Pybatfish – Python Client For Batfish (Network Configuration Analysis Tool)
Pybatfish is a Python client for The Batfish YouTube channel (which you can subscribe to for new content) illustrates many...
hacking
Car rental company Sixt hit by a cyberattack that caused temporary disruptions
The car rental company Sixt announced it was hit by a cyberattack that is causing temporary business disruptions at customer...
The mystery behind the samples of the new REvil ransomware operation
The REvil ransomware gang has resumed its operations, experts found a new encryptor and a new attack infrastructure. The REvil ransomware...
Moonwalk – Cover Your Tracks During Linux Exploitation By Leaving Zero Traces On System Logs And Filesystem Timestamps
Cover your tracks during Linux Once you get a shell into the target Unix machine, start a moonwalk session by...
Group-IB CEO remains in prison – the Russian-led company has been ‘blacklisted’ in Italy
The latest executive order from the Italian ACN agency banned Group-IB, a Russian-led cybersecurity firm from working in the government...
IoT and Cybersecurity: What’s the Future?
IoT gizmos make our lives easier, but we forget that these doohickeys are IP endpoints that act as mini-radios. They...
Russia-linked APT29 targets diplomatic and government organizations
Russia-linked APT29 (Cozy Bear or Nobelium) launched a spear-phishing campaign targeting diplomats and government entities. In mid-January 2022, security researchers...
Nanodump – A Crappy LSASS Dumper With No ASCII Art
A flexible tool that creates a minidump of the LSASS process. 1. Features It uses syscalls (with SysWhispers2) for most...
Synology and QNAP warn of critical Netatalk flaws in some of their products
Synology warns customers that some of its NAS devices are affected by multiple critical Netatalk vulnerabilities. Synology has warned customers...
Hackers stole +80M from DeFi platforms Rari Capital and Fei Protocol
Threat actors exploited a bug in the Fuse protocol used by DeFi platforms Rari Capital and Fei Protocol and stole...
BackupOperatorToDA – From An Account Member Of The Group Backup Operators To Domain Admin Without RDP Or WinRM On The Domain Controller
If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or...
Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict
This post provides a timeline of the events related to the Russian invasion of Ukraine from the cyber security perspective....
Security Affairs newsletter Round 363 by Pierluigi Paganini
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free...
Microsoft Azure flaws could allow accessing PostgreSQL DBs of other customers
Researchers discovered flaws in the Azure Database for PostgreSQL Flexible Server that could result in unauthorized cross-account database access in...
Dora – Find Exposed API Keys Based On RegEx And Get Exploitation Methods For Some Of Keys That Are Found
Features Blazing fast as we are using ripgrep in backend Exploit/PoC steps for many of the API key, allowing to...
Emotet tests new attack chain in low volume campaigns
Emotet operators are testing new attack techniques in response to Microsoft’s move to disable Visual Basic for Applications (VBA) macros...
Pro-Russian group Killnet launched DDoS attacks on Romanian govt sites
A series of DDoS attacks launched by Russian hacktivists are targeting several Romanian government websites. The Romanian national cyber security...
Requests-Ip-Rotator – A Python Library To Utilize AWS API Gateway’s Large IP Pool As A Proxy To Generate Pseudo-Infinite IPs For Web Scraping And Brute Forcing
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web...
Osinteye – Username Enumeration And Reconnaisance Suite
Username Enumeration And Reconnaisance Suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: $ git clone...
Lupo – Malware IOC Extractor. Debugging Module For Malware Analysis Automation
Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and...
Anonymous hacked Russian PSCB Commercial Bank and companies in the energy sector
OpRussia continues, less than a week after my last update Anonymous has hacked other Russian companies and leaked their data...
Hurry up, disable AFP on your QNAP NAS until the vendor fixes 8 bugs
QNAP urges customers to disable the AFP file service protocol on their NAS devices until it fixes critical Netatalk flaws....
It’s Called BadUSB for a Reason
Cybercrime gang FIN7’s badUSB attacks serve as a reminder of two key vulnerabilities present among all organizations. The criminal group...
Ongoing DDoS attacks from compromised sites hit Ukraine
Ukraine CERT-UA warns of ongoing DDoS attacks targeting pro-Ukraine sites and the government web portal. Ukraine ‘s computer emergency response...
