04/11

QueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service - Check Point Research404 Not FoundBack ButtonSearch IconFilter Icon

https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/
QueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service - Check Point Research404 Not FoundBack ButtonSearch IconFilter Icon

Sweet QuaDreams: A First Look at Spyware Vendor QuaDream’s Exploits, Victims, and Customers - The Citizen Lab

https://citizenlab.ca/2023/04/spyware-vendor-quadream-exploits-victims-customers/
Sweet QuaDreams: A First Look at Spyware Vendor QuaDream’s Exploits, Victims, and Customers - The Citizen Lab

Minimal PoC code for Kerberos Unlock LPE (CVE-2023-21817) · GitHub

https://gist.github.com/monoxgas/f615514fb51ebb55a7229f3cf79cf95b
Minimal PoC code for Kerberos Unlock LPE (CVE-2023-21817) · GitHub

By popular demand: Windows LAPS available now! - Microsoft Community Hub

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/by-popular-demand-windows-laps-available-now/ba-p/3788747
By popular demand: Windows LAPS available now! - Microsoft Community Hub

Announcing OpenAI’s Bug Bounty Program

https://openai.com/blog/bug-bounty-program
Announcing OpenAI’s Bug Bounty Program

Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 28

https://informnapalm.org/en/hacked-russian-gru-officer/
Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 28

Nokoyawa ransomware attacks with Windows zero-day | Securelist

https://securelist.com/nokoyawa-ransomware-attacks-with-windows-zero-day/109483/
Nokoyawa ransomware attacks with Windows zero-day | Securelist

Announcing OpenAI’s Bug Bounty Program

http://openai.com/blog/bug-bounty-program
Announcing OpenAI’s Bug Bounty Program

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

https://thehackernews.com/2023/04/cryptocurrency-stealer-malware.html
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Qakbot/Qakbot_BB23_11.04.2023.txt at main · pr0xylife/Qakbot · GitHub

https://github.com/pr0xylife/Qakbot/blob/main/Qakbot_BB23_11.04.2023.txt
Qakbot/Qakbot_BB23_11.04.2023.txt at main · pr0xylife/Qakbot · GitHub

Blackhoodie at ReCon 2023 - Blackhoodie

https://blackhoodie.re/Recon_Montreal_2023/
Blackhoodie at ReCon 2023 - Blackhoodie

Qakbot/Qakbot_obama250_11.04.2023.txt at main · pr0xylife/Qakbot · GitHub

https://github.com/pr0xylife/Qakbot/blob/main/Qakbot_obama250_11.04.2023.txt
Qakbot/Qakbot_obama250_11.04.2023.txt at main · pr0xylife/Qakbot · GitHub

Exploiting Reversing (ER) series: article 01 – Exploit Reversing

https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
Exploiting Reversing (ER) series: article 01 – Exploit Reversing

Shell in the Ghost: Ghostscript CVE-2023-28879 writeup - Almond Offensive Security Blog

https://offsec.almond.consulting/ghostscript-cve-2023-28879.html
Shell in the Ghost: Ghostscript CVE-2023-28879 writeup - Almond Offensive Security Blog