07/05

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

https://thehackernews.com/2023/07/nodejs-users-beware-manifest-confusion.html
Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors

https://thehackernews.com/2023/07/redenergy-stealer-as-ransomware-threat.html
RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors

New tool exploits Microsoft Teams bug to send malware to users

https://www.bleepingcomputer.com/news/security/new-tool-exploits-microsoft-teams-bug-to-send-malware-to-users/
New tool exploits Microsoft Teams bug to send malware to users

Instagram's Twitter Alternative 'Threads' Launch Halted in Europe Over Privacy Concerns

https://thehackernews.com/2023/07/instagrams-twitter-alternative-threads.html
Instagram's Twitter Alternative 'Threads' Launch Halted in Europe Over Privacy Concerns

Japan’s largest port stops operations after ransomware attack

https://www.bleepingcomputer.com/news/security/japans-largest-port-stops-operations-after-ransomware-attack/
Japan’s largest port stops operations after ransomware attack

IDA Free

https://hex-rays.com/ida-free/
IDA Free

Cobalt Strike's Deployment with Hardware Breakpoint for AMSI Bypass - K7 Labs

https://labs.k7computing.com/index.php/cobalt-strikes-deployment-with-hardware-breakpoint-for-amsi-bypass/
Cobalt Strike's Deployment with Hardware Breakpoint for AMSI Bypass - K7 Labs

Wuhan Xiaoruizhi Class of ‘19 – Intrusion Truth

https://intrusiontruth.wordpress.com/2023/07/04/wuhan-xiaoruizhi-class-of-19/
Wuhan Xiaoruizhi Class of ‘19 – Intrusion Truth

Twitter silently removes login requirement for viewing tweets | TechCrunch

https://techcrunch.com/2023/07/05/twitter-silently-removes-login-requirement-for-viewing-tweets/
Twitter silently removes login requirement for viewing tweets | TechCrunch

Upcoming Training Classes for June & July – Pavel Yosifovich

https://scorpiosoftware.net/2023/04/23/upcoming-training-classes-for-june-july/
Upcoming Training Classes for June & July – Pavel Yosifovich

Hunting for Nginx Alias Traversals in the wild

https://labs.hakaioffsec.com/nginx-alias-traversal/
Hunting for Nginx Alias Traversals in the wild

Version 5.0 – Capstone – The Ultimate Disassembler

https://www.capstone-engine.org/Version-5.0
Version 5.0 – Capstone – The Ultimate Disassembler

Police arrest suspect linked to notorius OPERA1ER cybercrime gang

https://www.bleepingcomputer.com/news/security/police-arrest-suspect-linked-to-notorius-opera1er-cybercrime-gang/
Police arrest suspect linked to notorius OPERA1ER cybercrime gang

http://redsiege.com/wedoff

http://redsiege.com/wedoff

AppSecSchool - YouTube

https://youtube.com/@AppSecSchool
AppSecSchool - YouTube

Windows Internals Crash Course : r/lowlevel

https://www.reddit.com/r/lowlevel/comments/14nxz5q/windows_internals_crash_course/
Windows Internals Crash Course : r/lowlevel

Swedish data protection authority rules against Google AnalyticsSecurity Affairs

https://securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html
Swedish data protection authority rules against Google AnalyticsSecurity Affairs