05/23

MalwareBazaar | Browse Checking your browser

https://bazaar.abuse.ch/browse/tag/Pikabot/
MalwareBazaar | Browse Checking your browser

Arms maker Rheinmetall confirms BlackBasta ransomware attack

https://www.bleepingcomputer.com/news/security/arms-maker-rheinmetall-confirms-blackbasta-ransomware-attack/
Arms maker Rheinmetall confirms BlackBasta ransomware attack

GoldenJackal APT and its malicious toolset | Securelist

https://securelist.com/goldenjackal-apt-group/109677/
GoldenJackal APT and its malicious toolset | Securelist

Google launches bug bounty program for its Android applications

https://www.bleepingcomputer.com/news/google/google-launches-bug-bounty-program-for-its-android-applications/
Google launches bug bounty program for its Android applications

2305.12784.pdf

https://arxiv.org/pdf/2305.12784.pdf
2305.12784.pdf

Malicious Windows kernel drivers used in BlackCat ransomware attacks

https://www.bleepingcomputer.com/news/security/malicious-windows-kernel-drivers-used-in-blackcat-ransomware-attacks/
Malicious Windows kernel drivers used in BlackCat ransomware attacks

Cuba ransomware claims cyberattack on Philadelphia Inquirer

https://www.bleepingcomputer.com/news/security/cuba-ransomware-claims-cyberattack-on-philadelphia-inquirer/
Cuba ransomware claims cyberattack on Philadelphia Inquirer

offensivecon_ucode.pdf

https://pietroborrello.com/talk/custom-processing-unit-offensivecon/offensivecon_ucode.pdf
offensivecon_ucode.pdf

Announcing the OWASP Top 10 for Large Language Models (AI) Project

https://www.linkedin.com/pulse/announcing-owasp-top-10-large-language-models-ai-project-steve-wilson/
Announcing the OWASP Top 10 for Large Language Models (AI) Project

Tales From the Pick: Intro to Physical Security Tools  - Black Hills Information Security

https://www.blackhillsinfosec.com/tales-from-the-pick-intro-to-physical-security-tools/
Tales From the Pick: Intro to Physical Security Tools  - Black Hills Information Security

Hardware vulnerability in Intel processors | Kaspersky official blog

https://www.kaspersky.com/blog/transient-cpu-eflags/48229/?reseller=gb_kdaily-blog_acq_ona_smm__all_b2c_some_sma_______&utm_source=linkedin&utm_medium=social&utm_campaign=gl_kdaily-blog_ag0241&utm_content=sm-post&utm_term=gl_linkedin_organic_dtcnqk0241xbab7
Hardware vulnerability in Intel processors | Kaspersky official blog

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

https://thehackernews.com/2023/05/new-wintapixsys-malware-engages-in.html
New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

Biden nominates Lt. Gen. Timothy Haugh for top position at NSA, Cyber Command

https://therecord.media/biden-nominates-haugh-for-top-position-at-nsa-cyber-command
Biden nominates Lt. Gen. Timothy Haugh for top position at NSA, Cyber Command

BoymoderRE - Twitch

https://www.twitch.tv/boymoderre
BoymoderRE - Twitch

#StopRansomware Guide Released by NSA and Partners > National Security Agency/Central Security Service > Press Release View

https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3403814/stopransomware-guide-released-by-nsa-and-partners/
#StopRansomware Guide Released by NSA and Partners > National Security Agency/Central Security Service > Press Release View

BatLoader campaign impersonates ChatGPT and Midjourney to deliver Redline StealerSecurity Affairs

https://securityaffairs.com/146496/malware/batloader-campaign-impersonates-chatgpt-midjourney.html
BatLoader campaign impersonates ChatGPT and Midjourney to deliver Redline StealerSecurity Affairs

Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption | WIRED

https://www.wired.com/story/europe-break-encryption-leaked-document-csa-law/
Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption | WIRED

ARM TrustZone: pivoting to the secure world

https://thalium.github.io/blog/posts/pivoting_to_the_secure_world/
ARM TrustZone: pivoting to the secure world

Slides/How To Fix The Old And Busted The Science Behind Loaders HackMiami.pdf at main · Tylous/Slides · GitHub

https://github.com/Tylous/Slides/blob/main/How%20To%20Fix%20The%20Old%20And%20Busted%20The%20Science%20Behind%20Loaders%20HackMiami.pdf
Slides/How To Fix The Old And Busted The Science Behind Loaders HackMiami.pdf at main · Tylous/Slides · GitHub

GitLab Critical Security Release: 16.0.1 | GitLab

https://about.gitlab.com/releases/2023/05/23/critical-security-release-gitlab-16-0-1-released/
GitLab Critical Security Release: 16.0.1 | GitLab

GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

https://thehackernews.com/2023/05/goldenjackal-new-threat-group-targeting.html
GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

Bluenoroff’s RustBucket campaign - Sekoia.io Blog

https://blog.sekoia.io/bluenoroffs-rustbucket-campaign/
Bluenoroff’s RustBucket campaign - Sekoia.io Blog

North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

https://thehackernews.com/2023/05/north-korean-kimsuky-hackers-strike.html
North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

OffensiveCon 2023 – Exploit Engineering – Attacking the Linux Kernel | NCC Group Research Blog | Making the world safer and more secure

https://research.nccgroup.com/2023/05/23/offensivecon-2023-exploit-engineering-attacking-the-linux-kernel/
OffensiveCon 2023 – Exploit Engineering – Attacking the Linux Kernel | NCC Group Research Blog | Making the world safer and more secure