Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malwarePost Views: 243
Reading Time: 1 Minute
Chinese hackers recently targeted a general director at the Rubin Design Bureau, a Russian defence contractor that designs nuclear submarines for the Russian Navy, using the PortDoor malware delivered via spear-phishing emails.
According to researchers at Cybereason, the PortDoor malware was developed by a threat actor likely operating on behalf of Chinese state-sponsored interests and is being delivered through the RoyalRoad weaponizer, an attack tool frequently used by China-based threat actors to attack high-value targets.
PortDoor malware, the researchers said, is designed with obfuscation and persistence in mind and features multiple functionalities, including the ability to do reconnaissance, target profiling, delivery of additional payloads, privilege escalation, process manipulation, static detection antivirus evasion, one-byte XOR encryption, AES-encrypted data exfiltration and more.
The use of the RoyalRoad weaponizer, the social engineering style, the infection vector, and similarities between the PotDoor malware and other known Chinese APT malware make it clear that the spear-phishing operation is being conducted by or on behalf of a Chinese state-sponsored hacker group, Cybereason said.
See Also: F5 Big-IP Vulnerable to Security-Bypass Bug The weaponizer has previously been used by Chinese hacker groups such as Tick, Tonto Team, TA428, Goblin Panda, and Rancor. It weaponizes RTF documents that drop an encoded file named “8.t”, which, once decoded, delivers a variety of malware based on hackers’ objectives.
In this particular case, a general director at the Rubin Design Bureau, Russia’s largest submarine design centre that has designed more than two-thirds of all nuclear submarines in the Russian Navy, was sent a spear-phishing email by hackers that contained a weaponized RTF document. The document appeared to contain the schematics of an autonomous underwater vehicle and was timestomped to 2007 to avoid detection.
See Also: Offensive Security Tool: SSHPry2.0
According to researchers who discovered and analyzed the weaponized RTF document, the document drops a Microsoft Word add-in file when it is opened and executed, thereby bypassing detection of automatic execution persistence. The dropper payload, named winlog.wll, features the following capabilities:
1. Gathering reconnaissance and profiling of the victim’s machine
2. Receiving commands and downloading additional payloads from the C2 server
3. Communicating with the C2 server using raw socket as well as HTTP over port 443 with proxy authentication support
4. Privilege escalation and process manipulation
5. Dynamic API resolving for static detection evasion
6. One byte XOR encryption of sensitive data and configuration strings
7. The collected information is AES-encrypted before it is sent to the C2 server
Once it infiltrates a system, the PortDoor malware establishes communications with a C2 server, waits for additional commands to execute, and uses AES to encrypt the stolen PC information data before routing it to the C2 server. The malware also hides most of its main functionality and avoid static detection of suspicious API calls by dynamically resolving its API calls instead of using static imports, Cybereason said. See Also: Hacking Stories: Xbox Underground“RoyalRoad has be[...]
Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malwarePost Views: 243
Reading Time: 1 Minute
Chinese hackers recently targeted a general director at the Rubin Design Bureau, a Russian defence contractor that designs nuclear submarines for the Russian Navy, using the PortDoor malware delivered via spear-phishing emails.
According to researchers at Cybereason, the PortDoor malware was developed by a threat actor likely operating on behalf of Chinese state-sponsored interests and is being delivered through the RoyalRoad weaponizer, an attack tool frequently used by China-based threat actors to attack high-value targets.
PortDoor malware, the researchers said, is designed with obfuscation and persistence in mind and features multiple functionalities, including the ability to do reconnaissance, target profiling, delivery of additional payloads, privilege escalation, process manipulation, static detection antivirus evasion, one-byte XOR encryption, AES-encrypted data exfiltration and more.
The use of the RoyalRoad weaponizer, the social engineering style, the infection vector, and similarities between the PotDoor malware and other known Chinese APT malware make it clear that the spear-phishing operation is being conducted by or on behalf of a Chinese state-sponsored hacker group, Cybereason said.
See Also: F5 Big-IP Vulnerable to Security-Bypass Bug The weaponizer has previously been used by Chinese hacker groups such as Tick, Tonto Team, TA428, Goblin Panda, and Rancor. It weaponizes RTF documents that drop an encoded file named “8.t”, which, once decoded, delivers a variety of malware based on hackers’ objectives.
