pocorgtfo21.pdf
https://www.alchemistowl.org/pocorgtfo/pocorgtfo21.pdf
GitHub - trickest/cve: Gather and update all available and newest CVEs with their PoC.
https://github.com/trickest/cve
Useful Libraries for Malware Development - Hack.Learn.Share
https://captmeelo.com/redteam/maldev/2022/02/16/libraries-for-maldev.html
NSA, FBI, CISA Release Advisory on Protecting Cleared Defense Contractor Networks Against Years-Long Activity by Russian State-Sponsored Actors > National Security Agency/Central Security Service > Article
https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/2935170/nsa-fbi-cisa-release-advisory-on-protecting-cleared-defense-contractor-networks/
High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
https://thehackernews.com/2022/02/high-severity-rce-security-bug-reported.html
Their Bionic Eyes Are Now Obsolete and Unsupported - IEEE Spectrum
https://spectrum.ieee.org/bionic-eye-obsolete
Exploring Token Members Part 2. Introduction | by Jonathan Johnson | Medium
https://jsecurity101.medium.com/exploring-token-members-part-2-2a09d13cbb3
Dylib Loads that Tickle your Fancy | by Leo Pitt | Posts By SpecterOps Team Members
https://posts.specterops.io/dylib-loads-that-tickle-your-fancy-d25196addd8c
Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology | CISA
https://www.cisa.gov/uscert/ncas/alerts/aa22-047a
Please Delete Your Recordings: Inside a Police Conference
https://www.vice.com/en/article/y3vq3w/inside-police-conference-washington-dc-sheriffs-association
Highway to Conti: Analysis of Bazarloader | by Eli Salem | Medium
https://elis531989.medium.com/highway-to-conti-analysis-of-bazarloader-26368765689d
Contact Us - The Cyber Startup Observatory
https://cyberstartupobservatory.com/cyber-startup-observatory-contact/
VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
https://thehackernews.com/2022/02/vmware-issues-security-patches-for-high.html
Tweet / Twitter
https://twitter.com/TinkerSec/status/1493972542511538177
Red Cross blames hack on Zoho vulnerability, suspects APT attack - The Record from Recorded Future News
https://therecord.media/red-cross-blames-hack-on-zoho-vulnerability-suspects-apt-attack/
ICRC cyber-attack: Sharing our analysis | ICRC
https://www.icrc.org/en/document/icrc-cyber-attack-analysis
Dirk-jan on Twitter: "Another blog on the Primary Refresh Token! Thx @gentilkiwi for figuring this out with me! Tl;Dr: PRT can be extracted from lsass with #mimikatz 🥝. If with TPM, session key is protected. Still possible to extract derived keys and sign your own PRT cookies. https://t.co/KQbtaaPpwg" / Twitter
https://twitter.com/_dirkjan/status/1291084375304667137
GitHub - andpalmier/apkingo: get detailed information about apk files
https://github.com/andpalmier/apkingo
Version 100 in Chrome and Firefox - Mozilla Hacks - the Web developer blog
https://hacks.mozilla.org/2022/02/version-100-in-chrome-and-firefox/
GitHub - mpgn/BackupOperatorToDA: From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller
https://github.com/mpgn/BackupOperatorToDA
Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case
https://thehackernews.com/2022/02/facebook-agrees-to-pay-90-million-to.html
So You Want to Learn ICS Security… – tisiphone.net
https://tisiphone.net/2020/06/21/so-you-want-to-learn-ics-security/
Max_Malyutin on Twitter: "#Emotet E5 infection once again leads to #CobaltStrike❗️ Domain: nagahox[.]com- @Namecheap URL: hxxp://nagahox[.]com Watermark: 1580103814 Spawn to process: mstsc.exe H/T anonymous @Cryptolaemus1 https://t.co/rGXqEthih7" / Twitter
https://twitter.com/Max_Mal_/status/1493494642813415426