04/27

Finding XSS in a million websites (cPanel CVE-2023-29489) – Assetnote

https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/
Finding XSS in a million websites (cPanel CVE-2023-29489) – Assetnote

Qakbot/Qakbot_obama257_27.04.2023.txt at main · pr0xylife/Qakbot · GitHub

https://github.com/pr0xylife/Qakbot/blob/main/Qakbot_obama257_27.04.2023.txt
Qakbot/Qakbot_obama257_27.04.2023.txt at main · pr0xylife/Qakbot · GitHub

Evasive Panda APT group delivers malware via updates for popular Chinese software | WeLiveSecurity

https://www.welivesecurity.com/2023/04/26/evasive-panda-apt-group-malware-updates-popular-chinese-software/
Evasive Panda APT group delivers malware via updates for popular Chinese software | WeLiveSecurity

ATTL4S

https://attl4s.github.io/
ATTL4S

Avast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587) | the-deniss.github.io

https://the-deniss.github.io/posts/2023/04/26/avast-privileged-arbitrary-file-create-on-quarantine.html
Avast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587) | the-deniss.github.io

Clop, LockBit ransomware gangs behind PaperCut server attacks

https://www.bleepingcomputer.com/news/security/clop-lockbit-ransomware-gangs-behind-papercut-server-attacks/
Clop, LockBit ransomware gangs behind PaperCut server attacks

Procedural Detections to Uncover PsExec Style Lateral Movement | by Ankith Bharadwaj | Apr, 2023 | Medium

https://bherunda.medium.com/procedural-detections-to-uncover-psexec-style-lateral-movement-5e83932eeb7e
Procedural Detections to Uncover PsExec Style Lateral Movement | by Ankith Bharadwaj | Apr, 2023 | Medium