Utah Gun Exchange – 235,233 breached accounts
In July 2020, the Utah Gun Exchange website suffered a data breach which included several other associated websites. In total,...
Catho – 1,173,012 breached accounts
In approximately March 2020, the Brazilian recruitment website Catho was compromised and subsequently appeared alongside 20 other breached websites listed...
Sonicbids – 751,700 breached accounts
In December 2019, the booking website Sonicbids suffered a data breach which they attributed to "a data privacy event involving...
Hackers hijack design platform to go phishing
Australian design platform Canva unwittingly provided phishing campaigns with graphics, making threat actors’ schemes appear more legitimate as they pilfer...
The impact of COVID-19 on healthcare cybersecurity
As if stress levels in the healthcare industry weren’t high enough due to the COVID-19 pandemic, risks to its already...
Russians were warned about phishing emails on behalf of the tax service
Experts of the company Group-IB, specializing in the prevention of cyberattacks, together with the Federal Tax Service (FTS), identified the...
PurpleSharp – C# Adversary Simulation Tool That Executes Adversary Techniques With The Purpose Of Generating Attack Telemetry In Monitored Windows Environments
Defending enterprise networks against attackers continues to present a difficult challenge for blue teams. Prevention has fallen short; improving detection...
Sinter – A User-Mode Application Authorization System For MacOS Written In Swift
Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift.Sinter uses the user-mode EndpointSecurity...
Join Team Moose: Become a Rapid7 BDR
The Business Development Representative (BDR) program at Rapid7 is an entry-level program that develops our next generation of successful sales...
Lock and Code S1Ep13: Monitoring the safety of parental monitoring apps with Emory Roane
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the...
New Release: UFONet v1.6 – “M4RAuD3R!”…
Posted by psy on Aug 17Hi Community, I am glad to present a new release of this tool: - https://ufonet.03c8.net...
Two vulnerabilities found in MikroTik’s RouterOS
Posted by Q C on Aug 14Advisory: two vulnerabilities found in MikroTik's RouterOS Details ======= Product: MikroTik's RouterOS Vendor URL:...
Avian JVM vm::arrayCopy() silent return on negative length
Posted by Pietro Oliva via Fulldisclosure on Aug 11Vulnerability title: Avian JVM vm::arrayCopy() silent return on negative length Author: Pietro...
Avian JVM vm::arrayCopy() Multiple Integer Overflows
Posted by Pietro Oliva via Fulldisclosure on Aug 11Vulnerability title: Avian JVM vm::arrayCopy() Multiple Integer Overflows Author: Pietro Oliva CVE:...
SugarCRM < 10.1.0 (Reports Export) SQL Injection Vulnerability
Posted by Egidio Romano on Aug 11SugarCRM < 10.1.0 (Reports Export) SQL Injection Vulnerability *• Software Link:*https://www.sugarcrm.com *• Affected Versions:*...
Smart TVs can be used by hackers to spy on you
Arseniy Shcheltsin, CEO of Russian company Digital Platforms, said in an interview that modern TVs with Smart TV function are...
For Privacy and Safety, Disable these features from your Google Assistance
It's difficult to imagine life without Google and every day the search engine gets more involved and intricate in our...
IoT-PT – A Virtual Environment For Pentesting IoT Devices
A new pentesting virtual environment for IoT DevicesDownload Link : https://drive.google.com/open?id=1XwGqkLax2irSPpwEpeAqypl9vEywzw3DMD5 : d9c20057b14cfa3fb25f744813b828df ; SHA1: 8828d693dc6c809377bab40d2bc26f525685e287OS info and RequirementsBase OS...
Urlbuster – Powerful Mutable Web Directory Fuzzer To Bruteforce Existing And/Or Hidden Files Or Directories
Powerful web directory fuzzer to locate existing and/or hidden files or directories.Similar to dirb or gobuster, but with a lot...
Stop Attackers in Their Tracks with Insight Agent Quarantine
Block the spread of malware and prevent lateral movement with Rapid7 Insight Agent Quarantine from InsightConnectRapid7’s Insight Agent is lightweight...
Emotet Malware Returned with Massive Malspam Campaign
The Emotet authors are popular for capitalizing on trending events and holidays by disseminating customized templates in form of Christmas...
Facebook Struggles Against Hate Speech and Misinformation, Fails to Take Actions
In the last month, FB CEO Mark Zuckerberg and others met with civil rights activists to discuss FB's way of...
PowerSharpPack – Many usefull offensive CSharp Projects wraped into Powershell for easy usage
Many usefull offensive CSharp Projects wraped into Powershell for easy usage.Why? In my personal opinion offensive Powershell is not dead...
Spybrowse – Code Developed To Steal Certain Browser Config Files (History, Preferences, Etc)
Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of...
