144Articles
8Categories
2023-08-28Date
🐛
Analysis of RAR Exploit Files (CVE-2023-38831), (Mon, Aug 28th)
🐛
Busybox cpio directory traversal vulnerability (CVE-2023-39810)
🐛
Attacks on Citrix NetScaler systems linked to ransomware actor
⚠️
Customizing LLMs for domain-specific tasks
⚠️
Adapting authentication to a cloud-centric landscape
⚠️
Cisco Nexus 3000 and 9000 Series Switches Flaw Let Attackers Trigger DoS Attack
⚠️
How international cybersecurity frameworks can help CISOs
⚠️
PoC for no-auth RCE on Juniper firewalls released
⚠️
Remotely Stopping Polish Trains
⚠️
Researchers Discover Reply URL Takeover Flaw in Azure
⚠️
London's Metropolitan Police Service Probes Cyber Intrusion at One of its Suppliers
⚠️
Cyberattacks Targeting E-commerce Applications
⚠️
Software Industry Urged to Assume Risk on Open Source Security
⚠️
CISA Touts ‘Tremendous Growth’ in Vulnerability Disclosure Platform
⚠️
What software should be patched first | Kaspersky official blog
⚠️
Cyberthreats are taking center field
⚠️
Four common password mistakes hackers love to exploit
⚠️
Exploit released for Juniper firewall bugs allowing RCE attacks
⚠️
DEF CON 29 - Joseph Gabay - DoS Denial of Shopping Analyzing and Exploiting Physical Shopping Cart
⚠️
Intern in a company - need help :)
⚠️
Vulnerability Scanning in subnets
⚠️
i'm bothered by this : ) .....
⚠️
Lockbit Variants on the Rise
⚠️
SPA-Cart eCommerce CMS 1.9.0.3 Cross Site Scripting
⚠️
SPA-Cart eCommerce CMS 1.9.0.3 SQL Injection
⚠️
PoC for Unauthenticated RCE on Juniper Networks Firewalls Released
⚠️
Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege
⚠️
UAC Token-Filtering - MS Security Guide” ADMX and ADML files - GPO
⚠️
EveryDay Carry software (Cybersecurity).
⚠️
Stressed Out and Overwhelmed, SecOps Teams Struggle to Keep Up
⚠️
Who Comes Up with this Stuff? Interviewing Authors to Understand How They Produce Security Advice
⚠️
Cyber-awareness education is a change-management initiative
⚠️
The Art & Science of Metawar - Winn Schwartau - BSW #318
⚠️
Trying to create a cybersecurity newsletter and need help
📋
Vital iPhone security updates could be blocked by proposed UK surveillance rules
📢
Hacking the future: Notes from DEF CON’s Generative Red Team Challenge
📢
Kroll SIM-swap attack: FTX, BlockFi and Genesis clients’ info exposed
📢
IBM security advisory (AV23-506)
📢
Dell security advisory (AV23-505)
📢
Microsoft Edge security advisory (AV23-507)
📢
Critical digital infrastructure: Why societies are becoming so vulnerable to cyberattacks | DW Techtopia
📢
haraj 1.1 Add Administrator
📢
Red Hat Security Advisory 2023-4769-01
📢
Debian Security Advisory 5483-1
📢
Debian Security Advisory 5484-1
📢
MalDoc in PDF - Detection bypass by embedding a malicious Word file into a PDF file
📢
Free MFA Solutions for Google Accounts that doesn't require personal cell phone use
📢
Cyber Students - Industry, Success, and Failures
🔥
Ready to enhance your continuous assessment efforts? Meet PlexTrac
🔥
Cyber Security Today, August 28, 2023 -- SIM card swap led to a Kroll data breach, supplier hack led to a London police data theft, and more
🔥
3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack
🔥
Leaked LockBit 3.0 Ransomware Builder Used by Multiple Actors
🔥
Hackers Disruptred Poland’s Railway System Signals
🔥
Leaseweb Reports Cloud Disruptions Due to Cyberattack
🔥
Ohio History Organization Says Personal Information Stolen in Ransomware Attack
🔥
Met Police Officers at Risk After Serious Data Breach
🔥
Brazilian Phone Spyware was Hacked and Victims’ Devices ‘Deleted’ From Server
🔥
3 Malware Loaders Detected in 80% of Attacks: Security Firm
🔥
Advanced analytics can help detect insider threats rapidly
🔥
Hacking Group Kittensec Claims to ‘Pwn Anything We See’ to Expose Corruption
🔥
Profile: TA505 / CL0P ransomware
🔥
Profile: ALPHV/BlackCat ransomware
🔥
10 Million Likely Impacted by Data Breach at French Unemployment Agency
🔥
Mom’s Meals service discloses data breach impacting 1.2 million
🔥
Leaseweb Reports Cloud Disruptions Due to Cyberattack
🔥
LockBit Code Leak Sparks Wave Of RaaS Attacks
🔥
3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack
🔥
Mom’s Meals discloses data breach impacting 1.2 million people
🔥
HTML Smuggling Leads to Domain Wide Ransomware
🔥
A Brazilian phone spyware was hacked and victims’ devices ‘deleted’ from server
🔥
‘Incredible concern and anger’ among Metropolitan Police after hackers breach data
🔥
Lockbit 3.0 Builder Leaked: Anyone Can Blend Ransomware
🔥
Mom’s Meals Service Discloses Data Breach Impacting 1.2 Million People
🔥
messed up on my first real incident response... (HELP)
🔥
HTML Smuggling Leads to Domain Wide Ransomware
🔥
Spain warns of LockBit Locker ransomware phishing attacks
🔥
Ransomware Attack Cleanup Costs: $10M So Far for Rackspace
🔥
DFIR Analyst Seeking New Opportunities in Cybersecurity
🔥
Incident Response: Clouds, SMBs, and more! | News - PSW797
🔥
Simplify Your Audit Process | Enterprise News | Black Hat Executive Interviews - ESW330
🕵️
ISC Stormcast For Monday, August 28th, 2023 https://isc.sans.edu/podcastdetail/8634, (Mon, Aug 28th)
🕵️
Experts demand clarity as they struggle with cloud security prioritization
🕵️
What true diversity in the cybersecurity industry looks like
🕵️
Uncovering a privacy-preserving approach to machine learning
🕵️
Polish Authorities Investigate Hacking Attack on Local Railways
🕵️
Black Hat Fireside Chat: How to achieve API security — as AI-boosted attacks intensify
🕵️
Two Men Arrested Following Poland Railway Hacking
🕵️
Trends in Business Email Compromise
🕵️
Signs of Malware Attack Targeting Rust Developers Found on Crates.io
🕵️
Mentorship Monday - Discussions for career and learning!
