01/01

New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

https://thehackernews.com/2024/01/new-terrapin-flaw-could-let-attackers.html
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections

https://thehackernews.com/2024/01/new-variant-of-dll-search-order.html
New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections

New JinxLoader Targeting Users with Formbook and XLoader Malware

https://thehackernews.com/2024/01/new-jinxloader-targeting-users-with.html
New JinxLoader Targeting Users with Formbook and XLoader Malware

1 little known secret of hdwwiz.exe | Hexacorn

https://www.hexacorn.com/blog/2024/01/01/1-little-known-secret-of-hdwwiz-exe/
1 little known secret of hdwwiz.exe | Hexacorn

Mimikatz – Active Directory Security

https://adsecurity.org/?page_id=1821
Mimikatz – Active Directory Security

Compression using RDP API · GitHub

https://gist.github.com/odzhan/56eb105a611dcdebd1d3a084c7312190
Compression using RDP API · GitHub

Cactus RANSOMWARE gang hit the Swedish retail and grocery provider Coop

https://securityaffairs.com/156709/cyber-crime/cactus-ransomware-coop-sweden.html
Cactus RANSOMWARE gang hit the Swedish retail and grocery provider Coop

The law enforcement operations targeting cybercrime in 2023

https://www.bleepingcomputer.com/news/security/the-law-enforcement-operations-targeting-cybercrime-in-2023/
The law enforcement operations targeting cybercrime in 2023

PingRAT: secretly passes C2 traffic through firewalls using ICMP payloads

https://securityonline.info/pingrat-secretly-passes-c2-traffic-through-firewalls-using-icmp-payloads/
PingRAT: secretly passes C2 traffic through firewalls using ICMP payloads

Android game dev’s Google Drive misconfig highlights cloud security risks

https://www.bleepingcomputer.com/news/security/android-game-devs-google-drive-misconfig-highlights-cloud-security-risks/
Android game dev’s Google Drive misconfig highlights cloud security risks