SIRAS – Security Incident Response Automated Simulations
Security Incident Response Automated Simulations (SIRAS) are internal/controlled actions that provide a structured opportunity to practice the incident response plan...
Month: November 2020
Fuzzilli – A JavaScript Engine Fuzzer
A (coverage-)guided fuzzer for dynamic language interpreters based on a custom intermediate language ("FuzzIL") which can be mutated and translated...
Routopsy – A Toolkit Built To Attack Often Overlooked Networking Protocols
Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols (DRP)...
Websites requiring security software downloads opened door to supply chain attack
The Seoul skyline in South Korea (Flickr – Laurie Nevayhttps://www.flickr.com/photos/laurienevay/, CC BY-SA 2.0 https://creativecommons.org/licenses/by-sa/2.0, via Wikimedia Commons).A newly reported supply...
With Black Friday-Cyber Monday looming, Grelos skimmer tied to Magecart poses threat
A new Grelos skimmer variant tied to Magecart Group could potentially lure online shoppers to fill out phony payment forms...
Black Friday 2020: How to shop safely online
Black Friday 2020 promises to be somewhat different from years gone by thanks to COVID-19. The annual surge of in-store...
Demystifying two common misconceptions with e-commerce security
Online shopping has seen a dramatic increase in the months following the Covid-19 outbreak as more and more people opt-out...
A quick look into malwares that installs ransomware : Remove them form your system immediately
We recently looked into ways phishing mails are evolving, attackers getting creative by the day. But a new trend...
Managed.com Hosting Provider Hit by REvil Ransomware, $500K Ransom Demand
Managed hosting provider Managed.com has temporarily taken down all its servers and web hosting systems offline including clients' websites in...
Ransomware Attack Takes Down Massive Food-Supply Chain Providing Distribution of Temperature-Sensitive COVID-19 Vaccines
A company whose cold-storage capacities are extremely integral to the U.S. food-supply chain and the Coronavirus vaccine distribution affirmed...
IT threat evolution Q3 2020. Non-mobile statistics
These statistics are based on detection verdicts of Kaspersky products received from users who consented to provide statistical data. Quarterly...
IT threat evolution Q3 2020 Mobile statistics
The statistics presented here draw on detection verdicts returned by Kaspersky products and received from users who consented to providing...
IT threat evolution Q3 2020
Targeted attacks MATA: Lazarus’s multi-platform targeted malware framework The more sophisticated threat actors are continually developing their TTPs (Tactics, Techniques...
Invoke-Antivm – Powershell Tool For VM Evasion
Invoke-AntiVM is a set of modules to perform VM detection and fingerprinting (with exfiltration) via Powershell.CompatibilityRun the script check-compatibility.ps1 to...
Bulwark – An Organizational Asset And Vulnerability Management Tool, With Jira Integration, Designed For Generating Application Security Reports
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Jira IntegrationNotePlease keep in...
KL-001-2020-009 : Barco wePresent Insecure Firmware Image
Posted by KoreLogic Disclosures via Fulldisclosure on Nov 20KL-001-2020-009 : Barco wePresent Insecure Firmware Image Title: Barco wePresent Insecure Firmware...
KL-001-2020-008 : Barco wePresent Global Hardcoded Root SSH Password
Posted by KoreLogic Disclosures via Fulldisclosure on Nov 20KL-001-2020-008 : Barco wePresent Global Hardcoded Root SSH Password Title: Barco wePresent...
KL-001-2020-007 : Barco wePresent Undocumented SSH Interface Accessible Via Web UI
Posted by KoreLogic Disclosures via Fulldisclosure on Nov 20KL-001-2020-007 : Barco wePresent Undocumented SSH Interface Accessible Via Web UI Title:...
KL-001-2020-006 : Barco wePresent Authentication Bypass
Posted by KoreLogic Disclosures via Fulldisclosure on Nov 20KL-001-2020-006 : Barco wePresent Authentication Bypass Title: Barco wePresent Authentication Bypass Advisory...
KL-001-2020-005 : Barco wePresent Admin Credentials Exposed In Plain-text
Posted by KoreLogic Disclosures via Fulldisclosure on Nov 20KL-001-2020-005 : Barco wePresent Admin Credentials Exposed In Plain-text Title: Barco wePresent...
VTiger v7.0 CRM – (To) Persistent Email Vulnerability
Posted by Vulnerability Lab on Nov 20Document Title: =============== VTiger v7.0 CRM - (To) Persistent Email Vulnerability References (Source): ====================https://www.vulnerability-lab.com/get_content.php?id=2227...
IoT forecast: Running antivirus on your smart device?
In 2016, threat actors pulled off a basic but devastating botnet attack that harnessed the power of the Internet of...
The Ministry of Digital Development of the Russian Federation developing monitoring application to combat COVID-19
The Ministry of Digital Development, Communications and Mass Media of the Russian Federation (the Russian Ministry of Digital Development) will...
White House Declares Guidelines to U.S Federal Agencies for AI Applications
The U.S White House has issued guidelines to the U.S federal agencies regarding the AI (Artificial Intelligence) applications produced in...
