[REL] A Journey Into Hacking Google Search Appliance | DEVCORE
https://devco.re/blog/2023/07/07/a-journey-into-hacking-google-search-appliance-en/![[REL] A Journey Into Hacking Google Search Appliance | DEVCORE](/image/screenshot/0502272036a63b9a2938d370767edb93.webp)
Mastodon Social Network Patches Critical Flaws Allowing Server Takeover
https://thehackernews.com/2023/07/mastodon-social-network-patches.html
Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities
https://thehackernews.com/2023/07/google-releases-android-patch-update.html
Cybersecurity Agencies Sound Alarm on Rising TrueBot Malware Attacks
https://thehackernews.com/2023/07/cybersecurity-agencies-sound-alarm-on.html
JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident
https://thehackernews.com/2023/07/jumpcloud-resets-api-keys-amid-ongoing.html
Critical TootRoot bug lets attackers hijack Mastodon servers
https://www.bleepingcomputer.com/news/security/critical-tootroot-bug-lets-attackers-hijack-mastodon-servers/
Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software
https://thehackernews.com/2023/07/another-critical-unauthenticated-sqli.html
Introducing Slinky Cat - Living off the AD Land
https://labs.lares.com/introducing-slinkycat/
SANSFIRE Washington, DC 2023 | Cyber Security Training
https://www.sans.org/u/1opv
BlackByte 2.0 Ransomware: Infiltrate, Encrypt, and Extort in Just 5 Days
https://thehackernews.com/2023/07/blackbyte-20-ransomware-infiltrate.html
The five-day job: A BlackByte ransomware intrusion case study | Microsoft Security Blog
https://www.microsoft.com/en-us/security/blog/2023/07/06/the-five-day-job-a-blackbyte-ransomware-intrusion-case-study/
Hacker made $100,000 legally - his Top 3 Tips for 2023. - YouTube
https://youtu.be/KXQ_MUe6wKo
Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing
https://thehackernews.com/2023/07/vishing-goes-high-tech-new-letscall.html
MOVEit Transfer customers warned to patch new critical flaw
https://www.bleepingcomputer.com/news/security/moveit-transfer-customers-warned-to-patch-new-critical-flaw/
Arbitrary file creation through media attachments · Advisory · mastodon/mastodon · GitHub
https://github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm
Kimsuky Threat Group Using Chrome Remote Desktop - ASEC BLOG
https://asec.ahnlab.com/en/55145/
Cisco warns of a flaw in Nexus 9000 series switches that allows modifying encrypted trafficSecurity Affairs
https://securityaffairs.com/148235/security/cisco-nexus-9000-series-flaw.html
LDAP Queries for Offensive and Defensive Operations
https://www.politoinc.com/post/ldap-queries-for-offensive-and-defensive-operations
Kernel Object Names Lifetime – Pavel Yosifovich
https://scorpiosoftware.net/2023/05/15/kernel-object-names-lifetime/
Relaying Kerberos over DNS using krbrelayx and mitm6 - dirkjanm.io
https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/
CISA warns govt agencies to patch actively exploited Android driver
https://www.bleepingcomputer.com/news/security/cisa-warns-govt-agencies-to-patch-actively-exploited-android-driver/
Barracuda working on fix for ongoing Email Gateway login issues
https://www.bleepingcomputer.com/news/security/barracuda-working-on-fix-for-ongoing-email-gateway-login-issues/
6 Steps to Landing a Job in Cybersecurity | Orca Security
https://orca.security/resources/blog/6-steps-to-landing-cybersecurity-job/
Fortigate - Authentication Bypass Lead to Full Device Takeover
https://labs.hakaioffsec.com/fortigate-authentication-bypass/
Apps with 1.5M installs on Google Play send your data to China
https://www.bleepingcomputer.com/news/security/google-play-apps-with-15-million-installs-send-your-data-to-china/
Beyond appearances: unknown actor using APT29’s TTP against Chinese users
https://lab52.io/blog/beyond-appearances-unknown-actor-using-apt29s-ttp-against-chinese-users/
Welcome to New York: Exploring TA453's Foray into LNKs and Mac Malware | Proofpoint US
https://www.proofpoint.com/us/blog/threat-insight/welcome-new-york-exploring-ta453s-foray-lnks-and-mac-malware