Sandbox in security: what is it, and how it relates to malware
To better understand modern malware detection methods, it’s a good idea to look at sandboxes. In cybersecurity, the use of...
Year: 2020
Gamer Alert: More than 10 Billion Attacks On Gaming Industry In 2 Years
According to cybersecurity firm Akamai's recent report titled "State of the Internet/Security," the gaming sector has suffered a big hit...
179 Dark Net Vendors Arrested in a Massive International Sting; 500 kg Drugs Seized
Global police agencies have confiscated over $6.5m both in cash and virtual currencies, 64 firearms, and 1,100 pounds of drugs...
Russian-speaking hackers attacked Russian companies and demanded ransom
Group-IB recorded a successful attack by the criminal group OldGremlin on a Russian medical company. The attackers completely encrypted its...
Threat landscape for industrial automation systems. H1 2020 highlights
Overall downward trend for percentages of attacked computers globally Beginning in H2 2019 we have observed a tendency for decreases...
APPLE-SA-2020-09-24-1 macOS Catalina 10.15.6 Supplemental Update, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave
Posted by Apple Product Security via Fulldisclosure on Sep 24APPLE-SA-2020-09-24-1 macOS Catalina 10.15.6 Supplemental Update, Security Update 2020-005 High Sierra,...
PSMDATP – PowerShell Module For Managing Microsoft Defender Advanced Threat Protection
Welcome to the Microsoft Defender Advanced Threat Protection PowerShell module! This module is a collection of easy-to-use cmdlets and functions...
SitRep – Extensible, Configurable Host Triage
SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files....
Phishers spoof reliable cybersecurity training company to garner clicks
“It happens to the best of us.” And, indeed, no adage is better suited to a phishing campaign that recently...
A major Ukrainian IT company has revealed details of the hacker attack
Ukrainian IT company SoftServe has issued an official statement about the recent hacker attack, in which it gave details of...
White House To Update U.S’s Approach To Its Maritime Cybersecurity Strategy In Coming Months
With hopes to upgrade the U.S. government's approach to deal with its maritime cybersecurity strategy in the coming months, the...
Looking for sophisticated malware in IoT devices
One of the motivations for this post is to encourage other researchers who are interested in this topic to join...
Enum4Linux – A Linux Alternative To Enum.Exe For Enumerating Data From Windows And Samba Hosts
A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information...
Dnxfirewall – A Pure Python Next Generation Firewall Built On Top Of Linux Kernel/Netfilter
DNX Firewall is an optimized/high performance collection of applications or services to convert a standard linux system into a zone...
This One Time on a Pen Test: Ain’t No Fence High Enough
Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. This post is part...
Microsoft Suffered A Rare Cyber-Security Lapse When One of Bing’s Backend Servers Were Exposed Online
Microsoft endured a rather rare cyber-security lapse just this month when the company's IT staff incidentally left one of Bing's...
Experts listed most frequent cyber threats in the first half of the year
In the first half of 2020, phishing emails gained popularity among cyber fraudsters. Such conclusions were made by analysts of...
FLUFFI (Fully Localized Utility For Fuzzing Instantaneously) – A Distributed Evolutionary Binary Fuzzer For Pentesters
FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Getting started Usage HOWTOs Technical...
GRAT2 – Command And Control (C2) Project For Learning Purpose
GRAT2 is a Command and Control (C2) tool written in python3 and the client in .NET 4.0. The main idea...
Rapid7 Releases Q2 2020 Quarterly Threat Report
It’s hard to believe it’s already the end of September, and with it comes Rapid7’s Q2 2020 Quarterly Threat Report....
Google’s osconfig agent – local privilege escalation
Posted by Imre Rad on Sep 22Osconfig is a beta service by Google, a poll based "desired state configuration" solution:...
[CVE-2020-25203] Frame Preview “com.framer.viewer.FramerViewActivity” Arbitrary URL Loading
Posted by Julien Ahrens (RCE Security) on Sep 22RCE Security Advisoryhttps://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Framer Preview Vendor URL:...
Visitor Management System in PHP 1.0 – Unauthenticated Stored XSS
Posted by Ava Tester One on Sep 22# Title: Visitor Management System in PHP 1.0 - Unauthenticated Stored XSS #...
Visitor Management System in PHP 1.0 – Authenticated SQL Injection
Posted by Ava Tester One on Sep 22# Title: Visitor Management System in PHP 1.0 - Authenticated SQL Injection #...