In this particular case, a general director at the Rubin Design Bureau, Russia’s largest submarine design centre that has designed more than two-thirds of all nuclear submarines in the Russian Navy, was sent a spear-phishing email by hackers that contained a weaponized RTF document. The document appeared to contain the schematics of an autonomous underwater vehicle and was timestomped to 2007 to avoid detection.
See Also: Offensive Security Tool: SSHPry2.0
According to researchers who discovered and analyzed the weaponized RTF document, the document drops a Microsoft Word add-in file when it is opened and executed, thereby bypassing detection of automatic execution persistence. The dropper payload, named winlog.wll, features the following capabilities:
1. Gathering reconnaissance and profiling of the victim’s machine
2. Receiving commands and downloading additional payloads from the C2 server
3. Communicating with the C2 server using raw socket as well as HTTP over port 443 with proxy authentication support
4. Privilege escalation and process manipulation
5. Dynamic API resolving for static detection evasion
6. One byte XOR encryption of sensitive data and configuration strings
7. The collected information is AES-encrypted before it is sent to the C2 server
Once it infiltrates a system, the PortDoor malware establishes communications with a C2 server, waits for additional commands to execute, and uses AES to encrypt the stolen PC information data before routing it to the C2 server. The malware also hides most of its main functionality and avoid static detection of suspicious API calls by dynamically resolving its API calls instead of using static imports, Cybereason said. See Also: Hacking Stories: Xbox Underground“RoyalRoad has be[...]
Black Hat Ethical Hacking
Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool
Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hundreds of Millions of Dell Users at Risk from Kernel-Privilege BugsPost Views: 124
Reading Time: 1 Minute
Five high-severity security flaws in Dell’s firmware update driver are impacting potentially hundreds of millions of Dell desktops, laptops, notebooks and tablets, researchers said.
The bugs have gone undisclosed for 12 years, and could allow the ability to bypass security products, execute code and pivot to other parts of the network for lateral movement, according to SentinelLabs.
The multiple local privilege-escalation (LPE) bugs exist in the firmware update driver version 2.3 (dbutil_2_3.sys) module, which has been in use since 2009. The driver component handles Dell firmware updates via the Dell BIOS Utility, and it comes pre-installed on most Dell machines running Windows.
“Hundreds of millions of Dell devices have updates pushed on a regular basis, for both consumer and enterprise systems,” according to SentinelLabs researchers, writing in a Tuesday blog posting.
The five bugs are collectively tracked as CVE-2021-21551, and they carry a CVSS vulnerability-severity rating of 8.8 out of 10.
See Also: Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool Privilege Escalation to Kernel-ModeResearchers reported that the flaws allow adversaries to escalate their status from non-administrator user to having kernel-mode privileges.
The five bugs specifically are:
* LPE No. 1, due to memory corruption
* LPE No 2, also due to memory corruption
* LPE No. 3, due to a lack of input validation
* LPE No. 4, also due to a lack of input validation
* Denial of service flaw, due to a code-logic issue
SentinelLabs researchers said they’re withholding a proof-of-concept (PoC) exploit until June 1, which will be for the LPE No. 1 issue. However, they did break down some general issues with the driver.
“The first and most immediate problem with the firmware update driver arises out of the fact that it accepts input/output control (IOCTL) requests without any [access-control list] ACL requirements,” according to the posting. “That means that it can be invoked by a non-privileged user. Allowing any process to communicate with your driver is often a bad practice since drivers operate with the highest of privileges.”
ACLs are a collection of permit-and-deny rules that provide security by blocking unauthorized users and allowing authorized users to access specific resources.
See Also: Offensive Security Tool: SSHPry2.0
An example of the issues with this can be illustrated with IOCTL 0x9B0C1EC8. Using that request makes it possible to completely control the arguments passed to the “memmove” function, which allows the copying of memory blocks. This in turn leads to an arbitrary read/write vulnerability, researchers noted.
“A classic exploitation technique for this vulnerability would be to overwrite the values of ‘present’ and ‘enabled’ in the token-privilege member inside the EPROCESS of the process whose privileges we want to escalate,” they explained. EPROCESS acts as the process object for a given routine.
