Dynamic Analysis | Part 3

CRADLE is a new open-source web application for CTI analysts, offering collaborative note-taking, visual mapping, and report generation.

These are a collection of security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation

A stealthy campaign is persistently hacking ASUS routers via undocumented bypasses and CVE-2023-39780, building a backdoor network without malware.

Java applications face a critical risk! A flaw in Apache Commons BeanUtils (CVSS 8.8) can lead to arbitrary code execution. Update immediately.

Zanubis, a sophisticated Android malware, exploits Accessibility Services to steal banking data, intercept 2FA codes, and lock devices.

Threat actor UTG-Q-015 is escalating operations, using 0-days and watering hole attacks against government, finance, and AI in Asia.

A malware campaign is hijacking WordPress sites with fake Java update pop-ups, tricking visitors into downloading malicious executables.

A new campaign by UNC6032 uses fake AI video generator sites and social media ads to distribute a malware cocktail including STARKVEIL.

New campaigns by Silent Werewolf leverage custom C# loaders and advanced delivery to target entities in Russia and Moldova for cyber-espionage.

CHOICEJACKING, a new USB attack, bypasses existing JuiceJacking mitigations on Android and iOS by simulating user input via malicious chargers.

Attackers compromised an MSP's RMM tool (SimpleHelp) to deploy DragonForce ransomware across customer environments.

Katz Stealer, a new MaaS infostealer, targets browsers, crypto wallets, and Discord using advanced evasion and UAC bypass techniques.

The WordPress REST API exposes certain user information through public endpoints. Specifically, the endpoint: This information can aid attackers in further exploitation, such as brute force or…

A list of essential tools in your OSINT journey

How I leverage Google AI tool, #NotebookLM to quicken my understanding of Miva Open University Course: Cybersecurity Risk Analysis…

From aspiring to join IIT to being invited as a speaker, this journey is proof that hard work and passion can redefine dreams

SQLMap is a powerful open-source tool for finding and taking advantage of SQL injection vulnerabilities in web applications. If you’ve been…

When Google Isn’t Enough: Let’s Footprint Like Pros 🕵️‍♂️

When it comes to protecting data and infrastructure, cybersecurity leaders often debate two foundational philosophies: Zero Trust and Trust…

Di Part 2, kita telah mengupas tuntas tentang pentingnya pola pikir keamanan yang proaktif, beragam peran vital dalam tim cybersecurity…