Prop 24 passes in California, will change data privacy law
First-day returns in California showed voters firmly approving to change their state’s current data privacy law—which already guarantees certain privacy...
Year: 2020
Google Chrome Receives Second Patch for Serious Zero-Day Bug in Two Weeks
Google has recently introduced a fix for another zero-day bug in its Chrome browser and has also released a new...
The Russian Duma has introduced a bill to strengthen control over foreign e-wallets
The document obliges citizens to report to the Federal Tax Service on the movement of funds in their foreign electronic...
Latest in CyberSecurity today : Maze Ransomware call it quits
The operators of the infamous Maze Ransomware has said a bitter (for some a very sweet) goodbye. Maze Ransomware incepted...
Attacks on industrial enterprises using RMS and TeamViewer: new data
Download full report (PDF) Executive Summary In summer 2019, Kaspersky ICS CERT identified a new wave of phishing emails containing...
Kraken – Cross-platform Yara Scanner Written In Go
Kraken is a simple cross-platform Yara scanner that can be built for Windows, Mac, FreeBSD and Linux. It is primarily...
SwiftyInsta – Instagram Unofficial Private API Swift
Instagram offers two kinds of APIs to developers. The Instagram API Platform (extremely limited in functionality and close to being...
AST-2020-002: Outbound INVITE loop on challenge with different nonce.
Posted by Asterisk Security Team on Nov 05 Asterisk Project Security Advisory â AST-2020-002 Product Asterisk Summary Outbound INVITE loop...
AST-2020-001: Remote crash in res_pjsip_session
Posted by Asterisk Security Team on Nov 05 Asterisk Project Security Advisory - AST-2020-001 Product Asterisk Summary Remote crash in...
Git LFS (git-lfs) – Remote Code Execution (RCE) exploit CVE-2020-27955 – Clone to Pwn
Posted by Dawid Golunski on Nov 05/* Go PoC exploit for git-lfs - Remote Code Execution (RCE) vulnerability CVE-2020-27955 git-lfs-RCE-exploit-CVE-2020-27955.go...
tCell by Rapid7 Now Available for the European Region
Today, we are excited to announce tCell by Rapid7, our next-gen WAF and RASP solution, is now available in the...
James – 1,541,284 breached accounts
In June 2020, 14 previously undisclosed data breaches appeared for sale including the Brazilian delivery service, "James". The breach occurred...
Wongnai – 3,924,454 breached accounts
In October 2020, 17 previously undisclosed data breaches appeared for sale including the Thai restaurant, hotel and attraction finding service,...
QBot Trojan delivered via malspam campaign exploiting US election uncertainties
This blog post was authored by Jérôme Segura and Hossein Jazi. The 2020 US elections have been the subject of...
The transition of critical IT infrastructure to Russian domestic software and equipment is postponed
The necessary Russian developments are still in short supply. Owners of critical information infrastructure still find the transition difficult to...
Ahead of U.S. Presidential Elections, Experts Express Cybersecurity Concerns
From the start of this year, according to government agencies, the 2020 U.S. presidential election was said to be one...
Brutto – Easy Brute Forcing To Whatever You Want
Easy brute forcing to whatever you want, Its magic increasing values and direct.ImplementationClone git clone https://github.com/jofpin/brutto.git Download the latest version...
Feroxbuster – A Fast, Simple, Recursive Content Discovery Tool Written In Rust
What the heck is a ferox anyway?Ferox is short for Ferric Oxide. Ferric Oxide, simply put, is rust. The name...
NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler
Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet...
SEC Consult SA-20201104-0 :: Multiple vulnerabilities in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)
Posted by SEC Consult Vulnerability Lab on Nov 04SEC Consult Vulnerability Lab Security Advisory < 20201104-0 > ======================================================================= title: Multiple...
Update your Chrome again as Google patches second zero-day in two weeks
Before you start to Google for election news, we’d like you to check whether your browser is at the latest...
Maze ransomware gang announces retirement
The threat actors behind Maze ransomware have announced their retirement. On November 1, they posted the retirement announcement on the...
Hospital ransomware: Gangs are back to target healthcare
Healthcare is not in a good place right now. With some countries and states deciding to go back in to...
Google Drive Notifications Used to Send Malicious Links to Hundreds of Thousands of Users
Cybercriminals have now resorted to utilizing a legitimate Google Drive collaboration feature to trick users into clicking on pernicious...
