Twitch data breach updates: login credentials or card numbers not exposed
An anonymous individual has leaked the source code and data of the popular video streaming platform Twitch via a torrent...
Month: October 2021
Google to auto-enrol users, YouTubers into 2SV
Google’s announced some changes to how it’s helping millions of its users stay safe and secure. The biggest of those...
Operation GhostShell: MalKamak APT targets aerospace and telco firms
Operation GhostShell: Threat actors used ShellClient malware in cyberespionage campaigns aimed at companies in the aerospace and telecommunications sectors. Hackers...
Exclusive: Researchers dumped Gigabytes of data from Agent Tesla C2Cs
Resecurity researchers dumped Gigabytes of data from Agent Tesla C2Cs, one of the most well-known cyberespionage tools suffers a data...
Twitch source code and sensitive data leaked online
An anonymous individual has leaked the source code and data of the popular video streaming platform Twitch via a torrent...
Smersh – A Pentest Oriented Collaborative Tool Used To Track The Progress Of Your Company’S Missions
Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions and generate rapport.Preview front...
What special needs kids need to stay safe online
Online safety is hard enough for most adults. We reuse weak passwords, we click on suspicious links, and we love...
Patch now! Apache fixes zero-day vulnerability in HTTP Server
The Apache HTTP Server 2.4.49 is vulnerable to a flaw that allows attackers to use a path traversal attack to...
CVE-2020-26217
Summary: XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary...
CVE-2021-27034
Summary: A heap-based buffer overflow could occur while parsing PICT or TIFF files in Autodesk 2018, 2017, 2013, 2012, 2011....
CVE-2021-27035
Summary: A maliciously crafted TIFF, PDF, PICT or DWF files in Autodesk 2018, 2017, 2013, 2012, 2011 can be forced...
CVE-2021-27036
Summary: A maliciously crafted PDF, PICT or TIFF file can be used to write beyond the allocated buffer while parsing...
CVE-2021-28130
Summary: Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a...
CVE-2021-28130
Summary: Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a...
Arizona governor announces the launch of Command Center to protect state computer systems
The governor of Arizona, Doug Ducey, has announced the launch of a Cyber Command Center to address the thousands of...
‘Twitch compromised’: What we know so far, and what you need to do
Big, breaking news going around at the moment. If you have a Twitch account, you may wish to perform some...
Republican Party of Texas – 72,596 breached accounts
In September 2021, the Republican Party of Texas was hacked by a group claiming to be "Anonymous" in retaliation for...
Scrummage – The Ultimate OSINT And Threat Hunting Framework
VERSION 3.6Code efficiency enhancements and bug fixes for plugins, and improved logging.Significant UI/UX enhancements.Organisation specific settings and configurations, allowing for...
UK newspaper The Telegraph exposed a 10TB database with subscriber data
The UK media outlet The Telegraph has leaked 10 TB of subscriber data after failing to properly secure one of...
LANtenna attack allows exfiltrating data from Air-Gapped systems via Ethernet cables
Boffins devised a new technique, dubbed LANtenna, to exfiltrate data from systems in air-gapped networks using Ethernet cables as a...
pFuzz – Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time
pFuzz is an advanced red teaming fuzzing tool which we developed for our research. It helps us to bypass web...
Apache patch a zero-day flaw exploited in the wild
Apache has addressed two vulnerabilities, one of which is a path traversal and file disclosure flaw in its HTTP server...
Unnamed Ransomware gang uses a Python script to encrypt VMware ESXi servers
An unnamed ransomware gang used a custom Python script to target VMware ESXi and encrypt all the virtual machines hosted...
Facebook shoots own foot, hits Instagram and WhatsApp too
Mark Zuckerberg was left counting the personal cost of bad PR yesterday (about $6 billion, according to Bloomberg) on a...
