Hacking Brightway scooters: A case study https://robocoffee.de/?p=436
Obfu[DE]scate: de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions https://github.com/user1342/Obfu-DE-Scate
GitHub
GitHub - user1342/Obfu-DE-Scate: Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify…
Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compar...
OrBit: advanced analysis of a Linux dedicated malware https://www.stormshield.com/news/orbit-analysis-of-a-linux-dedicated-malware/
Stormshield
OrBit malware: analysis of a threat to Linux | Stormshield
Stealer, backdoor, executable, dropper and library: a complete analysis of the OrBit malware with Stormshield's CTI team.
Logging strategies for security incident response https://aws.amazon.com/blogs/security/logging-strategies-for-security-incident-response/
Amazon
Logging strategies for security incident response | Amazon Web Services
Effective security incident response depends on adequate logging, as described in the AWS Security Incident Response Guide. If you have the proper logs and the ability to query them, you can respond more rapidly and effectively to security events. If a security…
Binarly Unveils Next-Gen Firmware Protection Transparency Platform, Revolutionizing Device Supply Chain Security https://www.businesswire.com/news/home/20230411005485/en/Binarly-Unveils-Next-Gen-Firmware-Protection-Transparency-Platform-Revolutionizing-Device-Supply-Chain-Security
BusinessWire
Binarly Unveils Next-Gen Firmware Protection Transparency Platform, Revolutionizing Device Supply Chain Security
Binarly today announced the general release of the Binarly Transparency Platform, delivering unprecedented transparency for device supply chains enabl
Shell in the Ghost: Ghostscript CVE-2023-28879 writeup https://offsec.almond.consulting/ghostscript-cve-2023-28879.html
Heads up! Xdr33, A Variant Of CIA’s HIVE Attack Kit Emerges https://blog.netlab.360.com/headsup_xdr33_variant_of_ciahive_emeerges/
360 Netlab Blog - Network Security Research Lab at 360
Heads up! Xdr33, A Variant Of CIA’s HIVE Attack Kit Emerges
Overview
On Oct 21, 2022, 360Netlab's honeypot system captured a suspicious ELF file ee07a74d12c0bb3594965b51d0e45b6f, which propagated via F5 vulnerability with zero VT detection, our system observces that it communicates with IP 45.9.150.144 using SSL…
On Oct 21, 2022, 360Netlab's honeypot system captured a suspicious ELF file ee07a74d12c0bb3594965b51d0e45b6f, which propagated via F5 vulnerability with zero VT detection, our system observces that it communicates with IP 45.9.150.144 using SSL…
Stepping Insyde System Management Mode https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
x64dbg XFG Marker Plugin: An x64dbg plugin which marks XFG call signatures as data https://github.com/m417z/x64dbg-xfg-marker
GitHub
GitHub - m417z/x64dbg-xfg-marker: An x64dbg plugin which marks XFG call signatures as data
An x64dbg plugin which marks XFG call signatures as data - m417z/x64dbg-xfg-marker
QueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/
Check Point Research
QueueJumper: Critical Unauthorized RCE Vulnerability in MSMQ Service
Check Point Research recently discovered three vulnerabilities in the "Microsoft Message Queuing" service, commonly known as MSMQ. These vulnerabilities were disclosed to Microsoft and patched in the April Patch Tuesday update. The most severe of these, dubbed…
Nokoyawa ransomware attacks with Windows zero-day https://securelist.com/nokoyawa-ransomware-attacks-with-windows-zero-day/109483/
Securelist
Nokoyawa ransomware attacks with Windows zero-day
In February 2023, we found a zero-day exploit, supporting different versions and builds of Windows, including Windows 11. This particular zero-day was used by a sophisticated cybercrime group that carries out ransomware attacks.
SecurePwn Part 2: Leaking Remote Memory Contents (CVE-2023-22897) https://www.rcesecurity.com/2023/04/securepwn-part-2-leaking-remote-memory-contents-cve-2023-22897/
Pretalx Vulnerabilities: How to get accepted at every conference https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference/
Sonarsource
Pretalx Vulnerabilities: How to get accepted at every conference
We recently discovered two vulnerabilities in pretalx and found a generic technique to gain code execution from a file write.
Finding Something New About CVE-2022-1388 https://vulncheck.com/blog/new-cve-2022-1388
VulnCheck
VulnCheck - Outpace Adversaries
Vulnerability intelligence that predicts avenues of attack with speed and accuracy.
Bypassing Windows Defender (10 Ways) https://www.fo-sec.com/articles/10-defender-bypass-methods
👍1
Remote Code Execution Vulnerability in Google They Are Not Willing To Fix https://giraffesecurity.dev/posts/google-remote-code-execution/
IPFS-tiny: attempting to take IPFS to Space https://libre.space/2023/04/12/ipfs-tiny/
Libre Space Foundation
IPFS-tiny: attempting to take IPFS to Space - Libre Space Foundation
IPFS-tiny attempts to take IPFS to space. It is an attempt made by Libre Space Foundation to make IPFS truly InterPlanetary.
nice repository » Gather and update all available and newest CVEs with their PoC https://github.com/trickest/cve
GitHub
GitHub - trickest/cve: Gather and update all available and newest CVEs with their PoC.
Gather and update all available and newest CVEs with their PoC. - trickest/cve
CVE-2019-8372: Local Privilege Elevation in LG Kernel Driver https://jackson_t.gitlab.io/lg-driver-lpe.html