Security: [0-day] heap overflow in vp8_encode_frame after frame re-sizing https://issues.chromium.org/issues/40073300
2023 CVE Data Review https://jerrygamblin.com/2024/01/03/2023-cve-data-review/
APT28: From Initial Damage to Domain Controller Threats in an Hour (CERT-UA#8399) https://medium.com/cyberscribers-exploring-cybersecurity/apt28-from-initial-damage-to-domain-controller-threats-in-an-hour-cert-ua-8399-1944dd6edcdf
Medium
APT28: From Initial Damage to Domain Controller Threats in an Hour (CERT-UA#8399)
Translation of the CERT-UA Alert and Technical Analysis
👍1
backdoor in upstream xz/liblzma leading to ssh server compromise https://www.openwall.com/lists/oss-security/2024/03/29/4 (check your systems and update ASAP)
🔥2
Bandook RAT Variant Resurfaces, Targeting Windows Machines https://www.leet.lat/threads/bandook-rat-variant-resurfaces-targeting-windows-machines.507/
Dark.charity
News - Bandook RAT Variant Resurfaces, Targeting Windows Machines
It's January 2024 and there is a new troublemaker in town! Meet Bandook, the sneaky remote access trojan that's causing a ruckus on Windows machines.
Exploiting n-day in Home Security Camera https://0xbigshaq.github.io/2024/01/05/tp-link-tapo-c100/
( ͡◕ _ ͡◕)👌
Exploiting n-day in Home Security Camera
❤1🔥1
CVE-2023-49070/51467 - Attacking & Defending Apache OFBiz https://www.prio-n.com/blog/cve-2023-49070-51467-attacking-defending-Apache-OFBiz
Deceptive Cracked Software Spreads Lumma Variant on YouTube https://www.fortinet.com/blog/threat-research/lumma-variant-on-youtube
Fortinet Blog
Deceptive Cracked Software Spreads Lumma Variant on YouTube
FortiGuard Labs uncovered a threat group using YouTube channels to spread Private .NET loader for Lumma Stealer 4.0. Learn more.…
CVE-2024-21633: MobSF Remote code execution (via CVE-2024-21633) https://github.com/0x33c0unt/CVE-2024-21633
GitHub
GitHub - 0x33c0unt/CVE-2024-21633: MobSF Remote code execution (via CVE-2024-21633)
MobSF Remote code execution (via CVE-2024-21633). Contribute to 0x33c0unt/CVE-2024-21633 development by creating an account on GitHub.
How I pwned half of America’s fast food chains, simultaneously. https://mrbruh.com/chattr/
Mrbruh
How I pwned half of America's fast food chains, simultaneously
How I pwned half of America’s fast food chains, simultaneously. Also checkout Eva’s blogpost of this event.
With an upbeat pling my console alerted me that my script had finished running, to be precise it was searching for exposed Firebase credentials on…
With an upbeat pling my console alerted me that my script had finished running, to be precise it was searching for exposed Firebase credentials on…
🥱1
Unauthenticated RCE in Adobe Coldfusion – CVE-2023-26360 https://blog.securelayer7.net/unauthorized-rce-in-adobe-coldfusion/
SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management
Unauthenticated RCE in Adobe Coldfusion – CVE-2023-26360
Overview CVE-2023-263060 was exploited in the wild in Adobe ColdFusion product, a commercial application server for rapid web application development. The vulnerability affects both the 2018 and...
Analysis of an Info Stealer — Chapter 2: The iOS App https://medium.com/@icebre4ker/analysis-of-an-info-stealer-chapter-2-the-ios-app-0529e7b45405
Medium
Analysis of an Info Stealer — Chapter 2: The iOS App
Introduction
The Role of the Control Flow Graph in Static Analysis https://nicolo.dev/en/blog/role-control-flow-graph-static-analysis/
nicolo.dev
The Role of the Control Flow Graph in Static Analysis
The flow control graph is an important building block in static program analysis for applying a variety of analyses that consider the flow of a program. The “flow”, described informally, represents the evolution of the program during execution time, that…
CVE-2023-41056: Redis Remote Code Execution Vulnerability https://securityonline.info/cve-2023-41056-redis-remote-code-execution-vulnerability/
Cybersecurity News
CVE-2023-41056: Redis Remote Code Execution Vulnerability
Rated 8.1 on the CVSS, CVE-2023-41056 is a serious threat that underscores the fragility of even the most secure systems
Dependency Confusions in Docker and remote pwning of your infra https://www.errno.fr/DockerDependencyConfusion
kasld: Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address as an unprivileged local user, for the purpose of bypassing Kernel Address Space Layout Randomization (KASLR). https://github.com/bcoles/kasld
GitHub
GitHub - bcoles/kasld: Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux…
Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address as an unprivileged local user, for the purpose of bypassing K...
Attack of the week: Airdrop tracing https://blog.cryptographyengineering.com/2024/01/11/attack-of-the-week-airdrop-tracing/
A Few Thoughts on Cryptographic Engineering
Attack of the week: Airdrop tracing
It’s been a while since I wrote an “attack of the week” post, and the fault for this is entirely mine. I’ve been much too busy writing boring posts about Schnorr signatures!…