Understanding Cookie Types and Their Functions

https://undercodenews.com/understanding-cookie-types-and-their-functions/

@Undercode_News

📊 Shein's Indian Comeback: Conditional on Data Localization and Reliance Partnership

https://undercodenews.com/sheins-indian-comeback-conditional-on-data-localization-and-reliance-partnership/

@Undercode_News

Japanese Auto Giants, Honda and #Nissan, Eye Potential Merger to Take on EV Frontrunners

https://undercodenews.com/japanese-auto-giants-honda-and-nissan-eye-potential-merger-to-take-on-ev-frontrunners/

@Undercode_News

🦑Detection of teams convoC2 Mainly used by Red Teamers recent days.

Basically it causes out bound requests to C2 Server, exfiltrates command outputs from Adaptive Cards images URLs and inserting data into hidden span tags in Microsoft teams conservations.
The fact that the victim only sends http queries to Microsoft servers and the antivirus doesn't examine MS teams log files and in absence of direct connection between the victim and attacker in this case its very difficult to detect.

Here is the custom KQL to Detect.

CloudAppEvents
| where Timestamp > ago(1h)
| where Application contains "Microsoft Teams"
| where ActionType contains "AppInstalled"
| where parse_json(RawEventData)["AddOnName"] == 'Workflows'

Ref: Kintali Sai Dinesh
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑18 Must-Have Free Tools for Cybersecurity Enthusiasts 🛡️

As a cybersecurity professional, staying ahead of the curve requires constant learning and hands-on practice. The good news? You don’t need to break the bank to access industry-leading tools. Here's a curated list of 18 free cybersecurity tools to elevate your skills—whether you're a beginner or a seasoned expert!

🔵 1. Kali Linux
The ultimate penetration testing operating system for ethical hackers.

🔵 2. Wireshark
A network protocol analyzer that lets you capture and inspect data in real time.

🔵 3. Burp Suite Community Edition
Perfect for web application security testing and vulnerability assessments.

🔵 4. Gophish
An open-source phishing toolkit for creating realistic phishing campaigns.

🔵 5. Aircrack-ng
Specializes in cracking WEP/WPA Wi-Fi passwords.

🔵 6. Have I Been Pwned?
Check if your email or accounts have been compromised in data breaches.

🔵 7. Metasploit Framework
A penetration testing powerhouse for exploiting vulnerabilities.

🔵 8. Nikto
Scans web servers for dangerous files, outdated software, and misconfigurations.

🔵 9. HackTheBox
An interactive training platform to sharpen your hacking skills.

🔵 10. pfSense
A firewall and router solution for network protection.

🔵 11. CyberChef
A versatile tool for analyzing, encrypting, and decoding data.

🔵 12. Ghidra
An open-source reverse engineering tool by the NSA.

🔵 13. Deshashed
Enhance email security by detecting exposed credentials.

🔵 14. OpenVAS
A comprehensive vulnerability scanner for systems and networks.

🔵 15. OSSEC
Monitor and prevent intrusions in your environment with this HIDS tool.

🔵 16. SQLmap
Automatically detect and exploit SQL injection vulnerabilities.

🔵 17. REMnux
Reverse engineering and malware analysis made accessible.

🔵 18. Zed Attack Proxy (ZAP)
A web application security scanner for discovering vulnerabilities.


🌟 Why Use These Tools?
- Cost-Effective: Free but highly efficient.
- Industry Standard: Frequently used by professionals worldwide.
- Skill Development: Master critical areas like penetration testing, vulnerability analysis, and data protection.

