Zero Trust — A Layered Approach against cyber threats — Part II https://jads.blog/zero-trust-a-layered-approach-against-cyber-threats-part-ii-ac12a4200d60
Medium
Zero Trust — Part II: A Layered Approach against cyber threats
This article will serve as a follow up to the Zero Trust primer ‘Zero Trust — An Introduction’. In this second part of the series, we’ll…
Detection of in-memory stealth techniques https://twitter.com/alonsocandado/status/1538930739798056960 https://github.com/joe-desimone/patriot
Twitter
Great job Joe!!
Another way to detect this technique is monitoring dynamic code(+WX) using Microsoft-Windows-Threat-Intelligence provider with EtwTiLogProtectExecVm or hooking nt!NtProtectVirtualMemory via EPT.
Another way to detect this technique is monitoring dynamic code(+WX) using Microsoft-Windows-Threat-Intelligence provider with EtwTiLogProtectExecVm or hooking nt!NtProtectVirtualMemory via EPT.
use after free in skipwhite in vim/vim https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba/
Reverse Engineering an old Mario & Luigi game for fun https://cybergeeks.tech/reverse-engineering-an-old-mario-luigi-game-for-fun/
“DogWalk”, nueva vulnerabilidad 0-day para Windows https://unaaldia.hispasec.com/2022/06/dogwalk-nueva-vulnerabilidad-0-day-para-windows.html
Una al Día
“DogWalk”, nueva vulnerabilidad 0-day para Windows
Se ha descurbierto una nueva vulnerabilidad para los Sistemas operativos Windows, la cual se le ha asignado el nombre de “DogWalk”.
How to detect the containers’ escape capabilities with Falco https://sysdig.com/blog/container-escape-capabilities-falco-detection/
Sysdig
How to detect the containers’ escape capabilities with Falco | Sysdig
With a tool like Falco, it’s possible to detect when specific container capabilities like CAP_SYS_ADMIN are misused.
How to stop Firefox from spamming your proxy tools like Burp/Fiddler with “detectportal.firefox.com” https://iamyuthan.medium.com/how-to-stop-firefox-from-spamming-your-proxy-tools-like-burp-fiddler-with-detectportal-firefox-com-7db7ce1de9a0
Medium
How to stop Firefox from spamming your proxy tools like Burp/Fiddler with “detectportal.firefox.com”
Stop Firefox from sending requests to Burp & Fiddler to the host “detectportal.firefox.com” with 3 simple steps.
Exploring a New Class of Kernel Exploit Primitive https://msrc-blog.microsoft.com/2022/03/22/exploring-a-new-class-of-kernel-exploit-primitive/
Microsoft
Exploring a New Class of Kernel Exploit Primitive | MSRC Blog
| Microsoft Security Response Center
| Microsoft Security Response Center
The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel…
Hacking into WordPress themes for CVEs and Fun https://medium.com/pentesternepal/hacking-into-wordpress-themes-for-cves-and-fun-bdde6c834344
Medium
Hacking into WordPress themes for CVEs and Fun.
Hi there! I hope all is well with you. In this writeup, I’ll discuss about the research I did on a WordPress theme, which taught me a lot…
Magnet Forensics June 2022 CTF - Linux https://www.forgottennook.com/2022/06/magnet-june-2022-ctf-linux.html
Forgottennook
Magnet Forensics June 2022 CTF - Linux
This CTF was hosted by Magnet Forensics and was held on June 15, 2022, from 3 PM - 6 PM EST. Two datasets were provided - a Linux box and an...
BRATA Android Malware Gains Advanced Mobile Threat Capabilities https://thehackernews.com/2022/06/brata-android-malware-gains-advanced.html
Trend Micro Cloud App Security Threat Report 2021 https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/trend-micro-cloud-app-security-threat-report-2021
Trendmicro
Trend Micro Cloud App Security Threat Report 2021
In this report, we highlight the notable email threats of 2021, including over 33.6 million high-risk email threats (representing a 101% increase from 2020’s numbers) that we’ve detected using the Trend Micro Cloud App Security platform.
Managing risk in blockchain deployments https://blog.trailofbits.com/2022/06/24/managing-risk-in-blockchain-deployments/
The Trail of Bits Blog
Managing risk in blockchain deployments
Do you need a blockchain? And if so, what kind? Trail of Bits has released an operational risk assessment report on blockchain technology. As more businesses consider the innovative advantages of blockchains and, more generally, distributed ledger technologies…
We're going on vacation, we'll be back in September. Have a good summer! https://media1.giphy.com/media/v1.Y2lkPWU4MjZjOWZjZDVoMmM0Y2Z2bjFnYmpldnc0dTI5YXUweWRkN3k0YzByMmNxdXBtYyZjdD1n/etn52ENYVnpxqMaXiT/200_s.gif
GIPHY
Pool Party Swimming GIF by The Dodo - Find & Share on GIPHY
For animal people.
Golang code review notes: Quick summary of some of the bug classes in Go https://www.elttam.com/blog/golang-codereview/
Elttam
Golang code review notes - elttam
elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.
CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed) https://www.rapid7.com/blog/post/2022/06/23/cve-2022-31749-watchguard-authenticated-arbitrary-file-read-write-fixed/
Rapid7
CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed) | Rapid7 Blog
[BugTales] UnZiploc: From 0-click To Platform Compromise https://labs.taszk.io/articles/post/unziploc/
labs.taszk.io
[BugTales] UnZiploc: From 0-click To Platform Compromise
Exploring remote OTA interfaces on HarmonyOS/Android to get RCE using logic bugs
Exploiting vulnerabilities in iOS Application https://lonewolf-raj.medium.com/exploiting-vulnerabilities-in-ios-application-cf5718910c47
Medium
Exploiting vulnerabilities in iOS Application
Hello Everyone, Here I’m going to share one of my findings which I got while enumerating iOS application, below are my findings and the…