10/23

QNAP takes down server behind widespread brute-force attacks

https://www.bleepingcomputer.com/news/security/qnap-takes-down-server-behind-widespread-brute-force-attacks/
QNAP takes down server behind widespread brute-force attacks

DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan

https://thehackernews.com/2023/10/donot-teams-new-firebird-backdoor-hits.html
DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan

Quasar RAT Leverages DLL Side-Loading to Fly Under the Radar

https://thehackernews.com/2023/10/quasar-rat-leverages-dll-side-loading.html
Quasar RAT Leverages DLL Side-Loading to Fly Under the Radar

Triangulation: validators, post-compromise activity and modules | Securelist

https://securelist.com/triangulation-validators-modules/110847/
Triangulation: validators, post-compromise activity and modules | Securelist

Citrix warns admins to patch NetScaler CVE-2023-4966 bug immediately

https://www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-netscaler-cve-2023-4966-bug-immediately/
Citrix warns admins to patch NetScaler CVE-2023-4966 bug immediately

Spain arrests 34 cybercriminals who stole data of 4 million people

https://www.bleepingcomputer.com/news/security/spain-arrests-34-cybercriminals-who-stole-data-of-4-million-people/
Spain arrests 34 cybercriminals who stole data of 4 million people

D.C. Board of Elections: Hackers may have breached entire voter roll

https://www.bleepingcomputer.com/news/security/dc-board-of-elections-hackers-may-have-breached-entire-voter-roll/
D.C. Board of Elections: Hackers may have breached entire voter roll

Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops - SecurityWeek

https://www.securityweek.com/cisco-finds-second-zero-day-as-number-of-hacked-devices-drops/
Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops - SecurityWeek

1Password discloses security incident linked to Okta breach

https://www.bleepingcomputer.com/news/security/1password-discloses-security-incident-linked-to-okta-breach/
1Password discloses security incident linked to Okta breach

Mastering Windows Access Control: Understanding SeDebugPrivilege | Binary Defense

https://www.binarydefense.com/resources/blog/mastering-windows-access-control-understanding-sedebugprivilege/
Mastering Windows Access Control: Understanding SeDebugPrivilege | Binary Defense

Hijacking Someone Else’s DCSync – nullg0re InfoSec

https://nullg0re.com/2023/09/hijacking-someone-else-dcsync/
Hijacking Someone Else’s DCSync – nullg0re InfoSec

Log in to X / X

https://twitter.com/i/broadcasts/1OdKrjrvVXvKX
Log in to X / X

Pycrypt - Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products

https://kitploit.com/2022/11/pycrypt-python-based-crypter-that-can.html
Pycrypt - Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products

NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison – Krebs on Security

https://krebsonsecurity.com/2023/10/nj-man-hired-online-to-firebomb-shoot-at-homes-gets-13-years-in-prison/
NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison – Krebs on Security

Cisco patches IOS XE zero-days used to hack over 50,000 devices

https://www.bleepingcomputer.com/news/security/cisco-patches-ios-xe-zero-days-used-to-hack-over-50-000-devices/
Cisco patches IOS XE zero-days used to hack over 50,000 devices

City of Philadelphia discloses data breach after five months

https://www.bleepingcomputer.com/news/security/city-of-philadelphia-discloses-data-breach-after-five-months/
City of Philadelphia discloses data breach after five months

Infostep 2023 fundraising for The Cyber Helpline on JustGiving

https://www.justgiving.com/team/infostep-2023
Infostep 2023 fundraising for The Cyber Helpline on JustGiving

US energy firm shares how Akira ransomware hacked its systems

https://www.bleepingcomputer.com/news/security/us-energy-firm-shares-how-akira-ransomware-hacked-its-systems/
US energy firm shares how Akira ransomware hacked its systems

Vol.18cpal.pdf

https://www.npa.go.jp/bureau/cyber/pdf/Vol.18cpal.pdf
Vol.18cpal.pdf

Deception in Depth - Hiding AD Users and Groups - Part 1

https://blog.spookysec.net/DnD-Hiding-Users-and-Groups/
Deception in Depth - Hiding AD Users and Groups - Part 1