VideoBytes: Twitter gets hacked!
Hello dear readers, and welcome to the latest and greatest from VideoBytes: a brand new, video feature that we announced...
News
RBI’s new guidelines for Debit and Credit Cards, effective today
To combat the ever increasing financial frauds and to make online payments safer, RBI (Reserve Bank of India) has issued...
Powerglot – Encodes Offensive Powershell Scripts Using Polyglots
Powerglot encodes several kind of scripts using polyglots, for example, offensive powershell scripts. It is not needed a loader to...
Pastego – Scrape/Parse Pastebin Using GO And Expression Grammar (PEG)
Scrape/Parse Pastebin using GO and grammar expression (PEG). Installation$ go get -u github.com/notdodo/pastego UsageSearch keywords are case sensitive pastego -s...
Rapid7 Introduces “Active Response” for End-to-End Detection and Response
We know your cybersecurity team is facing unprecedented challenges, including new and complex attacks that exploit your remote workforce and...
Introducing VideoBytes, by Malwarebytes Labs
We have exciting news for avid readers of Malwarebytes Labs: This week, we’re launching a new, monthly video series that...
Indian Copyright Office Asks for Executable File for Website Code?
India copyright office grants a series of rights to the developer of a computer program that protects his original creation...
Roskomnadzor has added the site of the Binance crypto exchange to the list of banned sites in Russia
Roskomnadzor (the Federal Service for Supervision of Communications, Information Technology and Mass Media) has notified one of the largest cryptocurrency...
Cyber Security Solutions for Enterprises Launched by Bharti Airtel
Bharti Airtel Ltd recently dispatched a 'suite of cybersecurity solutions' for large, medium and small businesses as they move on...
Ryuk Ransomware Attacks Union Health Services, Disrupts Hospitals Nationwide
Universal Health Services (UHS) is shut down after a ransomware attack by hackers. Fortune 5oo organization, UHS runs a network...
SAS@Home is back this fall
The world during the pandemic prepares many surprises for us. Most of them are certainly unpleasant: health risks, inability to...
H2Csmuggler – HTTP Request Smuggling Over HTTP/2 Cleartext (H2C)
h2cSmuggler smuggles HTTP traffic past insecure edge-server proxy_pass configurations by establishing HTTP/2 cleartext (h2c) communications with h2c-compatible back-end servers, allowing...
mapCIDR – Small Utility Program To Perform Multiple Operations For A Given subnet/CIDR Ranges
Small utility program to perform multiple operations for a given subnet/CIDR ranges. The tool was developed to ease load distribution...
Exploitability Analysis: Smash the Ref Bug Class
In April 2020, security researcher Gil Dabah published a paper on a set of vulnerabilities he had discovered within the...
Caught in the payment fraud net: when, not if?
Sometimes, I think there are three certainties in life: death, taxes, and some form of payment fraud. Security reporter Danny...
A new Malware that can intercept your OTP and bypass Two Factor Authentication
For most of our accounts be it Bank accounts or social media accounts, we rely on two-factor authentication and OTP...
Why master YARA: from routine to extreme threat hunting cases. Follow-up
On 3rd of September, we were hosting our “Experts Talk. Why master YARA: from routine to extreme threat hunting cases“,...
Lil-Pwny – Auditing Active Directory Passwords Using Multiprocessing In Python
A multiprocessing approach to auditing Active Directory passwords using Python. About Lil PwnyLil Pwny is a Python application to perform...
Polypyus – Learns To Locate Functions In Raw Binaries By Extracting Known Functions From Similar Binaries
Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware...
Microsoft Exchange 2010 End of Support and Overall Patching Study
Today's topic is Exchange 2010, which reaches end of support (EoS) on Oct. 13, 2020, as well as a survey...
2021 Detection and Response Planning, Part 1: Rapid7’s Jeffrey Gardner Breaks Down How CISOs Should Approach Security Planning for the New Year
In this four-part series, we’ll explore key considerations and strategies for 2021 detection and response planning, and ways InsightIDR, Managed...
Lock and Code S1Ep16: Investigating digital vulnerabilities with Samy Kamkar
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the...
Spying Malware Attacks Activists and Civil Societies in Egypt
Spying malware "FinSpy" has come back again in Egypt. This time in new campaigns is attacking activists and protestor organizations....
A Hacker Collective Based in Pakistan, Being Backed by China to Gather Intelligence Against India
In a rather coordinated attempt in order to steal strategic data and critical infrastructure by sending phishing mails a...
