Millions of Arris routers are vulnerable to path traversal attacks
Security researcher Derek Abdine has published an advisory about vulnerabilities that exist in the MIT-licensed muhttpd web server. This web...
Gootkit AaaS malware is still active and uses updated tactics
Gootkit access-as-a-service (AaaS) malware is back with tactics and fileless delivery of Cobalt Strike beacons. Gootkit runs on an access-a-as-a-service model, it...
Austria investigates DSIRF firm for allegedly developing Subzero spyware
Austria is investigating a report that an Austrian firm DSIRF developed spyware targeting law firms, banks and consultancies. At the...
Daily Vulnerability Trends: Tue Aug 02 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-22047Windows CSRSS Elevation of Privilege Vulnerability. This CVE ID is unique from...
Cobalt Stike Beacon Detected – 175[.]27[.]159[.]221:4443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 154[.]86[.]19[.]237:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 114[.]55[.]58[.]137:8045
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 8[.]9[.]15[.]198:9999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 35[.]73[.]221[.]22:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]106[.]174:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 185[.]224[.]169[.]86:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 2[.]58[.]64[.]159:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 178[.]128[.]251[.]160:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 185[.]224[.]169[.]83:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 1[.]116[.]39[.]144:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
ALPHV/BlackCat ransomware gang claims to have stolen data from Creos Luxembourg S.A.
The ALPHV/BlackCat ransomware gang claims to have breached the European gas pipeline Creos Luxembourg S.A. The ALPHV/BlackCat ransomware gang claims...
Australian man charged with creating and selling the Imminent Monitor spyware
An Australian national has been charged for the creation and sale of the Imminent Monitor (IM) spyware, which was also used...
HackerOne Bug Bounty Disclosure: race-condition-on-https://judge-me/peoplebynetboom
Programme HackerOne Judge.me Judge.me Submitted by netboom netboom Report Race condition on https://judge.me/people Full Report A considerable amount of time...
HackerOne Bug Bounty Disclosure: delete-the-subaccount-from-the-user-idbyqualwin38000
Programme HackerOne Showmax Showmax Submitted by qualwin38000 qualwin38000 Report delete the subaccount from the user id Full Report A considerable...
HackerOne Bug Bounty Disclosure: insecure-tls-configuration-#3530bybhaskar_ram
Programme HackerOne Hyperledger Hyperledger Submitted by bhaskar_ram bhaskar_ram Report Insecure TLS Configuration #3530 Full Report A considerable amount of time...
HackerOne Bug Bounty Disclosure: insecure-use-of-shell-openexternal()-in-rocket-chat-desktop-app-leading-to-rcebybaltpeter
Programme HackerOne Rocket.Chat Rocket.Chat Submitted by baltpeter baltpeter Report Insecure use of shell.openExternal() in Rocket.Chat Desktop App leading to RCE...
SilentHound – Quietly Enumerate An Active Directory Domain Via LDAP Parsing Users, Admins, Groups, Etc.
Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc. Created by Nick Swink from Layer 8...
Cobalt Stike Beacon Detected – 119[.]91[.]135[.]82:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 82[.]157[.]153[.]24:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
