Doldrums – A Flutter/Dart Reverse Engineering Tool
To flutter: to move in quick, irregular motions, to beat rapidly, to be agitated.Doldrums: a period of stagnation. Doldrums is...
Rz-Ghidra – Deep Ghidra Decompiler And Sleigh Disassembler Integration For Rizin
This is an integration of the Ghidra decompiler and Sleigh Disassembler for rizin. It is solely based on the decompiler...
Cisco fixed Remote Code Execution issue in Firepower Device Manager On-Box software
Cisco addressed a vulnerability in the Firepower Device Manager (FDM) On-Box software that allows attackers to execute arbitrary code on...
Experts found potential remote code execution in PyPI
A flaw in the GitHub Actions workflow for PyPI ’s source repository could be exploited to potentially execute arbitrary code...
Do You Trust Your Smart TV?
Did you ever stop to think that the office smart TV used for company presentations, Zoom meetings, and other work-related...
PwnedPiper flaws in PTS systems affect 80% of major US hospitals
Cybersecurity researchers disclosed multiple flaws, dubbed PwnedPiper, that left a widely-used pneumatic tube system (PTS) vulnerable to attacks. Researchers from...
CVE-2021-35516
Summary: When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally...
CVE-2021-35517
Summary: When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally...
CVE-2021-36090
Summary: When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally...
CVE-2020-22283
Summary: A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to...
CVE-2021-1600
Summary: Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive internal services from...
A week in security (July 26 – August 1)
Last week on Malwarebytes Labs: OSX.XLoader hides little except its main purpose: What we learned in the installation process.The Clubhouse...
This Vulnerability in E-Learning Platform Moodle Could Even Modify Exam Results
Critical Security Exploit in the popular e learning platform Moodle can be compromised that lets access to student data and...
City Officials of Grass Valley Negotiates with the Handlers of Ransomware Attack
The city of Grass Valley is one of the latest victims of a ransomware attack. The operators of the ransomware...
Malevolent PyPI Packages Detected Filching Developer Data
Repositories of software packages have become a frequent target for supply chain attacks. Reports concerning malware attacks on prominent repository...
Google Plans to Ban ‘Sugar Dating’ Apps From September
Google is all set to remove ‘Super Dating' applications from the Play Store in order to make the Android app...
Security Researchers Discovered Crimea Manifesto Buried in VBA Rat
On Thursday, Hossein Jazi and the Threat Intelligence team at Malwarebytes released a report revealing a new threat actor that...
Domhttpx – A Google Search Engine Dorker With HTTP Toolkit Built With Python, Can Make It Easier For You To Find Many URLs/IPs At Once With Fast Time
domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to...
PowerShellArmoury – A PowerShell Armoury For Security Guys And Girls
The PowerShell Armoury is meant for pentesters, "insert-color-here"-teamers and everyone else who uses a variety of PowerShell tools during their...
More evidence suggests that DarkSide and BlackMatter are the same group
Researchers found evidence that the DarkSide ransomware gang has rebranded as a new BlackMatter ransomware operation. BleepingComputer found evidence that...
WordPress Download Manager Plugin was affected by two flaws
An attacker could exploit a vulnerability in the WordPress Download Manager plugin, tracked as CVE-2021-34639, to execute arbitrary code under...
Disaster planning with Lesley Carhart, and the slim chance of a critical infrastructure “big one”: Lock and Code S02E14
The 2021 attacks on two water treatment facilities in the US—combined with ransomware attacks on an oil and gas supplier...
Ransomware Attempt Volume Touching Over 300 Million, Sets Record
A new investigation report has been published by SonicWall network security organization in which it stated that ransomware attacks have...
Hacker Uses Credential Phishing to Gain Access Into PayPal Account
Analysts from Cofense Phishing Defense Center recently found a unique PayPal credential phishing attack. Phishing is a harmful technique that...
