Dark Reading: Attacks/Breaches
Dealers Report Dramatic Increase in Identity Fraud: Most Lack Effective Protection

Identity fraud has increased at 84% of dealerships, with 60% losing three or more vehicles in the last year.

Dark Reading: Attacks/Breaches
As Vulnerabilities Soar, Slim.AI Launches 'Container Intelligence' to Give In-Depth Analysis on Hundreds of Popular Container Images

Free service provides insights developers need to systematically identify and reduce container vulnerabilities.

Dark Reading: Attacks/Breaches
Duality Launches First Ever Enterprise-Ready Privacy-Enhanced Data Collaboration Platform

Platform delivers unmatched performance, broad analysis capabilities, and governance across any data, geo, or cloud.

Dark Reading: Attacks/Breaches
Financial Services Firms Operating Under False Sense of Security

Trend Micro research finds most are over-confident about ability to withstand ransomware.

Dark Reading: Attacks/Breaches
Palo Alto Networks NextWave Program Provides the Threat Response Community With XDR for Incident Response Fueled by MSSP Demand

Driving better security outcomes for customers through partner-delivered incident response services built on Cortex XDR.

Dark Reading: Attacks/Breaches
US Employees Feel Little Concern for Data Theft at Work, New Research Reveals

.

Dark Reading: Attacks/Breaches
Akamai Announces Next Generation DDoS Defense Platform

Upgrade boosts Akamai's dedicated mitigation capacity by 100% and enhances attack fighting capabilities for increasingly sophisticated DDoS threats.

Dark Reading: Attacks/Breaches
Spyderbat Announces Open Source Program for Cloud Native Visibility and Security

Open source tools by Spyderbat address the needs of Platform Engineering and DevOps teams by delivering new insights to workload activities and behaviors.

Dark Reading: Attacks/Breaches
Illusive's Identity Threat Detection and Response (ITDR) Solution Protects Privileged Accounts

New release extends best-in-class coverage of identity vulnerability discovery and remediation.

Dark Reading: Attacks/Breaches
AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

.

Hacking on Medium
HTTP request smuggling Explained and Exploited Part 0x3

https://cdn-images-1.medium.com/max/1170/0*sVhSM5o18Oi0cK0H.jpg
Hi! My name is Hashar Mujahid, and today we will continue to discuss what HTTP request smuggling vulnerabilities are and how we can…

Continue reading on InfoSec Write-ups »

Hacking on Medium
The 5 mayor crypto hacks of 2022

https://cdn-images-1.medium.com/max/730/1*tLByBSZaEUEAFHC-bMpWqg.jpeg
Every day. If you want to be the best, you have to be the best every day. In smart contract security, that’s a must. Every day hackers try…

Continue reading on CoinsBench »

Hacking on Medium
Top Cyber Attacks Used by Hackers in 2022

https://cdn-images-1.medium.com/max/2600/1*PY9nByRuVnhXsCvYeiZ9LQ.jpeg
Originally published on Learnhub Blog by Cyril Osagie

Continue reading on Medium »

Hacking on Medium
5 Must-Hit Sleep Tactics for Zombie Pharmacists

https://cdn-images-1.medium.com/max/2600/0*1sGN14dDUhheAs4F
Here’s what a zombie looks like: a decade ago, my wife and I brought home our first baby. Not the baby, us. Two zombies. In the lack of…

Continue reading on In Fitness And In Health »

KitPloit - PenTest Tools!
Mangle - Tool That Manipulates Aspects Of Compiled Executables (.Exe Or DLL) To Avoid Detection From EDRs

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5c46_nTyHbdBAxoWUtPRPC1IT69t42mlHIB-tnP3FT4cpHi7AgoKcl00n89_vMQLXC75z1RLT5D9LL2GIUTonGxIfhFJF5lY2wPZ2Y_GC-yeqxM_xpSPSjhWPdNJ_9r7yAQT9z7tilpTi6-oI0eGkJm4e4cl8rn96ISpGlItgipttYDkBozoCaiwvyw/w494-h640/Mangle_1_logo.png Authored By Tyl0usFeatured at Source Zero Con 2022Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners. ContributingMangle was developed in Golang. InstallThe first step, as always, is to clone the repo. Before you compile Mangle, you'll need to install the dependencies. To install them, run the following commands: go get github.com/Binject/debug/pe Then build it go build Mangle.go ImportantWhile Mangle is written in Golang, a lot of the features are designed to work on executable files from other languages. At the time of release, the only feature that is Golang specific is the string manipulation part. Usage./mangle -h

