Why I Joined Rapid7
“I think the best way to tell a story is by starting at the end, briefly, then going back to...
Security
United States Issues Alert on North Korean Threat Actors Finding Better Ways to Rob Banks
The Cybersecurity and Infrastructure Security Agency (CISA), the U.S. Treasury Department, the FBI, and U.S. Cyber Command issued a joint...
SourceWolf – Amazingly Fast Response Crawler To Find Juicy Stuff In The Source Code!
Tested environments: Windows, MAC, linux, and windows subsystem for linux (WSL) What can SourceWolf do? Crawl through responses to find...
Iblessing – An iOS Security Exploiting Toolkit, It Mainly Includes Application Information Collection, Static Analysis And Dynamic Analysis
iblessingiblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis.iblessing is based...
The Ministry of Internal Affairs of Bashkortostan intends to cooperate with white hackers to reduce cyber crime
The Ministry of Internal Affairs of Bashkortostan is ready to cooperate with white hackers and programmers to solve Internet crimes...
How a loyal employee saved Tesla from a Russian 1 million malware attack
As Justin Richards said, "heroes can be found in the most unlikely places. Perhaps we all have it within us...
Nefilim Ransomware Evolving Rapidly: Top Targets at a Glance
Ransomware has continually expanded both in terms of threat and reach as threat actors continue to devise fresh methods of...
Urlgrab – A Golang Utility To Spider Through A Website Searching For Additional Links
A golang utility to spider through a website searching for additional links with support for JavaScript rendering.Installgo get -u github.com/iamstoxe/urlgrabFeaturesCustomizable...
Osintgram – A OSINT Tool On Instagram
Osintgram is a OSINT tool on Instagram.Osintgram offers an interactive shell to perform analysis on Instagram account of any users...
SUPERAntiSpyware Professional X Trial < 10.0.1206 Local Privilege Escalation
Posted by b1nary on Aug 29# Vulnerability Description SUPERAntiSpyware Professional X Trial versions prior to 10.0.1206 are vulnerable to local...
Missing Trust Validation in Visual Studio’s VSIX Installer
Posted by Ostovary, Daniel on Aug 29Hi, we have recently discovered a vulnerability in the VSIX Installer of Visual Studio....
Three vulnerabilities found in MikroTik’s RouterOS
Posted by Q C on Aug 29Advisory: three vulnerabilities found in MikroTik's RouterOS Details ======= Product: MikroTik's RouterOS Vendor URL:...
The data of 55 thousand clients of Russian banks were publicly available
The Bank of Russia and the Visa payment system have notified credit institutions about the leakage of bank customer card...
APT36: A Pakistani Hacking Group, Strengthens Its Operations and Finds New Targets
Famous as APT36, Transparent Tribe is a hacking group that works from Pakistan. APT36 is infamous for monitoring and spying...
The new iOS 14 to drop Facebook’s Audience Network Advertising to 50%
Facebook on Wednesday posted a response to the new iOS 14 on their official blog stating that the new iOS...
Vulnerable-AD – Create A Vulnerable Active Directory That’S Allowing You To Test Most Of Active Directory Attacks In Local Lab
Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab.Main FeaturesRandomize AttacksFull...
Bluescan – A Powerful Bluetooth Scanner For Scanning BR/LE Devices, LMP, SDP, GATT And Vulnerabilities!
Bluescan is a open source project by Sourcell Xu from DBAPP Security HatLab. Anyone may redistribute copies of bluescan to...
Trojan infects NCR, posing risk to supply chain
String of ATMs seen at Hartsfield-Jackson Atlanta International Airport. A trojan infected NCR Corporation, potentially posing a supply chain risk...
Missing person scams: what to watch out for
Social media has a long history of people asking for help or giving advice to other users. One common feature...
NZ Stock Exchange Halted Temporarily Twice After Being Hit by Cyber Attacks
The New Zealand stock exchange was hit by a cyber-attack due to which it had to remain offline two days...
Russian citizen arrested in the United States on charges of organizing a cyber crime
According to the Ministry of Justice, 27-year-old Yegor Kryuchkov tried to pay $1 million to an employee of a company...
SharpHose – Asynchronous Password Spraying Tool In C# For Windows Environments
SharpHose is a C# password spraying tool designed to be fast, safe, and usable over Cobalt Strike's execute-assembly. It provides...
Bashtop – Linux/OSX/FreeBSD Resource Monitor
Bpytop, bashtop python port is now available at https://github.com/aristocratos/bpytopIt's a lot faster and about a third as cpu heavy and...
SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S
Posted by SEC Consult Vulnerability Lab on Aug 27SEC Consult Vulnerability Lab Security Advisory < 20200827-0 > ======================================================================= title: Multiple...