SentinelLabs also highlighted the issue in the driver that’s at the heart of LPEs No. 3 and 4: It’s possible to run in/out (I/O) instructions in kernel mode with arbitrary operands, i.e., instructions that specify what data is to be manipulated or operated on.
“This is less trivial to exploit and might require using various creative techniques to achieve elevation of privileges,” they explained. However, a successf[...]
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hundreds of Millions of Dell Users at Risk from Kernel-Privilege BugsPost Views: 124
Reading Time: 1 Minute
Five high-severity security flaws in Dell’s firmware update driver are impacting potentially hundreds of millions of Dell desktops, laptops, notebooks and tablets, researchers said.
The bugs have gone undisclosed for 12 years, and could allow the ability to bypass security products, execute code and pivot to other parts of the network for lateral movement, according to SentinelLabs.
The multiple local privilege-escalation (LPE) bugs exist in the firmware update driver version 2.3 (dbutil_2_3.sys) module, which has been in use since 2009. The driver component handles Dell firmware updates via the Dell BIOS Utility, and it comes pre-installed on most Dell machines running Windows.
“Hundreds of millions of Dell devices have updates pushed on a regular basis, for both consumer and enterprise systems,” according to SentinelLabs researchers, writing in a Tuesday blog posting.
The five bugs are collectively tracked as CVE-2021-21551, and they carry a CVSS vulnerability-severity rating of 8.8 out of 10.
See Also: Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool Privilege Escalation to Kernel-ModeResearchers reported that the flaws allow adversaries to escalate their status from non-administrator user to having kernel-mode privileges.
The five bugs specifically are:
* LPE No. 1, due to memory corruption
* LPE No 2, also due to memory corruption
* LPE No. 3, due to a lack of input validation
* LPE No. 4, also due to a lack of input validation
* Denial of service flaw, due to a code-logic issue
SentinelLabs researchers said they’re withholding a proof-of-concept (PoC) exploit until June 1, which will be for the LPE No. 1 issue. However, they did break down some general issues with the driver.
“The first and most immediate problem with the firmware update driver arises out of the fact that it accepts input/output control (IOCTL) requests without any [access-control list] ACL requirements,” according to the posting. “That means that it can be invoked by a non-privileged user. Allowing any process to communicate with your driver is often a bad practice since drivers operate with the highest of privileges.”
ACLs are a collection of permit-and-deny rules that provide security by blocking unauthorized users and allowing authorized users to access specific resources.
See Also: Offensive Security Tool: SSHPry2.0
An example of the issues with this can be illustrated with IOCTL 0x9B0C1EC8. Using that request makes it possible to completely control the arguments passed to the “memmove” function, which allows the copying of memory blocks. This in turn leads to an arbitrary read/write vulnerability, researchers noted.
“A classic exploitation technique for this vulnerability would be to overwrite the values of ‘present’ and ‘enabled’ in the token-privilege member inside the EPROCESS of the process whose privileges we want to escalate,” they explained. EPROCESS acts as the process object for a given routine.
SentinelLabs also highlighted the issue in the driver that’s at the heart of LPEs No. 3 and 4: It’s possible to run in/out (I/O) instructions in kernel mode with arbitrary operands, i.e., instructions that specify what data is to be manipulated or operated on.
“This is less trivial to exploit and might require using various creative techniques to achieve elevation of privileges,” they explained. However, a successf[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Chinese hackers targeting Russian nuclear…
en one of the most used RTF weaponizers in the Chinese threat actors sphere in recent years. It is mostly observed in the initial compromise phase of targeted attacks where spear-phishing is used to lure victims into opening malicious documents which in turn exploit Microsoft Equation Editor vulnerabilities to drop different malware.
“Both the Tonto Team and TA428 threat actors have been observed attacking Russian organisations in the past, and more specifically attacking research and defense related targets. For example, it was previously reported that Tonto Team is known to have attacked Russian organizations in the past using the Bisonal malware.
“When comparing the spear-phishing email and malicious documents in these attacks with previously examined phishing emails and lure documents used by the Tonto Team to attack Russian organisations, there are certain similarities in the linguistic and visual style used by the attackers in the phishing emails and documents,” the firm added.
Source: www.teiss.co.uk (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-90x90.png Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs2 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 weeks ago
The post Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware first appeared on Black Hat Ethical Hacking.