Ref: Arun KL
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

📱 Unleashing Creativity with #Apple's Image Playground

https://undercodenews.com/unleashing-creativity-with-apples-image-playground/

@Undercode_News

🦑𝗣𝗼𝘄𝗲𝗿𝗦𝗵𝗲𝗹𝗹 𝗦𝗲𝗹𝗳-𝗣𝘄𝗻 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻

The Proofpoint blog outlines a social engineering tactic where threat actors deceive users into copying and pasting malicious PowerShell scripts, causing malware infections. Groups like TA571 use fake error messages to prompt script execution, delivering malware such as DarkGate and NetSupport. Despite needing significant user interaction, the attack's success hinges on sophisticated social engineering. I have developed a custom detection PowerShell Self-Pwn KQL to identify such scenarios and assist SecOps in isolating affected devices.

Ref: Steven Lim
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔍 Unlocking the Future: Schmidt Sciences Launches to Fund Cutting-Edge Research

https://undercodenews.com/unlocking-the-future-schmidt-sciences-launches-to-fund-cutting-edge-research/

@Undercode_News

Unleash Entertainment Anywhere: #Samsung's The Freestyle (2nd Gen) Projector Steals the Show This Holiday Season

https://undercodenews.com/unleash-entertainment-anywhere-samsungs-the-freestyle-2nd-gen-projector-steals-the-show-this-holiday-season/

@Undercode_News

Chinese Tech Firm Exposed: Hacking Governments and Activists

https://undercodenews.com/chinese-tech-firm-exposed-hacking-governments-and-activists/

@Undercode_News

📊 The #AI Bubble and Databricks' 0 Billion Bet

https://undercodenews.com/the-ai-bubble-and-databricks-0-billion-bet/

@Undercode_News

The Generative #AI Triathlon: A Multi-faceted Race

https://undercodenews.com/the-generative-ai-triathlon-a-multi-faceted-race/

@Undercode_News

⚡️ #Intel Weighs a Bold Move: Splitting Manufacturing from Product Development

https://undercodenews.com/intel-weighs-a-bold-move-splitting-manufacturing-from-product-development/

@Undercode_News

⚠️ Iranian Hackers Target Critical Infrastructure with New IOCONTROL #Malware

https://undercodenews.com/iranian-hackers-target-critical-infrastructure-with-new-iocontrol-malware/

@Undercode_News

📱 #Samsung to Revolutionize Home Appliances with #AI at CES 2025

https://undercodenews.com/samsung-to-revolutionize-home-appliances-with-ai-at-ces-2025/

@Undercode_News

🚨 Facebook Parent Company Meta Fined €251 Million for 2018 #Data Breach

https://undercodenews.com/facebook-parent-company-meta-fined-eur251-million-for-2018-data-breach/

@Undercode_News

🦑Security collection for pro:

✅Worm Infection: https://lnkd.in/ez-kq98Y
✅Social Engineering: https://lnkd.in/e_FJbxDP
✅Information Leakage: https://lnkd.in/eeN8KX8g
✅Insider Abuse: https://lnkd.in/ep4p_THk
✅Customer Phishing: https://lnkd.in/ekTfY7vz
✅Scam: https://lnkd.in/eUHwG3fF
✅Trademark infringement: https://lnkd.in/e3P3xfeb
✅Phishing: https://lnkd.in/eYTi3RQ8
✅Ransomware: https://lnkd.in/eRkctdQn
✅Large_scale_compromise: https://lnkd.in/eYFF43b4
✅3rd-party_compromise: https://lnkd.in/e8SAu5MT
✅Windows Intrusion: https://lnkd.in/eXCpcx9V
✅Unix Linux lntrusionDetection: https://lnkd.in/eHkm6MMe
✅DDOS: https://lnkd.in/eQ7zZzVt
✅MaliciousNetworkBehaviour: https://lnkd.in/ewVZy2cs
✅Website-Defacement: https://lnkd.in/eraNiHcH
✅WindowsMalwareDetection: https://lnkd.in/ewEx_C6Y
✅Blackmail: https://lnkd.in/eW3zGcPs
✅SmartphoneMalware.pdf: https://lnkd.in/ezjyY4G9

Ref: Mohamad Hamadi
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

We had a hardware issue recently, and it's fixed. 🙂‍↔️