03/07

2021 Year In Review – The DFIR Report

https://thedfirreport.com/2022/03/07/2021-year-in-review/
2021 Year In Review – The DFIR Report

https://haxx.in/files/dirtypipez.c

https://haxx.in/files/dirtypipez.c

2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!

https://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html
2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!

An update on the threat landscape

https://blog.google/threat-analysis-group/update-threat-landscape-ukraine/
An update on the threat landscape

SATCOM terminals under attack in Europe: a plausible analysis.

https://www.reversemode.com/2022/03/satcom-terminals-under-attack-in-europe.html
SATCOM terminals under attack in Europe: a plausible analysis.

Space / Twitter

https://twitter.com/i/spaces/1vAxRkddrOrKl
Space / Twitter

Abusing Kerberos Constrained Delegation without Protocol Transition | snovvcrash@gh-pages:~$ _

https://snovvcrash.rocks/2022/03/06/abusing-kcd-without-protocol-transition.html
Abusing Kerberos Constrained Delegation without Protocol Transition | snovvcrash@gh-pages:~$ _

Symbolic Execution For Bug Hunting in Binaries - Google スライド

https://docs.google.com/presentation/d/1E3uE-4mYpenw0s40rtMbIdxj3fJgC79aHCeiIlJSY5Y/edit?usp=drivesdk
Symbolic Execution For Bug Hunting in Binaries - Google スライド

| Job Preference

http://www.jobpreference.com
| Job Preference

GitHub · Where software is built

https://github.com/Cybernite-Technologies/trickbot-leak
GitHub · Where software is built

Rompetrol gas station network hit by Hive ransomware

https://www.bleepingcomputer.com/news/security/rompetrol-gas-station-network-hit-by-hive-ransomware/
Rompetrol gas station network hit by Hive ransomware

Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

https://thehackernews.com/2022/03/ukrainian-cert-warns-citizens-of.html
Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

CYBERUK 2022 Homepage

https://www.cyberuk.uk/website/7174/
CYBERUK 2022 Homepage

CERT-UA

https://cert.gov.ua/article/37626
CERT-UA

GitHub - Bandit-HaxUnit/haxunit

https://github.com/Bandit-HaxUnit/haxunit
GitHub - Bandit-HaxUnit/haxunit

MalwareBazaar | mise

https://bazaar.abuse.ch/browse/tag/mise/
MalwareBazaar | mise

AutoWarp Microsoft Azure Automation Vulnerability - Orca Security

https://orca.security/resources/blog/autowarp-microsoft-azure-automation-service-vulnerability/
AutoWarp Microsoft Azure Automation Vulnerability - Orca Security

Hate for Putin’s Russia Consumes Ukraine - The New York Times

https://www.nytimes.com/2022/03/07/world/europe/ukraine-putin-hate.html
Hate for Putin’s Russia Consumes Ukraine - The New York Times

Atac cibernetic la Rompetrol. Mai multe servere au fost criptate / UPDATE DNSC și Rompetrol au confirmat atacul - măsurile luate - HotNews.ro

https://economie.hotnews.ro/stiri-telecom-25416147-surse-atac-cibernetic-rompetrol-mai-multe-masini-sunt-criptate-firma-unde-are-hosting.htm
Atac cibernetic la Rompetrol. Mai multe servere au fost criptate / UPDATE DNSC și Rompetrol au confirmat atacul - măsurile luate - HotNews.ro

Tweet / Twitter

https://twitter.com/asbmilitary/status/1500505238507249664
Tweet / Twitter

Samsung confirms hackers stole Galaxy devices source code

https://www.bleepingcomputer.com/news/security/samsung-confirms-hackers-stole-galaxy-devices-source-code/
Samsung confirms hackers stole Galaxy devices source code

CVE-2022-22005 Microsoft SharePoint RCE | HoangND

https://hnd3884.github.io/posts/cve-2022-22005-microsoft-sharepoint-RCE/
CVE-2022-22005 Microsoft SharePoint RCE | HoangND

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store

https://thehackernews.com/2022/03/sharkbot-banking-malware-spreading-via.html
SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store