08/14

GitHub - snyff/Talks: My talks...

https://github.com/snyff/Talks
GitHub - snyff/Talks: My talks...

GitHub - deepinstinct/NoFilter

https://github.com/deepinstinct/NoFilter
GitHub - deepinstinct/NoFilter

Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability

https://thehackernews.com/2023/08/ongoing-xurum-attacks-on-e-commerce.html
Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability

Colorado warns 4 million of data stolen in IBM MOVEit breach

https://www.bleepingcomputer.com/news/security/colorado-warns-4-million-of-data-stolen-in-ibm-moveit-breach/
Colorado warns 4 million of data stolen in IBM MOVEit breach

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

https://thehackernews.com/2023/08/india-passes-new-digital-personal-data.html
India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

New Financial Malware 'JanelaRAT' Targets Latin American Users

https://thehackernews.com/2023/08/new-financial-malware-janelarat-targets.html
New Financial Malware 'JanelaRAT' Targets Latin American Users

Discord.io

http://Discord.io
Discord.io

APT_REPORT/Charming Kitten/2023-08-10-cyber-brief-no-01-2023.pdf at master · blackorbird/APT_REPORT · GitHub

https://github.com/blackorbird/APT_REPORT/blob/master/Charming%20Kitten/2023-08-10-cyber-brief-no-01-2023.pdf
APT_REPORT/Charming Kitten/2023-08-10-cyber-brief-no-01-2023.pdf at master · blackorbird/APT_REPORT · GitHub

Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks

https://thehackernews.com/2023/08/charming-kitten-targets-iranian.html
Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks

Red Hot

https://slides.com/rvrsh3ll/red-hot
Red Hot

The DEF CON® Media Server - Archives of the conferences

https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/
The DEF CON® Media Server - Archives of the conferences

Analyzing Malicious OneNote Documents | Didier Stevens

https://blog.didierstevens.com/2023/01/22/analyzing-malicious-onenote-documents/
Analyzing Malicious OneNote Documents | Didier Stevens

Alessandro%20klezVirus%20Magnosi%20Arash%20waldoirc%20Parsa%20Athanasios%20trickster0%20Tserpelis%20-%20StackMoonwalk%20A%20Novel%20approach%20to%20stack%20spoofing%20on%20Windows%20x64.pdf

https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/Alessandro%20klezVirus%20Magnosi%20Arash%20waldoirc%20Parsa%20Athanasios%20trickster0%20Tserpelis%20-%20StackMoonwalk%20A%20Novel%20approach%20to%20stack%20spoofing%20on%20Windows%20x64.pdf
Alessandro%20klezVirus%20Magnosi%20Arash%20waldoirc%20Parsa%20Athanasios%20trickster0%20Tserpelis%20-%20StackMoonwalk%20A%20Novel%20approach%20to%20stack%20spoofing%20on%20Windows%20x64.pdf

GitHub - TurtleARM/CVE-2023-0179-PoC

https://github.com/TurtleARM/CVE-2023-0179-PoC
GitHub - TurtleARM/CVE-2023-0179-PoC

Threat Intel Queries

https://embee-research.ghost.io/shodan-censys-queries/
Threat Intel Queries

Monti ransomware targets VMware ESXi servers with new Linux locker

https://www.bleepingcomputer.com/news/security/monti-ransomware-targets-vmware-esxi-servers-with-new-linux-locker/
Monti ransomware targets VMware ESXi servers with new Linux locker

QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord

https://thehackernews.com/2023/08/qwixxrat-new-remote-access-trojan.html
QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord

Experts found multiple flaws in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP)Security Affairs

https://securityaffairs.com/149487/hacking/zooms-zero-touch-provisioning-flaws.html
Experts found multiple flaws in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP)Security Affairs

Why US tech giants are threatening to quit the UK - BBC News

https://www.bbc.co.uk/news/technology-66304002
Why US tech giants are threatening to quit the UK - BBC News

Building a secure future without traditional passwords - Help Net Security

https://www.helpnetsecurity.com/2023/08/14/passwordless-authentication-future-video/
Building a secure future without traditional passwords - Help Net Security

Over 100K hacking forums accounts exposed by info-stealing malware

https://www.bleepingcomputer.com/news/security/over-100k-hacking-forums-accounts-exposed-by-info-stealing-malware/
Over 100K hacking forums accounts exposed by info-stealing malware

Jae Bochs: "@chris_kirsch @dangoodin since…" - Infosec Exchange

https://infosec.exchange/@jb0x168/110879394826675242
Jae Bochs: "@chris_kirsch @dangoodin since…" - Infosec Exchange

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking - SecurityWeek

https://www.securityweek.com/iagona-scrutisweb-vulnerabilities-could-expose-atms-to-remote-hacking/
Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking - SecurityWeek

Microsoft enables Windows Kernel CVE-2023-32019 fix for everyone

https://www.bleepingcomputer.com/news/microsoft/microsoft-enables-windows-kernel-cve-2023-32019-fix-for-everyone/
Microsoft enables Windows Kernel CVE-2023-32019 fix for everyone

FBI warns of increasing cryptocurrency recovery scams

https://www.bleepingcomputer.com/news/security/fbi-warns-of-increasing-cryptocurrency-recovery-scams/
FBI warns of increasing cryptocurrency recovery scams

Macs are getting compromised to act as proxy exit nodes - Help Net Security

https://www.helpnetsecurity.com/2023/08/14/macos-adload-proxy/
Macs are getting compromised to act as proxy exit nodes - Help Net Security

Colorado Health Agency Says 4 Million Impacted by MOVEit Hack - SecurityWeek

https://www.securityweek.com/colorado-health-agency-says-4-million-impacted-by-moveit-hack/
Colorado Health Agency Says 4 Million Impacted by MOVEit Hack - SecurityWeek

Cobalt Strike, a Defender's Guide

https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/
Cobalt Strike, a Defender's Guide

nyxgeek%20-%20Track%20the%20Planet%20Mapping%20Identities%20Monitoring%20Presence%20and%20Decoding%20Business%20Alliances%20in%20the%20Azure%20Ecosystem.pdf

https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/nyxgeek%20-%20Track%20the%20Planet%20Mapping%20Identities%20Monitoring%20Presence%20and%20Decoding%20Business%20Alliances%20in%20the%20Azure%20Ecosystem.pdf
nyxgeek%20-%20Track%20the%20Planet%20Mapping%20Identities%20Monitoring%20Presence%20and%20Decoding%20Business%20Alliances%20in%20the%20Azure%20Ecosystem.pdf

Secret of Binary ELF | NutCrackersSecurity

https://nutcrackerssecurity.github.io/posts/elf-binary/
Secret of Binary ELF | NutCrackersSecurity