_____ .__
/ \ _____ ____ ____ | | ____
/ \ / \\__ \ / \ / ___\| | _/ __ \
/ Y \/ __ \| | \/ /_/ > |_\ ___/
\____|__ (____ /___| /\___ /|____/\___ >
\/ \/ \//_____/ \/
(@Tyl0us)
Usage of ./Mangle:
-C string
Path to the file containing the certificate you want to clone
-I string
Path to the orginal file
-M Edit the PE file to strip out Go indicators
-O string
The new file name
-S int
How many MBs to increase the file by StringsMangle takes the input executable and looks for known strings that security products look for or alert on. These strings alone are not the sole point of detection. Often, these strings are in conjunction with other data points and pieces of telemetry for detection and prevention. Mangle finds these known strings and replaces the hex values with random ones to remove them. IMPORTANT: Mangle replaces the exact size of the strings it’s manipulating. It doesn’t add any more or any less, as this would create misalignments and instabilities in the file. Mangle does this using the -Mcommand-line option.

Currently, Mangle only does Golang files but as time goes on other languages will be added. If you know of any for other languages, please open an issue ticket and submit them. Beforehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnttttUBg4eFz8NqeI10YjWJZmTGB2i_E9zBDd17CdrNo7gXoNCT-w7yD7-tvsw1nltX8CEal56oTj_dNvfAMh5Lji5TR6Rm8_ztxRavGcjEbtnoRF0XBaZ1qyB1ekg3XtzbRAe6KGyA3VD5GhnM9FlY7Z2-2UUF-tIpE_2m34W-fsJ7mIYmqpOFywkQ/w640-h142/Mangle_2_Strings_Before.png Afterhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTcD29a1Cy_1eSqo5LrOTc1hBi5jroiNVIHW-8QI6SmyzdBvrzXHAdOGO3uE88AfItr0SlUgxXoKEY_zaLBrY9acBkS5opTh_qBU8bKHuDGYz135AzmN-Cu3FRZT8nI5tivonS-CSzzPIcXJSXVO752CQ-RravgrPS4IQAzRcJ3bo2lpCJvOkL_CqAgw/w640-h100/Mangle_3_Strings_After.png InflatePretty much all EDRs can’t scan both on disk or in memory files beyond a certain size. This simply stems from the fact that large files take longer to review, scan, or monitor. EDRs do not want to impact performance by slowing down the user's productivity. Mangle inflates files by creating a padding of Null bytes (Zeros) at the end of the file. This ensures that nothing inside the file is impacted. To inflate an executable, use the -Scommand-line option along with the number of bytes you want to add to the file. Large payloads are really not an issue an[...]

ymore with how fast Internet speeds are, that being said, it's not recommended to make a 2 gig file.

Based on test cases across numerous userland and kernel EDRs, it is recommended to increase the size by either 95-100 megabytes. Because vendors do not check large files, the activity goes unnoticed, resulting in the successful execution of shellcode. Example:https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsmMexlN01H-wwtSaHLrAUgECYruYthXiyM4O4Sy_DsihusplovCkK1fVSNfXOAG14jhBnQG_fbj0D6EeX89SVvCdTXCXflOiPeFjepf4PnjvPT5KsAaAOJGxtuhMRQOKgOFs5k-wXiHSdLggK6vdERlWRtGMPsTs_9Nmd6TWJVH_3XgejbigrLJbr2Q/w640-h268/Mangle_4_Demo.gif CertificateMangle also contains the ability to take the full chain and all attributes from a legitimate code-signing certificate from a file and copy it onto another file. This includes the signing date, counter signatures, and other measurable attributes.

While this feature may sound similar to another tool I developed, Limelighter, the major difference between the two is that Limelighter makes a fake certificate based off a domain and signs it with the current date and time, versus using valid attributes where the timestamp is taken from when the original file. This option can use DLL or .exe files to copy using the -Ccommand-line option, along with the path to the file you want to copy the certificate from. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYTfA6m3i7I3Fvq4SL2prtwRzPSCeHB5_5apT3e2lnP72p0vFMvsivo_vbRES2gFlhvmvFpDpxURTL051smEu1s9NBTfmuPjpBYyz2q4UPG5xp0-ygFQUWNEXzYCjJ3zxfUb2TD7xtUVvC5BSmzznaVHFKgIorbhl3xdpy-2ZmhkAHHeC0fRnWZn4RJQ/w640-h474/Mangle_5_Cert_Copy.png Credit* Special thanks to Jessica of SuperNovasStore for creating the logo.
* Special thanks to Binject for his repo Download Mangle