LuminousMoth APT: Sweeping attacks for the chosen few
APT actors are known for the frequently targeted nature of their attacks. Typically, they will handpick a set of targets...
XLS Entanglement
VBA tradecraft is constantly evolving and this past winter, I came across some articles from Adepts of 0xCC. Specifically, their...
Wpscvn – Wpscvn Is A Tool For Pentesters, Website Owner To Test If Their Websites Had Some Vulnerable Plugins Or Themes
wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themesThe author...
Injector – Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows
Complete Arsenal of Memory injection and other techniques for red-teaming in WindowsWhat does Injector do?Process injection support for shellcode located...
Trickbot improve its VNC module in recent attacks
Trickbot botnet is back, its authors implemented updates for the VNC module used for remote control of infected systems. The...
China-linked hacking group DEV-0322 behind Solarwinds Serv-U zero-day attacks
Microsoft attributes the recent attacks that have targeted SolarWinds file transfer servers to a China-linked APT group that the experts tracked as...
The infrastructure and websites used by REvil ransomware gang are not reachable
The infrastructure and leak sites used by the REvil ransomware gang for its operations went offline last night. Starting last...
This couple lost £15,000 to scammers. We followed the money – and found millions in stolen crypto
A CyberNews investigation uncovered a network of wallet addresses used by a scammer group to store and cash out millions...
Adobe patches critical vulnerabilities in Reader, Acrobat, and Illustrator
Adobe addressed multiple critical vulnerabilities in several products, including Adobe Acrobat and Reader application. Adobe addressed multiple critical remote code...
CVE-2021-24015
Summary: An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before...
CVE-2021-3570
Summary: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a...
CVE-2021-32727
Summary: Nextcloud Android Client is the Android client for Nextcloud. Clients using the Nextcloud end-to-end encryption feature download the public...
CVE-2021-1073
Summary: NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries...
CVE-2021-36367
Summary: PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response....
Vulnerability in Less.js Causes Website to Leak AWS Secret Keys
Cybersecurity researchers at Canadian firm Software Secured identified a critical flaw in Less.js, a widely used preprocessor language. According to...
Russian banks to launch a system against telephone fraud
Financial organizations are planning to launch a pilot project of a system for accounting and analyzing telephone fraud, said Alexey...
$350,000 Stolen from Users by Fake Cryptocurrency Mining Apps
The year 2021 will be remembered as a watershed moment for cryptocurrencies. Despite its ups and downs, Bitcoin is still...
Stolen Credit Card Data Hidden in Images by Magecart Hackers for Vague Exfiltration
Magecart-affiliated cybercriminals have adopted a new approach for obfuscating malware code within comment blocks and embedding stolen credit card data...
Mint Mobile Suffered a Data Breach
The US-based telecommunication firm Mint Mobile has announced that it has suffered a data violation which has let several telephone...
Whisker – A C# Tool For Taking Over Active Directory User And Computer Accounts By Manipulating Their msDS-KeyCredentialLink Attribute
Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively...
DNSrr – A Tool Written In Bash, Used To Enumerate All The Juicy Stuff From DNS
DNSrr is a tool written in bash, used to enumerate all the juicy stuff from DNS records, it uses different...
ModiPwn flaw in Modicon PLCs bypasses security mechanisms
ModiPwn flaw (CVE-2021-22779) in some of Schneider Electric’s Modicon PLCs can allow attackers to bypass authentication mechanisms and take over...
Social media partially disrupted in Cuba amid anti-government protests
NetBlocks reported partial disruption to social media and messaging platforms in Cuba from 12 July 2021 shortly after Cubans went...
American retailer Guess discloses data breach after ransomware attack
American clothing brand and retailer Guess discloses a data breach after the February ransomware attack and is notifying the affected customers. In...
