Emba – An Analyzer For Linux-based Firmware Of Embedded Devices
emba is being developed as a firmware scanner that analyses already-extracted Linux-based firmware images. It should help you to identify...
Month: January 2021
Upcoming Rapid7 Webcast: How Far Does Your VRM Strategy Go?
Web applications have been growing in complexity over the past several years, while also becoming the preferred method for attackers...
Maritime port cybersecurity
Let’s talk about cyber risk in the maritime and port setting to better understand Maritime Port cybersecurity. In order to...
Apple addresses three iOS zero-day flaws exploited in the wild
Apple has addressed three zero-day vulnerabilities in its iOS operating system that have been exploited in the wild. Apple has...
Heap-based buffer overflow in Linux Sudo allows local users to gain root privileges
CVE-2021-3156 Sudo vulnerability has allowed any local user to gain root privileges on Unix-like operating systems without authentication. Sudo is one...
Fidelis, Mimecast, Palo Alto Networks, Qualys also impacted by SolarWinds hack
Security vendors Fidelis, Mimecast, Palo Alto Networks, and Qualys revealed that were also impacted by SolarWinds supply chain attack The...
Threat Report Portugal: Q4 2020
Threat Report Portugal Q4 2020: Data related to Phishing and malware attacks based on the Portuguese Abuse Open Feed 0xSI_f33d. The...
CVE-2020-13379
Summary: The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any...
CVE-2020-27216
Summary: In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the...
CVE-2020-27858
Summary: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is...
CVE-2020-28452
Summary: This affects the package com.softwaremill.akka-http-session:core_2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core_2.11; the package com.softwaremill.akka-http-session:core_2.13 from...
CVE-2021-1133
Summary: Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote...
How To manually check CVE-2021-3156 | Sudo buffer overflow
How to manually test for CVE-2021-3156? Try using the following command. sudoedit -s '\' perl -e 'print "A" x 65536'...
Cyber Criminals trying to hack Russian popular Telegram channels using ads from GeekBrains
 The owners of the Telegram channels noted that scammers under the guise of advertising offers send malicious files." In particular,...
DDoS Campaign Exposed by the Security Firm Radware
 Security firm Radware uncovered the threat actors' campaign named 'distributed denial-of-service' (DDoS). This campaign was launched to target the same...
Machine Learning in Security – How Machine Learning helps security in the real-world?
 Image SourceMachine Learning is a core building block in the field of Data Science and Artificial Intelligence. As we all...
Australian Cyber Security Centre Hit by Cyber Security Attack
 The Australian Cyber Security Centre is on high alert for the vulnerability lately. The Australian corporate regulator has been the...
Cook County’s Court Related Records Exposed
 The WebsitePlanet research group in collaboration with Security Researcher Jeremiah Fowler found a non-password protected database that contained more than...
Empire 3.7 and Starkiller 1.6
Last week we announced a new partnership with Kali for Starkiller and Empire. You can read up more about that...
Batea – AI-based, Context-Driven Network Device Ranking
Batea is a context-driven network device ranking framework based on the anomaly detection family of machine learning algorithms. The goal...
Duf – Disk Usage/Free Utility (Linux, BSD, macOS & Windows)
Disk Usage/Free Utility (Linux, BSD, macOS & Windows) FeaturesUser-friendly, colorful output Adjusts to your terminal's width Sort the results according...
State-Sponsored Threat Actors Target Security Researchers
This blog was co-authored by Caitlin Condon, VRM Security Research Manager, and Bob Rudis, Senior Director and Chief Security Data...
TikTok privacy issue could have allowed stealing users’ private details
A vulnerability in the video-sharing social networking service TikTok could have allowed hackers to steal users’ private personal information. Developers at ByteDance,...
North Korea-linked campaign targets security experts via social media
Google TAG is warning that North Korea-linked hackers targeting security researchers through social media. Google Threat Analysis Group (TAG) is...
