A week in security (December 9 – 15)
Last week on Malwarebytes Labs, we cautioned readers against purchasing potentially privacy-invasive, cyber-insecure smart doorbells, warned about a new credit...
threatintel
State Bank of India Issues Warning of Juice Jacking
In recent months there has been a rise in cyber-frauds with people losing money on online payment or digital transactions....
ATM Attacks-Know how AtMs cab be hacked under 20 minutes!!!
Want to know something interesting and alarming? A research report published last year revealed that most ATM's can be hacked...
Online Payments for Water Services Intercepted By Hackers
The City of Waco warns residents that their online payments for water services may have been impeded by hackers who...
TheTHE – Simple, Shareable, Team-Focused And Expandable Threat Hunting Experience
TheTHE is an environment intended to help analysts and hunters over the early stages of their work in an easier,...
Automating Application Security Testing Within Your Atlassian Bamboo Pipelines
This blog post is part three of our ongoing Automation with InsightAppSec series. Make sure to check out part one...
DDoS Attacks and IoT Exploits: New Activity from Momentum Botnet
by Aliakbar Zahravi We recently found notable malware activity affecting devices running Linux, a platform that has battled numerous issues...
Rambler claimed the rights to the Nginx web server
Rambler Group claimed a violation of its exclusive copyright on the Nginx web server, which was developed by a former...
New Orleans: Mayor Declares State of Emergency after a Cyberattack
The city of New Orleans after being hit by a cyberattack, declared a state of emergency wherein the employees and...
Russian Telegram Accounts Hacked by Intercepting One Time Password (OTP)
According to a firm Group-IB, in the last few weeks a dozen Russian entrepreneurs saw their Telegram accounts hacked. And...
Nginx Log Check – Nginx Log Security Analysis Script
Nginx Log Security Analysis ScriptFeaturesStatistics Top 20 AddressSQL injection analysisScanner alert analysisExploit detectionSensitive path accessFile contains attackWebshellFind URLs with response...
EXIST – Web Application For Aggregating And Analyzing Cyber Threat Intelligence
EXIST is a web application for aggregating and analyzing CTI (cyber threat intelligence).EXIST is written by the following software.Python 3.5.4Django...
Intel Chips Now Exploitable? Sensitive Data Could Be Compromised By Reducing Chips’ Voltage!
Hackers can now allegedly, exploit Intel chips via voltage alterations which could lead to messed up flow of electricity only...
Haaukins – A Highly Accessible And Automated Virtualization Platform For Security Education
Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components (Docker, Virtualbox and...
CyberRange – The Open-Source AWS Cyber Range
This CyberRange project represents the first open-source Cyber Range blueprint in the world.This project provides a bootstrap framework for a...
Dread Zeppelin: Ransomware targets health care and IT sectors in U.S., Europe
Cybercriminals have spun off a ransomware that was originally known to target Russian organizations into a new malicious encryptor used...
New Women in CyberSecurity (WiCyS) veterans program aims to bridge skills gap, diversify sector
The cybersecurity industry has a problem: We have zero unemployment rate. Or so we’re told. With experts predicting millions of job...
5 tips for building an effective security operations center (SOC)
Security is more than just tools and processes. It is also the people that develop and operate security systems. Creating...
Bitcoin fraud worth $ 359M caught by the Brazil Police
The Brazilian police have found what is said to be an alleged Bitcoins fraud that stole $ 359M from the...
A cyber- security provider discovers Microsoft, LinkedIn and many others becoming the most preferred targets for phishing
Akamai Technologies, Inc. an American content delivery network as of late discovered various issues, like the DDoS attacks, credential stuffing,...
Romanian cybercriminals sentenced to 20 years in prison for developing malware
Two Romanian citizens were sentenced to imprisonment for the development and operation of the Bayrob malware, which infected more than...
Maze Ransomware Exfiltrated Data of Southwire Firm, Threatens to Publish if Ransom Not Paid
Maze ransomware, a variant of Chacha Ransomware that has been leading the charge of various ransomware attacks lately, now claimed...
Dsiem – Security Event Correlation Engine For ELK Stack
Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and...
Exploitivator – Automate Metasploit Scanning And Exploitation
This has only been tested on Kali.It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/Install the...
