Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Cloudskulk: A rootkit that can virtualize your entire machine like a matryoshka doll.

Running low on Nightmare fuel? I got you fam. Cloudskulk https://scholarworks.boisestate.edu/cgi/viewcontent.cgi?article=2426&context=td

There is a new species of rootkit that is entirely virtual and seems to be capable of virtualizing the I/O of another machine.

These new virtual machine rootkits (VMR) are a threat to cloud computing instances because they operate on the actual hypervisor that the VMs run on. If migration is enabled a VMR like Cloudskulk running on the same hardware can slide in between another VM instance and the hypervisor effectively virtualizing the target inside itself like a freaky glass prison or a Russian nesting doll.

Testing seems to show that these things have an inherent weakness. They would be sensitive to high I/O throughput because of compounding demand on resources.

submitted by /u/coldasthegrave
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Launching Superfluid Bug Bounty Program with Immunefi

Our mission to establish the Superfluid Protocol as a key component of the financial rails of the future requires more than technological…Continue reading on Superfluid Blog »
Read more...
Dark Reading: Attacks/Breaches
Bot Marketplaces as a Source of Future Data Breaches

Of the four bot marketplaces Cognyte analyzed, the Russian Market is the most dominant, but the others are all active, updated daily, and well-known, too.
Dark Reading: Attacks/Breaches
Data Transparency Hasn't Made Us Safer Yet. Can It Uncover Breach Causality?

Advanced machine learning models within an XDR framework could uncover what actually causes breaches, but first we need better data transparency.