API Management and DevOps: Integrate a flawless API DevOps lifecycle with these tips https://medium.com/devops-dudes/api-management-and-devops-1ffd1b5b88ae
Medium
API Management and DevOps
Integrate a flawless API DevOps lifecycle with these tips
Decompiling Node.js in Ghidra https://swarm.ptsecurity.com/decompiling-node-js-in-ghidra/
Nice tips » Common Security Issues in Financially-Oriented Web Applications: A guideline for penetration testers https://www.nccgroup.com/globalassets/our-research/uk/images/common_security_issues_in_financially-orientated_web.pdf.pdf
Highly recommended! » FAQ: Difference between vulnerability, exploit and CVE https://gynvael.coldwind.pl/?lang=en&id=734
gynvael.coldwind.pl
FAQ: Difference between vulnerability, exploit and CVE
Hacker's guide to deep-learning side-channel attacks: the theory https://elie.net/blog/security/hacker-guide-to-deep-learning-side-channel-attacks-the-theory
elie.net
Hacker's guide to deep-learning side-channel attacks: the theory | blog post
Learn the concepts behind deep-learning side-channels attack, a powerful cryptanalysis technique, by using it to recover AES cryptographic keys from a hardware device.
Linux Internals: How /proc/self/mem writes to unwritable memory https://offlinemark.com/2021/05/12/an-obscure-quirk-of-proc/
offlinemark
Linux Internals: How /proc/self/mem writes to unwritable memory - offlinemark
Introduction An obscure quirk of the /proc/*/mem pseudofile is its “punch through” semantics. Writes performed through this file will succeed even if the destination virtual memory is marked unwritable. In fact, this behavior is intentional and actively used…
Patch Tuesday, June 2021 https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/patch-tuesday-june-2021/
Trustwave
Patch Tuesday, June 2021
Summer is officially here and with it June's Patch Tuesday. This is a surprisingly light month with only 49 CVEs being patched and only five of those rated as "Critical". The list of "Critical" includes a Remote Code Execution (RCE) Microsoft's anti-malware…
I/O Rings – When One I/O Operation is Not Enough https://windows-internals.com/i-o-rings-when-one-i-o-operation-is-not-enough/
Exhaust EL1 memory from the app sandbox https://saaramar.github.io/iOS_memory_exhaustion_writeup/
Hunting for Suspicious Usage of Background Intelligent Transfer Service (BITS) https://blog.menasec.net/2021/05/hunting-for-suspicious-usage-of.html
Detecting and Mitigating CVE-2021-25737: EndpointSlice validation enables host network hijack https://sysdig.com/blog/cve-2021-25737-endpointslice/
Sysdig
Detecting and Mitigating CVE-2021-25737: EndpointSlice validation enables host network hijack – Sysdig
CVE-2021-25737 in Kubernetes kube-apiserver enables an authorised user to hijack pod traffic. Discover how it works, and how to mitigate it.
Good post to learn (and remember old times) >> Reversing Microsoft’s Windows95 Product Key Check Mechanism https://infosecwriteups.com/reversing-microsofts-windows95-product-key-check-mechanism-ca7e825014b6
Medium
Reversing Microsoft’s Windows95 Product Key Check Mechanism.
Reversing Microsoft’s Windows95 Product Key Check Mechanism A blast into the past to see what it took to be secure 25 years ago! Disclaimer Microsoft Windows95 is the registered property of …
Introducing Half-Double: New hammering technique for DRAM Rowhammer bug https://security.googleblog.com/2021/05/introducing-half-double-new-hammering.html
Google Online Security Blog
Introducing Half-Double: New hammering technique for DRAM Rowhammer bug
Research Team: Salman Qazi, Yoongu Kim, Nicolas Boichat, Eric Shiu & Mattias Nissler Today, we are sharing details around our discovery of ...
Nice reading » BIAS: Bluetooth Impersonation AttackS https://francozappa.github.io/about-bias/publication/antonioli-20-bias/antonioli-20-bias.pdf
macOS Big Sur 11.4 Addresses Vulnerability That Could Let Attackers Take Secret Screenshots https://www.macrumors.com/2021/05/24/macos-big-sur-11-4-malware-screenshots/
MacRumors
macOS Big Sur 11.4 Addresses Vulnerability That Could Let Attackers Take Secret Screenshots
macOS Big Sur 11.4, which was released this morning, addresses a zero-day vulnerability that could allow attackers to piggyback off of apps like...
My RCE PoC walkthrough for (CVE-2021–21974) VMware ESXi OpenSLP heap-overflow vulnerability https://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9
Medium
My RCE PoC walkthrough for (CVE-2021–21974) VMware ESXi OpenSLP heap-overflow vulnerability
Introduction
Building a malware analysis Lab: How to become a malware analysis hunter https://cybersecurity.att.com/blogs/security-essentials/building-a-home-lab-to-become-a-malware-hunter-a-beginners-guide
AT&T Cybersecurity
Building a malware analysis Lab: How to become a malware analysis hunter
As time goes by, criminals are developing more and more complex methods of obscuring how their malware operates, making it increasingly difficult to detect and analyze. The list of tactics used is seemingly endless and can include obfuscation, packers, executing…
COM Objects P.1: The Hidden Backdoor in Your System https://medium.com/maltrak/com-objects-p-1-the-hidden-backdoor-in-your-system-947ac4285e85
Medium
COM Objects P.1: The Hidden Backdoor in Your System
In the last few years, attackers have abused COM Objects to craft their Fileless attacks, evade defenses, bypass whitelisting, and even…
Cobalt Strikes Again: An Analysis of Obfuscated Malware https://www.huntress.com/blog/cobalt-strike-analysis-of-obfuscated-malware?utm_content=167704222&utm_medium=social&utm_source=twitter&hss_channel=tw-3330464153
Huntress
Cobalt Strikes Again: An Analysis of Obfuscated Malware
Join us for a threat hunting adventure as we analyze a suspicious run key that leads us to Cobalt Strike malware hidden across nearly 700 registry values.