Fintech security: the challenges and fails of a new era
“I have no idea how this app from my bank works, and I don’t trust what I don’t understand.” Josh...
OSINT
Teenager Arrested for DDoS Attack in Ukraine
Ukranian Police arrested a 16 yrs old teenager last month on charges of attacking a local Internet Service Provider (ISP)...
Apple Engineers unveils a proposal to standardize the two factor authentication process and Google backs it up!
Apple known for it's off the charts security features was recently troubled with hacks, malware and phishing attacks staining its...
Jaeles v0.4 – The Swiss Army Knife For Automated Web Application Testing
Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner.InstallationDownload precompiled...
Dufflebag – Search Exposed EBS Volumes For Secrets
Dufflebag is a tool that searches through public Elastic Block Storage (EBS) snapshots for secrets that may have been accidentally...
How to Identify, Prioritize and Remediate Vulnerabilities in the Cloud
In part one of our four-part series on security in the cloud, we discussed the AWS shared responsibility model and...
Washington Privacy Act welcomed by corporate and nonprofit actors
The steady parade of US data privacy legislation continued last month in Washington with the introduction of an improved bill...
The Prosecutor General’s Office of the Russian Federation proposes to create a single resource to combat cyber fraud
Specialized service for collecting data on cybercrime in the financial sector, which will help counteract fraud in cyberspace, may appear...
Google Cuts Down Chrome’s Patch-Gap in Half, from 33 to 15 Days now
Last week, Google has announced the cutting down of 'patch gap' in half for Chrome and the future plans of...
Chinese Origin Threat Group Targets Hong Kong Universities with New Backdoor Variant
The Winnti, a China-linked threat group that has been active in the cyberspace since 2009 was found to be employing...
Qiling – Advanced Binary Emulation Framework
Qiling is an advanced binary emulation framework, with the following features:Cross platform: Windows, MacOS, Linux, BSDCross architecture: X86, X86_64, Arm,...
Nfstream – A Flexible Network Data Analysis Framework
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline...
DOUBLEPULSAR over RDP: Baselining Badness on the Internet
That’s good news, right? Well, I’d say that’s a qualified “yes.” As I mentioned, it’s easy to change the implant...
DOUBLEPULSAR RCE 2: An RDP Story
In this sequel, wvu recounts the R&D (in all its imperfect glory) behind creating a Metasploit module for the DOUBLEPULSAR...
TA505 phishing campaign uses HTML redirectors to spread info stealer
The cybercriminal group TA505 has reportedly changed up its tactics again, now engaging in phishing campaigns that leverage attachments with...
A week in security (January 27 – February 2)
Last week on Malwarebytes Labs, we looked at the strengths and weaknesses of the Zero Trust model, gave you the...
Hackers used the websites of Russian government agencies to extract cryptocurrency
According to the deputy head of the National Coordination Center for Computer Incidents of the FSB, Nikolai Murashov, encryption viruses...
Mobile Banking Malware On The Rise, 50% Hike In Attacks! WhatsApp a Dependable Medium?
According to studies, with an increase of 50% malware attacks have known no bounds in the past year. Most common...
WhatTheHack – A Collection Of Challenge Based Hack-A-Thons Including Student Guide, Proctor Guide, Lecture Presentations, Sample/Instructional Code And Templates
WhatTheHack is a collection of challenge based hack-a-thons including student guide, proctor guide, lecture presentations, sample/instructional code and templates.What, Why...
Injectus – CRLF And Open Redirect Fuzzer
Simple python tool that goes through a list of URLs trying CRLF and open redirect payloads. ▪ ▐ ▄ ▐▄▄▄▄▄▄...
Congrats to the winners of the 2020 Metasploit community CTF
After four days of competition and a whole lot of “trying harder,” we have the winners of this year's Metasploit...
What You Need to Know to Get Started in the Penetration Testing Field
As cyber-attacks become more and more frequent against entities of all sizes, penetration testing is becoming more important to identify...
PCFG Cracker – Probabilistic Context Free Grammar (PCFG) Password Guess Generator
PCFG = Probabilistic Context Free GrammarPCFG = Pretty Cool Fuzzy GuesserIn short: A collection of tools to perform research into...
DVNA – Damn Vulnerable NodeJS Application
Damn Vulnerable NodeJS Application (DVNA) is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing...
