Adversaries Infrastructure-Ransomware Groups, APTs, and Red Teams | by Michael Koczwara | Dec, 2022 | Medium
https://michaelkoczwara.medium.com/adversaries-infrastructure-ransomware-groups-apts-and-red-teams-7a6dd761c50e
GitHub - PabloMK7/ENLBufferPwn: Information and PoC about the ENLBufferPwn vulnerability
https://github.com/PabloMK7/ENLBufferPwn
New Linux malware uses 30 plugin exploits to backdoor WordPress sites
https://www.bleepingcomputer.com/news/security/new-linux-malware-uses-30-plugin-exploits-to-backdoor-wordpress-sites/
GitHub - rad9800/WTSRM2
https://github.com/rad9800/WTSRM2
LuaJIT Sandbox Escape: The Saga Ends
https://0xbigshaq.github.io/2022/12/30/luajit-sandbox-escape/
vulnerability-write-ups/Part1.md at master · b1ack0wl/vulnerability-write-ups · GitHub
https://github.com/b1ack0wl/vulnerability-write-ups/blob/master/TP-Link/WR940N/112022/Part1.md
2368 - crewjam/saml: Signature bypass via multiple Assertion elements - project-zero
https://bugs.chromium.org/p/project-zero/issues/detail?id=2368
Inspired by 'Office Space' film, Washington software engineer steals over $300K from employer, prosecutors say | CNN
https://www.cnn.com/2022/12/30/us/office-space-inspired-washington-software-engineer-thief/index.html
Hacked Russian Files Reveal Propaganda Accord With China
https://theintercept.com/2022/12/30/russia-china-news-media-agreement/
Hacking microcontroller firmware through a USB | Securelist
https://securelist.com/hacking-microcontroller-firmware-through-a-usb/89919/
[email protected] on X: "When an N-Day turns into a 0day by @b1ack0wl "Exodus Intelligence disclosed a vulnerability that affected the WR940N V5 and WR941ND V6 routers made by TP-Link. This bug is labeled as an Uninitialized Pointer Vulnerability." https://t.co/pShdEIGx3B https://t.co/7hvZ0RYgAa" / X
https://twitter.com/0xdea/status/1608758315940720641
research/exploits/VS-2021-001 at master · VerSprite/research · GitHub
https://bit.ly/3WsJZ6N
Fast Square Root Approximation
http://suraj.sh/fast-square-root-approximation
GitHub - tothi/pwn-hisilicon-dvr at 42d8325e68fdb075fe27df8a269932f9fa9601a6
https://github.com/tothi/pwn-hisilicon-dvr/tree/42d8325e68fdb075fe27df8a269932f9fa9601a6
http://ip-api.com/csv/infoguard.ch
http://ip-api.com/csv/infoguard.ch
Pass-the-Challenge: Defeating Windows Defender Credential Guard | by Oliver Lyak | Dec, 2022 | IFCR
https://research.ifcr.dk/pass-the-challenge-defeating-windows-defender-credential-guard-31a892eee22
InfoSec Handlers Diary Blog - SANS Internet Storm Center
https://i5c.us/d29386
CVE-2022-38627: A journey through SQLite Injection to compromise the whole enterprise building | by Omar Hashem | Dec, 2022 | Medium
https://omar0x01.medium.com/cve-2022-38627-a-journey-through-sqlite-injection-to-compromise-the-whole-enterprise-building-15cebd072ed6
Lockbit ransomware gang claims to have hacked the Port of LisbonSecurity Affairs
https://securityaffairs.com/140137/cyber-crime/lockbit-group-port-of-lisbon.html
Release v6.3.0-rc1 · dnSpyEx/dnSpy · GitHub
https://github.com/dnSpyEx/dnSpy/releases/tag/v6.3.0-rc1
GitHub - ke0z/VulChatGPT: Use IDA PRO HexRays decompiler with OpenAI(ChatGPT) to find possible vulnerabilities in binaries
https://github.com/ke0z/VulChatGPT
Trung Phan on Twitter: "The last three years, explained https://t.co/folDJaHy8g" / Twitter
https://twitter.com/TrungTPhan/status/1608915548255158272
Masking Malicious Memory Artifacts – Part I: Phantom DLL Hollowing
https://www.forrest-orr.net/post/malicious-memory-artifacts-part-i-dll-hollowing
Canadian mining firm shuts down mill after ransomware attack
https://www.bleepingcomputer.com/news/security/canadian-mining-firm-shuts-down-mill-after-ransomware-attack/
Matthew Green on Twitter: "I got into a discussion with @OrinKerr the other day about the recent NYT op-ed on Signal and whether “metadata-resistant communications” is good or bad for policing and if it should be opposed. And I guess I wanted to talk about how those arguments should be approached. 1/" / Twitter
https://twitter.com/matthew_d_green/status/1608881104400056326
RedZei - Chinese-speaking scammers targeting Chinese students in the UK
https://blog.bushidotoken.net/2022/12/redzei-chinese-speaking-scammers.html
Code Execution against Windows HVCI | by Datafarm | Dec, 2022 | Medium
https://datafarm-cybersecurity.medium.com/code-execution-against-windows-hvci-f617570e9df0
Offensive Software Exploitation (OSE) Course | exploitation-course
https://exploitation.ashemery.com/