Patch Tuesday: Fixes for LNK, SMB, and SharePoint Bugs
This month’s Patch Tuesday had the highest number of entries so far in 2020 — a whopping 129, a continuation...
News
Honda and Enel impacted by cyber attack suspected to be ransomware
Car manufacturer Honda has been hit by a cyber attack, according to a report published by the BBC, and later...
ParetoLogic facing complaint of alleged wrongdoing
A short while ago we reported on the FTC ruling against payment provider RevenueWire. Now, another Canadian company is under...
Russians were warned about the danger of installing banking apps on the phones
In some situations, the use of the program could lead to leakage of personal information. The specialist gave advice on...
Is a cyber pandemic looming over our heads?
The year 2020 is proving to be quite a hassle and the adversities don't seem to be slowing down. COVID-19...
Singapore’s Move to Facilitate Contact Tracing Amidst the Covid-19 Pandemic Rejected by Its Residents
While each country is attempting to stymie the outbreak of the disastrous coronavirus in different ways, Singapore attempted the same...
Looking at Big Threats Using Code Similarity. Part 1
Today, we are announcing the release of KTAE, the Kaspersky Threat Attribution Engine. This code attribution technology, developed initially for...
BabyShark – Basic C2 Server
This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which...
URLCrazy – Generate And Test Domain Typos And Variations To Detect And Perform Typo Squatting, URL Hijacking, Phishing, And Corporate Espionage
URLCrazy is an OSINT tool to generate and test domain typos or variations to detect or perform typo squatting, URL...
Patch Tuesday – June 2020
June 2020's Microsoft Patch Tuesday gives us a whopping 129 CVEs patched (excluding Adobe Flash which addresses CVE-2020-9633 -- a...
Developing Sustainable Vulnerability Management with Katie Moussouris
On this week’s episode of Security Nation, we’re delighted to be joined by Katie Moussouris, CEO and Founder of Luta...
Malware found in popular barcode apps produces ads that instantly vanish
A pair of Android barcode reader apps that were downloaded more than 1 million times were found to contain ad...
Lock and Code S1Ep8: Securely working from home (WFH) with John Donovan and Adam Kujawa
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the...
Banks asked to postpone the transition to Russian software until 2023
According to the conclusion of the National Financial Market Council (Rosfinsovet), the transition of financial institution owners to Russian software...
Information Sharing can Strengthen the Cybersecurity Measures, says US Cyberspace Report
According to the US Cyberspace Solarium Commission report that came in March this year, there is an immediate requirement of...
Impost3r – A Linux Password Thief
Impost3r is a tool that aim to steal many kinds of linux passwords(including ssh,su,sudo) written by C.Attackers can use Impost3r...
Tangalanga – The Zoom Conference Scanner Hacking Tool
Zoom Conference scanner.This scanner will check for a random meeting id and return information if available.UsageThis are all the possible...
Maturing Your Security Posture: Around-the-Clock Threat Detection With Managed Detection & Response (MDR) Services
Recently, we (virtually!) sat down with Jeremiah Dewey, Rapid7’s VP of Managed Services, to chat about how managed detection response...
Spyeye – Script To Generate Win32 .Exe File To Take Screenshots
Script to generate Win32 .exe file to take screenshots every ~10 seconds.Features:Works on WAN: Port Forwarding by Serveo.netFully Undetectable (FUD)...
Words Scraper – Selenium Based Web Scraper To Generate Passwords List
Selenium based web scraper to generate passwords list.Installation# Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases$ tar xzf geckodriver-v{VERSION-HERE}.tar.gz$ sudo mv geckodriver /usr/local/bin...
New Tekya Ad Fraud Found on Google Play
By Ford Qin (Mobile Threats Analyst) In late March, researchers from CheckPoint found the Tekya malware family, which was being...
Conduent’s European Operations Hit by Maze Ransomware, Data Stolen
Conduent, a business process outsourcing organization confirms that their European operations were crippled by a ransomware attack on Friday, in...
JSshell – A JavaScript Reverse Shell For Exploiting XSS Remotely Or Finding Blind XSS, Working With Both Unix And Windows OS
JSshell - a JavaScript reverse shell. This using for exploit XSS remotely, help to find blind XSS, ...This tool works...
Astsu – A Network Scanner Tool
How it worksScan common portsSend a TCP Syn packet to the destination on the defined port, if the port is...
