Patch Tuesday, June 2021 https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/patch-tuesday-june-2021/
Trustwave
Patch Tuesday, June 2021
Summer is officially here and with it June's Patch Tuesday. This is a surprisingly light month with only 49 CVEs being patched and only five of those rated as "Critical". The list of "Critical" includes a Remote Code Execution (RCE) Microsoft's anti-malware…
I/O Rings – When One I/O Operation is Not Enough https://windows-internals.com/i-o-rings-when-one-i-o-operation-is-not-enough/
Exhaust EL1 memory from the app sandbox https://saaramar.github.io/iOS_memory_exhaustion_writeup/
Hunting for Suspicious Usage of Background Intelligent Transfer Service (BITS) https://blog.menasec.net/2021/05/hunting-for-suspicious-usage-of.html
Detecting and Mitigating CVE-2021-25737: EndpointSlice validation enables host network hijack https://sysdig.com/blog/cve-2021-25737-endpointslice/
Sysdig
Detecting and Mitigating CVE-2021-25737: EndpointSlice validation enables host network hijack – Sysdig
CVE-2021-25737 in Kubernetes kube-apiserver enables an authorised user to hijack pod traffic. Discover how it works, and how to mitigate it.
Good post to learn (and remember old times) >> Reversing Microsoft’s Windows95 Product Key Check Mechanism https://infosecwriteups.com/reversing-microsofts-windows95-product-key-check-mechanism-ca7e825014b6
Medium
Reversing Microsoft’s Windows95 Product Key Check Mechanism.
Reversing Microsoft’s Windows95 Product Key Check Mechanism A blast into the past to see what it took to be secure 25 years ago! Disclaimer Microsoft Windows95 is the registered property of …
Introducing Half-Double: New hammering technique for DRAM Rowhammer bug https://security.googleblog.com/2021/05/introducing-half-double-new-hammering.html
Google Online Security Blog
Introducing Half-Double: New hammering technique for DRAM Rowhammer bug
Research Team: Salman Qazi, Yoongu Kim, Nicolas Boichat, Eric Shiu & Mattias Nissler Today, we are sharing details around our discovery of ...
Nice reading » BIAS: Bluetooth Impersonation AttackS https://francozappa.github.io/about-bias/publication/antonioli-20-bias/antonioli-20-bias.pdf
macOS Big Sur 11.4 Addresses Vulnerability That Could Let Attackers Take Secret Screenshots https://www.macrumors.com/2021/05/24/macos-big-sur-11-4-malware-screenshots/
MacRumors
macOS Big Sur 11.4 Addresses Vulnerability That Could Let Attackers Take Secret Screenshots
macOS Big Sur 11.4, which was released this morning, addresses a zero-day vulnerability that could allow attackers to piggyback off of apps like...
My RCE PoC walkthrough for (CVE-2021–21974) VMware ESXi OpenSLP heap-overflow vulnerability https://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9
Medium
My RCE PoC walkthrough for (CVE-2021–21974) VMware ESXi OpenSLP heap-overflow vulnerability
Introduction
Building a malware analysis Lab: How to become a malware analysis hunter https://cybersecurity.att.com/blogs/security-essentials/building-a-home-lab-to-become-a-malware-hunter-a-beginners-guide
AT&T Cybersecurity
Building a malware analysis Lab: How to become a malware analysis hunter
As time goes by, criminals are developing more and more complex methods of obscuring how their malware operates, making it increasingly difficult to detect and analyze. The list of tactics used is seemingly endless and can include obfuscation, packers, executing…
COM Objects P.1: The Hidden Backdoor in Your System https://medium.com/maltrak/com-objects-p-1-the-hidden-backdoor-in-your-system-947ac4285e85
Medium
COM Objects P.1: The Hidden Backdoor in Your System
In the last few years, attackers have abused COM Objects to craft their Fileless attacks, evade defenses, bypass whitelisting, and even…
Cobalt Strikes Again: An Analysis of Obfuscated Malware https://www.huntress.com/blog/cobalt-strike-analysis-of-obfuscated-malware?utm_content=167704222&utm_medium=social&utm_source=twitter&hss_channel=tw-3330464153
Huntress
Cobalt Strikes Again: An Analysis of Obfuscated Malware
Join us for a threat hunting adventure as we analyze a suspicious run key that leads us to Cobalt Strike malware hidden across nearly 700 registry values.
Malware Analysis Series - Part 2, How to Isolate our Homelab with Network Segmentation https://blog.openthreatresearch.com/how_to_isolate_homelab
Open Threat Research Blog
Malware Analysis Series - Part 2, How to Isolate our Homelab with Network Segmentation
Introduction: In part one of this series, we established a solid foundation to begin our malware analysis journey. We successfully stood up two VMs; a Windows(FLARE) machine and a Linux(REMnux) machine. Put them on their own isolated virtual network without…
CVE-2021-33564 Argument Injection in Ruby Dragonfly https://zxsecurity.co.nz/research/argunment-injection-ruby-dragonfly/
zxsecurity.co.nz
Ruby Dragonfly - ZX Security
Full spectrum IT security services
Nice analysis » What EDRs Hook on Microsoft Windows i.e. where the gaps exist in terms of telemetry / detection coverage https://www.reddit.com/r/blueteamsec/comments/n8fufb/what_edrs_hook_on_microsoft_windows_ie_where_the
reddit
What EDRs Hook on Microsoft Windows i.e. where the gaps exist in...
Posted in r/blueteamsec by u/digicat • 105 points and 7 comments
Know Your Enemy: Exploiting the Dell BIOS Driver Vulnerability to Defend Against It https://www.crowdstrike.com/blog/cve-2021-21551-learning-through-exploitation/
CrowdStrike.com
CVE-2021-21551: Learning Through Exploitation | CrowdStrike
Using CVE-2021-21551 as an example, learn how adversaries approach weaponizing vulnerabilities, and the technologies that work best to mitigate their tactics.
Advisory X41-2021-002: nginx DNS Resolver Off-by-One Heap Write Vulnerability https://x41-dsec.de/lab/advisories/x41-2021-002-nginx-resolver-copy/
X41 D-Sec - Penetration Tests and Source Code Audits
nginx DNS Resolver Off-by-One Heap Write Vulnerability
An off-by-one error in ngx_resolver_copy() while processing DNS responses allows a network attacker to write a dot character (‘.’, 0x2E) out of bounds in a heap allocated buffer.