How to Present Cloud Risk to the Board
Trend Micro Security Researcher, Erin Sindelar, breaks down three popular types of cloud risk assessments to help CISOs and security...
Month: June 2022
Gallia – Extendable Pentesting Framework
Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of gallia is conducting penetration...
Path Traversal flaw in UnRAR utility can allow hacking Zimbra Mail servers
Researchers discovered a new flaw in RARlab’s UnRAR utility, tracked CVE-2022-30333, that can allow to remotely hack Zimbra Webmail servers....
Jwtear – Modular Command-Line Tool To Parse, Create And Manipulate JWT Tokens For Hackers
A modular command-line tool to parse, create and manipulate JSON Web Token(JWT) tokens for security testing purposes. Features Complete modularity....
Mitre shared 2022 CWE Top 25 most dangerous software weaknesses
The MITRE organization published the 2022 CWE Top 25 most dangerous software weaknesses. The MITRE shared the list of the 2022 top...
Black Basta Ransomware Victim: New Peoples Bank
Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Cobalt Stike Beacon Detected – 114[.]118[.]5[.]101:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 82[.]156[.]188[.]211:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 23[.]227[.]204[.]126:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]234[.]72[.]61:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 39[.]98[.]48[.]153:8008
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Brave Search wants to replace Google’s biased search results with yours
Brave Search, Brave Software’s privacy search engine, just turned one. To celebrate, the company says it is moving the search...
Hermit spyware is deployed with the help of a victim’s ISP
Google’s Threat Analysis Group (TAG) has revealed a sophisticated spyware activity involving ISPs (internet service providers) aiding in downloading powerful...
City worker loses USB stick containing data on every resident after day of drinking
A person working in the city of Amagasaki, in Western Japan, has mislaid a USB stick which contained data on...
Cobalt Stike Beacon Detected – 104[.]208[.]114[.]137:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 64[.]225[.]3[.]44:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 147[.]78[.]47[.]242:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 168[.]100[.]11[.]124:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
RansomHouse gang claims to have stolen 450GB of data from chip maker giant AMD
The RansomHouse gang claims to have breached the Chipmaker giant AMD and stole 450 GB of data from the company...
Mozilla Firefox code execution | CVE-2022-2200
NAME Mozilla Firefox code execution Platforms Affected:Mozilla Firefox 101 Mozilla Firefox ESR 91.10 Mozilla Thunderbird 101 Mozilla Thunderbird 91.10Risk Level:8.8Exploitability:UnprovenConsequences:Gain...
Node.js consideration-deploy-bot module execution |
NAME Node.js consideration-deploy-bot module execution Platforms Affected:Node.js consideration-deploy-botRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js consideration-deploy-bot module could allow a remote attacker to...
Node.js fk-react-lottie-player code execution |
NAME Node.js fk-react-lottie-player code execution Platforms Affected:Node.js fk-react-lottie-playerRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js fk-react-lottie-player could allow a remote attacker to execute...
Node.js en-conduit-schema module code execution |
NAME Node.js en-conduit-schema module code execution Platforms Affected:Node.js en-conduit-schemaRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js en-conduit-schema module could allow a remote attacker...
Node.js parse-url module server-side request forgery | CVE-2022-2216
NAME Node.js parse-url module server-side request forgery Platforms Affected:Node.js parse-url 6.0.2 Node.js parse-url 6.0.1 Node.js parse-url 5.0.8 Node.js parse-url 5.0.7...
