07/24

The End of PPLdump | itm4n's blog

https://itm4n.github.io/the-end-of-ppldump/
The End of PPLdump | itm4n's blog

Twitter data breach exposes contact details for 5.4M accounts

https://9to5mac.com/2022/07/22/twitter-data-breach/
Twitter data breach exposes contact details for 5.4M accounts

Chinese APTs: Interlinked networks and side hustles – Intrusion Truth

https://intrusiontruth.wordpress.com/2022/07/24/chinese-apts-interlinked-networks-and-side-hustles/
Chinese APTs: Interlinked networks and side hustles – Intrusion Truth

SSRF and Account Takeover via XSS in ERPNext (0-day)

https://tech-blog.cymetrics.io/en/posts/huli/erpnext-ssrf-and-xss-to-account-takeover/
SSRF and Account Takeover via XSS in ERPNext (0-day)

North Korean hackers attack EU targets with Konni RAT malware

https://www.bleepingcomputer.com/news/security/north-korean-hackers-attack-eu-targets-with-konni-rat-malware/
North Korean hackers attack EU targets with Konni RAT malware

GitHub - mandiant/Azure_Workshop

https://github.com/mandiant/Azure_Workshop
GitHub - mandiant/Azure_Workshop

Week 30 – 2022 – This Week In 4n6

http://thisweekin4n6.com/2022/07/24/week-30-2022/
Week 30 – 2022 – This Week In 4n6

MalwareBazaar | Browse malware samples

https://bazaar.abuse.ch/sample/6bb1027dee18e8500c765590c51fefa9210707bbc8755331a1df66f760a7e061/
MalwareBazaar | Browse malware samples

GitHub - SigmaHQ/pySigma-backend-opensearch: pySigma OpenSearch backend

https://github.com/SigmaHQ/pySigma-backend-opensearch
GitHub - SigmaHQ/pySigma-backend-opensearch: pySigma OpenSearch backend

Amadey malware pushed via software cracks in SmokeLoader campaign

https://www.bleepingcomputer.com/news/security/amadey-malware-pushed-via-software-cracks-in-smokeloader-campaign/
Amadey malware pushed via software cracks in SmokeLoader campaign

QBot phishing uses Windows Calculator sideloading to infect devices

https://www.bleepingcomputer.com/news/security/qbot-phishing-uses-windows-calculator-sideloading-to-infect-devices/
QBot phishing uses Windows Calculator sideloading to infect devices

Let's code a TCP/IP stack, 2: IPv4 & ICMPv4

http://www.saminiir.com/lets-code-tcp-ip-stack-2-ipv4-icmpv4/
Let's code a TCP/IP stack, 2: IPv4 & ICMPv4

Online insurer Policybazaar says customer data was exposed by ‘unauthorized access’ | TechCrunch

https://techcrunch.com/2022/07/24/online-insurer-policybazaar-says-customer-data-was-exposed-in-unauthorized-access/
Online insurer Policybazaar says customer data was exposed by ‘unauthorized access’ | TechCrunch

Mobile Pentesting Resources.md · GitHub

https://gist.github.com/OTaKuHP/c0a8d8ca68842e30a2178a4ba5d8fc03
Mobile Pentesting Resources.md · GitHub

Cybersecurity Canon | Cybersecurity & Digital Trust

https://icdt.osu.edu/cybercanon/bookreviews
Cybersecurity Canon | Cybersecurity & Digital Trust

CNN Exclusive: FBI investigation determined Chinese-made Huawei equipment could disrupt US nuclear arsenal communications - CNNPolitics

https://edition.cnn.com/2022/07/23/politics/fbi-investigation-huawei-china-defense-department-communications-nuclear/index.html
CNN Exclusive: FBI investigation determined Chinese-made Huawei equipment could disrupt US nuclear arsenal communications - CNNPolitics

A DB containing data of 5.4M Twitter accounts available for saleSecurity Affairs

https://securityaffairs.co/wordpress/133593/data-breach/twitter-leaked-data.html
A DB containing data of 5.4M Twitter accounts available for saleSecurity Affairs