Malwarebytes research shows an unequal, unsafe Internet
If the Internet was as safe and as private as it is essential for everyday life—increasingly required for job applications,...
Year: 2021
The August cyber attacks targeted a dozen Russian banks
Up to 15 Russian financial organizations were subjected to a large-scale cyberattack in August and September of this year.The first...
Exchange/Outlook Autodiscover Bug Exposed $100K Email Passwords
Guardicore Security Researcher, Amit Serper identified a critical vulnerability in Microsoft's autodiscover- the protocol, which permits for the automatic setup...
SonicWall Patches Critical Flaw in SMA 100 Products
SonicWall has released a security advisory to warn users regarding a critical flaw impacting some of its Secure Mobile Access...
Hackers Discover Technique to Make Malware Undetectable on Windows
Investigators within the cybersecurity industry have revealed a unique approach used by a threat actor to purposefully avoid detection using...
Drinik Malware is Fooling Users to Give in their Mobile Banking Details
There's a new malware, and it's wreaking havoc on Android users. Drinik is a malware that steals vital data and...
JadedWraith – Light-weight UNIX Backdoor
Lightweight UNIX backdoor for ethical hacking. Useful for red team engagements and CTFs. Something I wrote a few years ago...
DongTai – An Interactive Application Security testing(IAST) Product That Supports The Detection Of OWASP WEB TOP 10 Vulnerabilities, Multi-Request Related Vulnerabilities (Including Logic Vulnerabilities, Unauthorized Access Vulnerabilities, Etc.), Third-Party Component Vulnerabilities, Etc.
中文版本(Chinese version) About DongTai IASTDongTai IAST is an open-source passive interactive security testing (IAST) product. It uses dynamic hooks and...
Port of Houston was hit by an alleged state-sponsored attack
Last month, the Port of Houston, one of the major US ports, was hit by a cyber attack allegedly orchestrated...
JSC GREC Makeyev and other Russian entities under attack
A cyberespionage campaign hit multiple Russian organizations, including JSC GREC Makeyev, a major defense contractor, exploiting a recently disclosed zero-day....
Security Affairs newsletter Round 333
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free...
Google TAG spotted actors using new code signing tricks to evade detection
Researchers from Google’s TAG team reported that financially motivated actors are using new code signing tricks to evade detection. Researchers...
GSS, one of the major European call center providers, suffered a ransomware attack
The customer care and call center provider GSS has suffered a ransomware attack that crippled its systems and impacted its...
CVE-2020-3702
Summary: u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2...
CVE-2021-37576
Summary: arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host...
CVE-2021-38160
Summary: ** DISPUTED ** In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by...
CVE-2021-38166
Summary: In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements...
CVE-2021-40490
Summary: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13....
CVE-2021-40490
Summary: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13....
Ajarn – 266,399 breached accounts
In September 2021, the Thai-based English language teaching website Ajarn discovered they'd been the victim of a data breach dating...
Malware Creators Use Malformed Certificates To Trick Windows Validation
Google researchers have identified malware developers generating malformed code signatures that appear to be valid in Windows to bypass security...
African Bank Alerts of Data Breach With Personal Details Compromised
South African retail bank African Bank has confirmed that one of its debt recovery partners, Debt-IN, was targeted by a...
Port of Houston Attacked Employing Zoho Zero-Day Vulnerability
CISA officers on 23rd of September reported about a potential government-backed hacker organization that has tried to break the Port...
3.8 Billion Clubhouse and Facebook User Records are Being Sold Online
According to CyberNews, a database holding the records of about 3.8 billion Clubhouse and Facebook users is being auctioned at...
