces

Russian intelligence services compromised thousands of Signal accounts, the Trivy vulnerability scanner is abused in a supply chain attack, Oracle issues an out-of-band patch for its Fusion Middleware, and the FBI takes down the Aisuru and Kimwolf botnets.

Show notes

• Risky Bulletin: GitHub is starting to have a real malware problem