🕵️
Raise pushed back 6-7 months after getting CISSP
🕵️
Kali Linux Tools
🕵️
Green Dot Bank and ACH/direct deposit fraud attempts
🕵️
Pcap analyzer version 2
🕵️
CISCO WLCs and APs VA and config scan
🕵️
Mentorship Monday - Post All Career, Education and Job questions here!
🕵️
FlightPath LMS 5.0-rc2 Cross Site Scripting
🕵️
Global Domains International 2.0 Cross Site Scripting
🕵️
Gusto Recipes Management 1.5.1 Cross Site Scripting
🕵️
HaasCMS 1.0 Cross Site Scripting
🕵️
Hasan MWB 1 Cross Site Scripting
🕵️
Hesk Rtl CMS 1 Cross Site Scripting
🕵️
Hospital HMS 2 SQL Injection
🕵️
Hospital HMS 2.7 SQL Injection
🕵️
HighPlus CMS 0.1.3 SQL Injection
🕵️
Jorani 1.0.3 Cross Site Scripting
🕵️
Horse Market Sell And Rent Portal Script 1.5.7 Cross Site Scripting
🕵️
Alleged leak of 270k user e-mails + unsalted MD5 password hashes (!!!) from popular sim racing service Trading Paints
🕵️
[Video] PyCript Burp Suite Extension: Bypassing Client-Side Encryption Guide and Demo
🕵️
Hackers Embed Weaponized Word File into a PDF to Evade Detection
🕵️
Acquisition Chatter Swirls Around SentinelOne, BlackBerry
🕵️
how do you address html files/embedded html in email security process?
🕵️
How to ask without sounding like they did something wrong
🕵️
Browser Extension Risk Report: High # Risks for SaaS Data
🕵️
Flexibility or pay?
🕵️
The Art & Science of Metawar | Black Hat Executive Interviews - BSW #318
🕵️
Crypto Investor Data Stolen From Kroll In SIM Swap
🕵️
Why Not To Automate Security in SDLC with SAST? My thoughts and arguments why SAST should be as widely adopted as code quality checks.
🕵️
Cyber Info-Sharing Guide for Healthcare Sector Updated
🕵️
CISO's Actionable Strategy for Success, Security Basics are Hard, & Building Culture - BSW #318
🕵️
Report: Moscow to help cybercriminals operate with 'near impunity', Canada among targets
🕵️
Bypassing BitLocker
🕵️
Mystery | Qakbot | Crates.io | VDP | NetScaler | Entra ID | SynthID | Jason Wood & more – SWN322
🕵️
AI cars | Sandstorm | BGP | Earth Estries | DOE | Aria | Aaran Leyland & more – SWN323
🌐
KmsdBot Malware Gets an Upgrade: Now Targets IoT Devices with Enhanced Capabilities
🌐
KmsdBot Malware Gets an Upgrade: Now Targets IoT Devices with Enhanced Capabilities
🌐
Baseline cyber threat assessment: Cybercrime
🌐
Cyber Centre releases Baseline Cyber Threat Assessment on Cybercrime with support from RCMP
🌐
Malware Attack Targeting Rust Developers Found On Crates.io
🌐
Cyber Centre releases Baseline Cyber Threat Assessment on Cybercrime with support from RCMP
🌐
Developers Beware: Malicious Rust Libraries Caught Transmitting OS Info to Telegram Channel
🌐
Signs of Malware Attack Targeting Rust Developers Found on Crates.io
🌐
Recovering from a supply-chain attack: What are the lessons to learn from the 3CX hack?
📡
Webinar | Mitigating Organizational Risks of Using Generative AI: The Good, the Bad, and the Ugly
📡
Tor Tweaks Onion Routing Software to Fend Off DDoS Attacks
📡
Tor Turns To Puzzles To Defend Onion Network From DDoS Attacks
📡
UK Privacy Regulator Warns of Surging Number of “Text Pest” Cases
📡
Vendors Training AI With Customer Data Is an Enterprise Risk
📡
Microsoft blames ‘unsupported processor’ blue screens on OEM vendors
📡
Uncovering a Privacy-Preserving Approach to Machine Learning
📡
SAFECOM Develops SAFECOM Writing Guide for Standard Operating Guidelines
📡
Microsoft will enable Exchange Extended Protection by default this fall
📡
MalDoc in PDFs: Hiding malicious Word docs in PDF files
📡
Why a Wiz-SentinelOne Deal Makes Sense, and Why It Might Not