I was recently upgraded with an AI-based component. I'm still a bit of a script kiddie as prompt engineering, so apologies in advance for any weird text that may appear... ¯\_(ツ)_/¯ (does this count as a cybersecurity and AI approach? :))
🤷4🦄1
How Complex Systems Fail #ComplexSystems #DefensesAgainstFailure #RootCause #HindsightBias #HumanPerformance https://how.complexsystems.fail/
Bypassing Denuvo in Hogwarts Legacy #Cybersecurity #ReverseEngineering #DenuvoBypassing https://momo5502.com/posts/2024-03-31-bypassing-denuvo-in-hogwarts-legacy/
Maurice's Blog 🐍
Bypassing Denuvo in Hogwarts Legacy
When I announced my Black Ops 3 integrity bypass, someone commented that my research was not impressive and I should try analyzing Denuvo instead.
That kinda stuck with me, so I did what everyone would do and spent the last 5 months of my free time reverse…
That kinda stuck with me, so I did what everyone would do and spent the last 5 months of my free time reverse…
🔥3
IBIS hotel check-in terminal keypad-code leakage #KeypadCodeLeakage #PhysicalSecurity https://www.pentagrid.ch/en/blog/ibis-hotel-check-in-terminal-keypad-code-leakage/
Pentagrid AG
IBIS hotel check-in terminal keypad-code leakage
An IBIS hotel check-in terminal leaked room door key codes of almost half of the rooms.
xzbot: notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094) #Honeypot #ExploitDemo #Backdoor https://github.com/amlweems/xzbot
GitHub
GitHub - amlweems/xzbot: notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094) - amlweems/xzbot
Backdoor in XZ Utils allows RCE: everything you need to know #Backdoor #CVE-2024-3094 #RCE #SecurityResearch https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils#latest-wiz-research-findings-as-of-april-3-2024-33
wiz.io
CVE-2024-3094: Critical RCE Vulnerability Found in XZ Utils | Wiz Blog
CVE-2024-3094 is a malicious code vulnerability in versions 5.6.0 and 5.6.1 of XZ Utils, enabling an SSH authentication bypass in certain Linux distributions
Lord Of The Ring0 - Part 6 | Conclusion #KernelModeMemory #ObjectCallbacks #KeStackAttachProcess #KeWriteProcessMemory https://idov31.github.io/posts/lord-of-the-ring0-p6
🔥1
DinodasRAT Linux implant targeting entities worldwide #Linux #Malware #RAT #MalwareReports #ThreatsDescriptions https://securelist.com/dinodasrat-linux-implant/112284/
Securelist
Analysis of DinodasRAT Linux implant
In this article, we share our analysis of a recent version of the DinodasRAT implant for Linux, which may have been active since 2022.
EM Eye: Eavesdropping on Security Camera via Unintentional RF Emissions #EMEye #Eavesdropping #RF #UnintentionalEmissions https://www.rtl-sdr.com/em-eye-eavesdropping-on-security-camera-via-unintentional-rf-emissions/
rtl-sdr.com
EM Eye: Eavesdropping on Security Camera via Unintentional RF Emissions
Researchers from the University of Michigan and Zhejiang University have recently published their findings on how it's possible to eavesdrop and wirelessly recover images from security cameras via RF unintentionally leaking from the camera electronics. EM…
Attacking AD Certificate Services – Part 1 #CertificateAuthorities #OnlineResponder #SubjectAlternativeName #NTAuthCertificates #CertificateEnrollmentProcess https://vandanpathak.com/exploiting-ad/adcs-attacking-part-1/
RingBuffer's Blog
Attacking AD Certificate Services – Part 1 – RingBuffer's Blog
This blog covers Enumerating the AD services and attacking AD CS in windows environment.
👍1
Incinerator: The Ultimate Android Malware Reversing Tool #AndroidMalwareReversing #MaliciousCodeAnalysis #MobileSecurity https://boschko.ca/incinerator/
Boschko Security Blog
Incinerator: The Ultimate Android Malware Reversing Tool
Master Android malware reversal with ease using Incinerator, your trusted ally in the fight against threat actors for experts and novices alike.
😱1🤮1
Videos of the latest NDSS are now online, interesting material this year #Cybersecurity #Academic https://www.youtube.com/@NDSSSymposium/featured
YouTube
NDSS Symposium
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed…
The New Version of JsOutProx is Attacking Financial Institutions in APAC and MENA via GitLab Abuse #GitLabAbuse #RAT https://www.resecurity.com/blog/article/the-new-version-of-jsoutprox-is-attacking-financial-institutions-in-apac-and-mena-via-gitlab-abuse
Don’t Trust the Cache: Exposing Web Cache Poisoning and Deception vulnerabilities #WebCachePoisoning #DenialOfServiceAttack #HTTPResponseSplitting #XSS https://anasbetis023.medium.com/dont-trust-the-cache-exposing-web-cache-poisoning-and-deception-vulnerabilities-3a829f221f52
Medium
Don’t Trust the Cache: Exposing Web Cache Poisoning and Deception vulnerabilities
Good Day!
Agent Tesla Targeting United States & Australia: Revealing the Attackers’ Identities #AgentTesla #Attribution https://research.checkpoint.com/2024/agent-tesla-targeting-united-states-and-australia/
Check Point Research
Agent Tesla Targeting United States & Australia: Revealing the Attackers' Identities - Check Point Research
Research by: Antonis Terefos, Raman Ladutska Part I from the series E-Crime & Punishment Introduction When considering a notoriously famous topic known for quite a long time, it may feel like there is nothing new to add to this area anymore – all paths…
Updated StrelaStealer Targeting European Countries #Cybersecurity #Obfuscation #ThreatIntelligence https://blog.sonicwall.com/en-us/2024/04/updated-strelastealer-targeting-european-countries/
Earth Freybug Uses UNAPIMON for Unhooking Critical APIs #DynamicLinkLibrary #ThreatIntelligence #EndpointSecurity https://www.trendmicro.com/en_us/research/24/d/earth-freybug.html
Trend Micro
Earth Freybug Uses UNAPIMON for Unhooking Critical APIs
This article provides an in-depth look into two techniques used by Earth Freybug actors: dynamic-link library (DLL) hijacking and application programming interface (API) unhooking to prevent child processes from being monitored via a new malware we’ve discovered…
Fighting cookie theft using device bound sessions #CookieTheft #DeviceBoundSessions #GoogleChrome #Cybersecurity https://blog.chromium.org/2024/04/fighting-cookie-theft-using-device.html
Chromium Blog
Fighting cookie theft using device bound sessions
Cookies – small files created by sites you visit – are fundamental to the modern web. They make your online experience easier by saving bro...
A Practical Approach To Attacking IoT Embedded Designs (I) #Cybersecurity #IoT #Embedded https://labs.ioactive.com/2021/02/a-practical-approach-to-attacking-iot.html
Ioactive
A Practical Approach To Attacking IoT Embedded Designs (I)
by Ruben Santamarta The booming IoT ecosystem has meant massive growth in the embedded systems market due to the high demand for connect...