Workshop on Binary Analysis Research (BAR) 2020 at NDSS
π£mttd
It would be nice to have the slides of the invited talks as well.
π€XVilka
π@malwr
π£mttd
It would be nice to have the slides of the invited talks as well.
π€XVilka
π@malwr
ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia
π£quellaman
π@malwr
π£quellaman
π@malwr
Security Affairs
ObliqueRAT, a new malware employed in attacks on government targets
Cisco Talos researchers discovered a new malware, tracked as ObliqueRAT, that was employed targeted attacks against organizations in Southeast Asia.
Tutorial: Archive Azure AD logs to an Azure storage account
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-azure-monitor-route-logs-to-storage-account
π£digicat
π@malwr
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-azure-monitor-route-logs-to-storage-account
π£digicat
π@malwr
Docs
How to archive activity logs to a storage account - Microsoft Entra ID
Learn how to archive Microsoft Entra activity logs to a storage account through Diagnostic settings.
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. (Note: it is designed to alert offense to defensive 'enquiries')
π£digicat
π@malwr
π£digicat
π@malwr
GitHub
GitHub - outflanknl/RedELK: Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as wellβ¦
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. - outflanknl/RedELK
CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
π£RedmondSecGnome
π@malwr
π£RedmondSecGnome
π@malwr
Zero Day Initiative
Zero Day Initiative β CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
This most recent Patch Tuesday, Microsoft released an Important-rated patch to address a remote code execution bug in Microsoft Exchange Server. This vulnerability was reported to us by an anonymous researcher and affects all supported versions of Microsoftβ¦
Defeating a Laptop's BIOS Password
π£PowerOfLove1985
Remove the battery. Done.
π€smash_the_stack
π@malwr
π£PowerOfLove1985
Remove the battery. Done.
π€smash_the_stack
π@malwr
GitHub
reblog/0000-defeating-a-laptops-bios-password/README.md at main Β· skysafe/reblog
SkySafe Miscellaneous Reverse Engineering Blog. Contribute to skysafe/reblog development by creating an account on GitHub.
North Korea Is Recycling Mac Malware
π£CodePerfect
The great Best Korea is putting the environment first, even when it comes to software.
World leading!
π€Samreinod
π@malwr
π£CodePerfect
The great Best Korea is putting the environment first, even when it comes to software.
World leading!
π€Samreinod
π@malwr
Wired
North Korea Is Recycling Mac Malware. That's Not the Worst Part
Lazarus Group hackers have long plagued the internetβusing at least one tool they picked up just by looking around online.
GWTUpload - vulnerability allowing to abuse the upload process and cause a total denial-of-service of a web server.
π£logicaltrust-net
π@malwr
π£logicaltrust-net
π@malwr
Security Audits, Penetration Tests - LogicalTrust
LogicalTrust - Blog - [EN] A-Z: GWTUpload - DoS
GWT is a Java web framework and GWTUpload is a library extending it with easier file upload.
We found a vulnerability allowing to abuse the upload process and cause a denial-of-service of a web application.
We found a vulnerability allowing to abuse the upload process and cause a denial-of-service of a web application.
BKAV Professional Internet Security - Arbitrary File Deletion Feature
https://swapcontext.blogspot.com/2020/02/bkav-arbitrary-file-deletion-feature.html
π@malwr
https://swapcontext.blogspot.com/2020/02/bkav-arbitrary-file-deletion-feature.html
π@malwr
Blogspot
BKAV - Arbitrary File Deletion Feature
Today post is a continuation of journey into the wonderful world of so called "security solutions" full of programming unicorns and other ki...