Threat actors exploit a flaw in Digium Phone Software to target VoIP servers
Threat actors are targeting VoIP servers by exploiting a vulnerability in Digium’s software to install a web shell, Palo Alto...
hacking
Kubeaudit – Tool To Audit Your Kubernetes Clusters Against Common Security Controls
kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such...
Tainted password-cracking software for industrial systems used to spread P2P Sality bot
Dragos researchers uncovered a small-scale campaign targeting industrial engineers and operators with Sality malware. During a routine vulnerability assessment, Dragos...
Experts warn of attacks on sites using flawed Kaswara Modern WPBakery Page Builder Addons
Researchers spotted a massive campaign that scanned close to 1.6 million WordPress sites for vulnerable Kaswara Modern WPBakery Page Builder...
Holy Ghost ransomware operation is linked to North Korea
Microsoft researchers linked the Holy Ghost ransomware (H0lyGh0st) operation to North Korea-linked threat actors. The Microsoft Threat Intelligence Center (MSTIC)...
Dumpscan – Tool To Extract And Dump Secrets From Kernel And Windows Minidump Formats
Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is...
RedAlert, LILITH, and 0mega, 3 new ransomware in the wild
Cyble researchers warn of three new ransomware operations named Lilith, RedAlert and 0mega targeting organizations worldwide. Researchers from threat intelligence...
Mantis botnet powered the largest HTTPS DDoS attack in June
The largest HTTPS DDoS attack recently mitigated by Cloudflare was launched by the Mantis botnet. In June 2022, DDoS mitigation...
The new Retbleed speculative execution attack impacts both Intel and AMD chips
Researchers warn of a new vulnerability, dubbed Retbleed, that impacts multiple older AMD and Intel microprocessors. ETH Zurich researchers Johannes Wikner...
Trufflehog – Find Credentials All Over The Place
TruffleHog Find leaked credentials. Join The Slack Have questions? Feedback? Jump in slack and hang out with us docker run...
Former CIA employee Joshua Schulte was convicted of Vault 7 massive leak
Former CIA programmer, Joshua Schulte, was convicted in a US federal court of the 2017 leak of a massive leak...
Microsoft published exploit code for a macOS App sandbox escape flaw
Microsoft published the exploit code for a vulnerability in macOS that can allow an attacker to escape the sandbox. Microsoft publicly disclosed...
VMware fixed a flaw in vCenter Server discovered eight months ago
VMware addressed a high-severity privilege escalation flaw, tracked as CVE-2021-22048, in vCenter Server IWA mechanism. VMware addressed a high-severity privilege...
Qakbot operations continue to evolve to avoid detection
Experts warn that operators behind the Qakbot malware operation are improving their attack chain in an attempt to avoid detection....
Three UEFI Firmware flaws found in tens of Lenovo Notebook models
IT giant Lenovo released security fixes to address three vulnerabilities that impact the UEFI firmware shipped with over 70 product...
Bypass-Url-Parser – Tool That Tests Many URL Bypasses To Reach A 40X Protected Page
Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing...
Large-scale AiTM phishing campaign targeted +10,000 orgs since 2021
A large-scale phishing campaign used adversary-in-the-middle (AiTM) phishing sites to hit more than 10,000 organizations Microsoft observed a large-scale phishing campaign...
The President of European Central Bank Christine Lagarde targeted by hackers
Christine Lagarde, the president of the European Central Bank, was the target of a failed hacking attempt. The European Central...
Flaws in the ExpressLRS Protocol allow the takeover of drones
The protocol for radio-controlled (RC) drones, named ExpressLRS, is affected by vulnerabilities that can allow device takeover. Researchers warn of...
WebView2-Cookie-Stealer – Attacking With WebView2 Applications
Please read this blog post to get more information. Source Code This code is a modified version of Microsoft's WebView2...
Microsoft announced the general availability of Windows Autopatch feature
Microsoft announced the general availability of a feature called Autopatch that automatically updates Windows and Office software. Microsoft announced the general availability...
Cloud-Based Cryptocurrency mining attacks abuse GitHub Actions and Azure VM
Researchers investigated cloud-based cryptocurrency mining attacks targeting GitHub Actions and Azure VMs. Researchers from Trend Micro published a report that...
A fake job offer via LinkedIn allowed to steal $540M from Axie Infinity
Threat actors used a fake job offer on LinkedIn to target an employee at Axie Infinity that resulted in the theft...
Tofu – Windows Offline Filesystem Hacking Tool For Linux
A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more....
