Hashcat v6.2.6 benchmark on the Nvidia RTX 4090 · GitHub
https://gist.github.com/Chick3nman/32e662a5bb63bc4f51b847bb422222fd
Microsoft Office 365 email encryption could expose message content
https://www.bleepingcomputer.com/news/security/microsoft-office-365-email-encryption-could-expose-message-content/
GitHub - cisagov/RedEye: RedEye is a visual analytic tool supporting Red & Blue Team operations
http://github.com/cisagov/RedEye/
FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) – Horizon3.ai
https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684
New “Prestige” ransomware impacts organizations in Ukraine and Poland - Microsoft Security Blog
https://www.microsoft.com/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/
Microsoft Office 365 Message Encryption Insecure Mode of Operation | WithSecure™ Labs
https://labs.withsecure.com/advisories/microsoft-office-365-message-encryption-insecure-mode-of-operation
Chick3nman 🐔 on Twitter: "First @hashcat benchmarks on the new @nvidia RTX 4090! Coming in at an insane >2x uplift over the 3090 for nearly every algorithm. Easily capable of setting records: 300GH/s NTLM and 200kh/s bcrypt w/ OC! Thanks to blazer for the run. Full benchmarks here: https://t.co/Bftucib7P9 https://t.co/KHV5yCUkV4" / Twitter
https://twitter.com/chick3nman512/status/1580712040179826688
BountyTricks/CVE-2022-40684.yaml at main · NagliNagli/BountyTricks · GitHub
https://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml
China’s Cyberattack Strategy Explained
https://www.boozallen.com/insights/cyber/chinas-cyberattack-strategy-explained.html
Fortinet社製品の管理画面の認証をバイパスする脆弱性CVE-2022-40684に関連した調査 - セキュリティ研究センターブログ
https://security.macnica.co.jp/blog/2022/10/fortinetcve-2022-40684.html
FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684) – Horizon3.ai
https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/
[oss-security] Various Linux Kernel WLAN security issues (RCE/DOS) found [LWN.net]
https://lwn.net/ml/oss-security/[email protected]/![[oss-security] Various Linux Kernel WLAN security issues (RCE/DOS) found [LWN.net]](/image/screenshot/c32f74cd74bda0fc275087f12f478e9d.webp)
In GUID We Trust
https://www.intruder.io/research/in-guid-we-trust
New “Prestige” ransomware impacts organizations in Ukraine and Poland - Microsoft Security Blog
https://msft.it/6013duZQz
Exclusive: Musk's SpaceX says it can no longer pay for critical satellite services in Ukraine, asks Pentagon to pick up the tab | CNN Politics
https://www.cnn.com/2022/10/13/politics/elon-musk-spacex-starlink-ukraine/index.html
New PHP Variant of Ducktail Infostealer Targeting Facebook Business Accounts | Zscaler
https://www.zscaler.com/blogs/security-research/new-php-variant-ducktail-infostealer-targeting-facebook-business-accounts
PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks
https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html
Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: Alchimist: A new attack framework in Chinese for Mac, Linux and Windows
https://blog.talosintelligence.com/2022/10/alchimist-offensive-framework.html
Alex Marquardt on Twitter: "Exclusive: Musk's SpaceX says it can no longer pay for critical Starlink satellite services in Ukraine, asks Pentagon to pick up the tab https://t.co/RgX7ykI852" / Twitter
https://twitter.com/MarquardtA/status/1580700679810666496
Anatomy of an exploit in Windows win32k - CVE-2022-21882 - Avira Blog
https://www.avira.com/en/blog/anatomy-of-an-exploit-in-windows-win32k-cve-2022-21882
Australian police secret agents exposed in Colombian data leak
https://www.bleepingcomputer.com/news/security/australian-police-secret-agents-exposed-in-colombian-data-leak/
The Spectator Index on Twitter: "BREAKING: CNN reports that Elon Musk's SpaceX has told the US government it can no longer fund Starlink service in Ukraine" / Twitter
https://twitter.com/spectatorindex/status/1580707563888181249
Hexacon2022-The_unavoidable_pain_of_backups_security_deep-dive_into_the_internals_of_NetBackup.pdf
https://airbus-seclab.github.io/netbackup/Hexacon2022-The_unavoidable_pain_of_backups_security_deep-dive_into_the_internals_of_NetBackup.pdf
Windows.Carving.BRc4 :: Velociraptor - Digging deeper!
http://docs.velociraptor.app/exchange/artifacts/pages/brc4/
Agent Tesla Malware Analysis: WSHRAT Acting As A Dropper
https://www.uptycs.com/blog/wshrat-acting-as-a-dropper-for-agent-tesla