“Both the Tonto Team and TA428 threat actors have been observed attacking Russian organisations in the past, and more specifically attacking research and defense related targets. For example, it was previously reported that Tonto Team is known to have attacked Russian organizations in the past using the Bisonal malware.
“When comparing the spear-phishing email and malicious documents in these attacks with previously examined phishing emails and lure documents used by the Tonto Team to attack Russian organisations, there are certain similarities in the linguistic and visual style used by the attackers in the phishing emails and documents,” the firm added.
Source: www.teiss.co.uk (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-90x90.png Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs2 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 weeks ago
The post Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hundreds of Millions of Dell Users at Risk from Kernel-Privilege…
ul exploit could allow attackers to interact with peripheral devices such as the hard disk drive (HDD) or and GPU to either read/write directly to the disk or invoke direct memory access (DMA), which is used to read and write physical memory operations.
“For example, we could communicate with ATA port IO for directly writing to the disk, then overwrite a binary that is loaded by a privileged process,” according to the analysis.
Researchers also discussed a third problem unrelated to the IOCTL handler bugs: The driver file itself is located in C:\Windows\Temp, which opens the door to other issues.
“The classic way to exploit this would be to transform any bring-your-own vulnerable driver (BYOVD) into an elevation-of-privileges vulnerability since loading a (vulnerable) driver means you require administrator privileges, which essentially eliminates the need for a vulnerability,” according to the posting. “Thus, using this side-noted vulnerability virtually means you can take any BYOVD to an elevation of privileges.” See Also: Hacking Stories: Xbox UndergroundHow to Remediate Dell Driver BugsDell has issued patches, available in Dell Security Advisory DSA-2021-088. However, SentinelLabs noted a potential issue.
“Note that the certificate was not yet revoked (at the time of writing),” researchers said. “This is not considered best practice since the vulnerable driver can still be used in a BYOVD attack as mentioned earlier.”
The impact this could have on users and enterprises that fail to patch is “far reaching and significant,” according to the analysis, although so far no in-the-wild exploits have shown up.
It’s very likely that will soon change, however: “With hundreds of million of enterprises and users currently vulnerable, it is inevitable that attackers will seek out those that do not take the appropriate action,” researchers said.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-90x90.png Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 weeks ago
The post Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs first appeared on Black Hat Ethical Hacking.
“For example, we could communicate with ATA port IO for directly writing to the disk, then overwrite a binary that is loaded by a privileged process,” according to the analysis.
Researchers also discussed a third problem unrelated to the IOCTL handler bugs: The driver file itself is located in C:\Windows\Temp, which opens the door to other issues.
“The classic way to exploit this would be to transform any bring-your-own vulnerable driver (BYOVD) into an elevation-of-privileges vulnerability since loading a (vulnerable) driver means you require administrator privileges, which essentially eliminates the need for a vulnerability,” according to the posting. “Thus, using this side-noted vulnerability virtually means you can take any BYOVD to an elevation of privileges.” See Also: Hacking Stories: Xbox UndergroundHow to Remediate Dell Driver BugsDell has issued patches, available in Dell Security Advisory DSA-2021-088. However, SentinelLabs noted a potential issue.
“Note that the certificate was not yet revoked (at the time of writing),” researchers said. “This is not considered best practice since the vulnerable driver can still be used in a BYOVD attack as mentioned earlier.”
The impact this could have on users and enterprises that fail to patch is “far reaching and significant,” according to the analysis, although so far no in-the-wild exploits have shown up.
It’s very likely that will soon change, however: “With hundreds of million of enterprises and users currently vulnerable, it is inevitable that attackers will seek out those that do not take the appropriate action,” researchers said.
Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-90x90.png Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in ‘ToxicEye’ Malware Campaigns1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 weeks ago
The post Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs first appeared on Black Hat Ethical Hacking.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Hacker Breaks Down Hacking Scenes From Movies & TV | WIRED
submitted by /u/antdude
[link] [comments]
Hacker Breaks Down Hacking Scenes From Movies & TV | WIRED
submitted by /u/antdude
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hub Weekly Digest: Federated Learning, Accellion, Spartan Protocol, Cancer Care and Medical Device…
https://cdn-images-1.medium.com/max/2600/1*o0mLY_fFlKlENk0zh3kyrw.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…
Continue reading on HUB Security »
Hub Weekly Digest: Federated Learning, Accellion, Spartan Protocol, Cancer Care and Medical Device…
https://cdn-images-1.medium.com/max/2600/1*o0mLY_fFlKlENk0zh3kyrw.jpeg
Hub Security’s weekly digest covers top stories happening around the world related to fintech, critical infrastructure, cloud, and…
Continue reading on HUB Security »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TShark TryHackMe Writeup
https://cdn-images-1.medium.com/max/600/0*W8fACTv9ixtShzq6.png
Learn how to use TShark to accelerate your pcap analysis!
Continue reading on Medium »
TShark TryHackMe Writeup
https://cdn-images-1.medium.com/max/600/0*W8fACTv9ixtShzq6.png
Learn how to use TShark to accelerate your pcap analysis!
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hackers Hub
I need a hacker to change my university grades changing university/college grades is not a game, it requires professional hacking skills…
Continue reading on Medium »
Hackers Hub
I need a hacker to change my university grades changing university/college grades is not a game, it requires professional hacking skills…
Continue reading on Medium »
Deep Web
Any interesting?
Just got onion browser, any links you wanna share? Conspiracy, porn, interesting articles...
submitted by /u/boobosaurus
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Any interesting?
Just got onion browser, any links you wanna share? Conspiracy, porn, interesting articles...
submitted by /u/boobosaurus
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Any interesting?
Just got onion browser, any links you wanna share? Conspiracy, porn, interesting articles...
Deep Web
Was I phished?
Created an account at a market, made a few purchases. Now when I go to log in my password is incorrect and the mnemonic phrase to recover isn’t working either.
submitted by /u/alex7478
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Was I phished?
Created an account at a market, made a few purchases. Now when I go to log in my password is incorrect and the mnemonic phrase to recover isn’t working either.
submitted by /u/alex7478
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Was I phished?
Created an account at a market, made a few purchases. Now when I go to log in my password is incorrect and the mnemonic phrase to recover isn’t...
Botkube - An App That Helps You Monitor Your Kubernetes Cluster, Debug Critical Deployments &Amp; Gives Recommendations For Standard Practices
http://www.kitploit.com/2021/05/botkube-app-that-helps-you-monitor-your.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/05/botkube-app-that-helps-you-monitor-your.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Botkube - An App That Helps You Monitor Your Kubernetes Cluster, Debug Critical Deployments And Gives Recommendations For Standard…
For complete documentation visit www.botkube.io (http://www.botkube.io/) BotKube integration with Slack (https://slack.com/), Mattermost (https://mattermost.com/) or Microsoft Teams (https://www.microsoft.com/microsoft-365/microsoft-teams/group-chat-software) helps you monitor your Kubernetes (https://www.kitploit.com/search/label/Kubernetes) cluster, debug critical deployments and gives recommendations for standard practices by running checks on the Kubernetes resources. You can also ask BotKube to execute kubectl (https://www.kitploit.com/search/label/Kubectl) commands on k8s cluster which helps debugging (https://www.kitploit.com/search/label/Debugging) an application or cluster.
Hacktoberfest 2020
BotKube is participating in Hacktoberfest (https://www.kitploit.com/search/label/Hacktoberfest) 2020. We are giving some really cool swags to our contributors, learn more at - https://www.infracloud.io/blogs/infracloud-joins-hacktoberfest-2020/.
Getting started
Please follow this (https://www.botkube.io/installation/) for a complete BotKube installation guide.
Architecture
___________________________
@hacking_Attack
@Hacking_Video
Hacktoberfest 2020
BotKube is participating in Hacktoberfest (https://www.kitploit.com/search/label/Hacktoberfest) 2020. We are giving some really cool swags to our contributors, learn more at - https://www.infracloud.io/blogs/infracloud-joins-hacktoberfest-2020/.
Getting started
Please follow this (https://www.botkube.io/installation/) for a complete BotKube installation guide.
Architecture
___________________________
@hacking_Attack
@Hacking_Video
botkube.io
Collaborative Kubernetes AI Assistant | Botkube
Reliably lighten the Kubernetes Troubleshooting and Monitoring Workload for your DevOps and Developers.