05/27

QBot malware abuses Windows WordPad EXE to infect devices

https://www.bleepingcomputer.com/news/security/qbot-malware-abuses-windows-wordpad-exe-to-infect-devices/
QBot malware abuses Windows WordPad EXE to infect devices

Flipper zero can be used for xiaomi vaccum robot root. : r/flipperzero

https://www.reddit.com/r/flipperzero/comments/13sabij/flipper_zero_can_be_used_for_xiaomi_vaccum_robot/
Flipper zero can be used for xiaomi vaccum robot root. : r/flipperzero

Google Online Security Blog: Time to challenge yourself in the 2023 Google CTF!

https://security.googleblog.com/2023/05/time-to-challenge-yourself-in-2023-google-ctf2023.html
Google Online Security Blog: Time to challenge yourself in the 2023 Google CTF!

Green hills forever: Windows XP activation algorithm cracked after 21 years | Ars Technica

https://arstechnica.com/gadgets/2023/05/a-decade-after-it-mattered-windows-xps-activation-algorithm-is-cracked/
Green hills forever: Windows XP activation algorithm cracked after 21 years | Ars Technica

Debugging the Windows Kernel and Undocumented Structures / Twitter

https://twitter.com/i/broadcasts/1MnxnpEgnLVGO
Debugging the Windows Kernel and Undocumented Structures / Twitter

NorthSec 2023 - Conference Stage 1 - Day 1 - YouTube

https://youtu.be/hslR6hE7fS8?list=PLuUtcRxSUZUp8E3qRX4Op63szPKRDFpTB&t=14384
NorthSec 2023 - Conference Stage 1 - Day 1 - YouTube

US govt contractor ABB confirms ransomware attack, data theft

https://www.bleepingcomputer.com/news/security/us-govt-contractor-abb-confirms-ransomware-attack-data-theft/
US govt contractor ABB confirms ransomware attack, data theft

ICS Village: Def Con 31 CFP

https://docs.google.com/forms/d/1rIizyYVQvOXHZ1hscRegCZVFORwkc3pItvt8NeCm1e4/edit?chromeless=1#responses
ICS Village: Def Con 31 CFP

New PowerExchange Backdoor linked to an Iranian APT groupSecurity Affairs

https://securityaffairs.com/146690/apt/powerexchange-backdoor-iran.html
New PowerExchange Backdoor linked to an Iranian APT groupSecurity Affairs

Hot Pixels attack checks CPU temp, power changes to steal data

https://www.bleepingcomputer.com/news/security/hot-pixels-attack-checks-cpu-temp-power-changes-to-steal-data/
Hot Pixels attack checks CPU temp, power changes to steal data

Omnia Servizi

https://www.omniaservizi.com/
Omnia Servizi

New Info Stealer Bandit Stealer Targets Browsers, Wallets

https://www.trendmicro.com/en_us/research/23/e/new-info-stealer-bandit-stealer-targets-browsers-wallets.html
New Info Stealer Bandit Stealer Targets Browsers, Wallets

DRM - Dashboard Ransomware Monitor

https://ransom.insicurezzadigitale.com/index.php?page=post_details&id_post=8088
DRM - Dashboard Ransomware Monitor

HTB: Absolute | 0xdf hacks stuff

https://0xdf.gitlab.io/2023/05/27/htb-absolute.html
HTB: Absolute | 0xdf hacks stuff

MalwareBazaar | Browse Checking your browser

https://bazaar.abuse.ch/sample/935d4f84f1f1afb65dda0ea548d7e1b77551a1ad2f2a38dcb98a35b23c8a583a
MalwareBazaar | Browse Checking your browser

Meterpreter vs Modern EDR(s) - RedOps - English

https://redops.at/en/blog/meterpreter-vs-modern-edrs-in-2023
Meterpreter vs Modern EDR(s) - RedOps - English

Tesla Whistleblower Leaks 100GB of Data, Revealing Safety Complaints

https://www.darkreading.com/attacks-breaches/whistleblower-leaks-100gb-tesla-data-safety-complaints
Tesla Whistleblower Leaks 100GB of Data, Revealing Safety Complaints