Hacker Trends
03/27
03/28
03/29
Statistic
11/01 18:21 (UTC)
03/27
03/28
03/29
7 Posts
Hiding in the Clouds: Abusing Azure DevOps Services to Bypass Microsoft Sentinel Analytic Rules - YouTube
https://
www.youtube.com
/watch?v=IYyfRu8Y0f4
7 Posts
PyPI suspends new user registration to block malware campaign
https://
www.bleepingcomputer.com
/news/security/pypi-suspends-new-user-registration-to-block-malware-campaign/
5 Posts
Cisco warns of password-spraying attacks targeting VPN services
https://
www.bleepingcomputer.com
/news/security/cisco-warns-of-password-spraying-attacks-targeting-vpn-services/
4 Posts
SCCM | Mayfly
https://
mayfly277.github.io
/categories/sccm/
4 Posts
GitHub - Notselwyn/CVE-2024-1086: Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
https://
github.com
/notselwyn/cve-2024-1086
4 Posts
New ZenHammer Attack Bypasses RowHammer Defenses on AMD CPUs
https://
thehackernews.com
/2024/03/new-zenhammer-attack-bypasses-rowhammer.html
4 Posts
Facebook spied on Snapchat users to get analytics about the competition | Malwarebytes
https://
www.malwarebytes.com
/blog/news/2024/03/facebook-spied-on-snapchat-users-to-get-analytics-about-the-competition
4 Posts
Analysis report-(476689)-2024.html (MD5: ACE67F099683C4360F442C58DA66AEBA) Malicious activity - Interactive analysis ANY.RUN
https://
app.any.run
/tasks/4437c29a-0bfc-40f2-84e5-9b51f7527289
4 Posts
Darcula Phishing Network Leveraging RCS and iMessage to Evade Detection
https://
thehackernews.com
/2024/03/darcula-phishing-network-leveraging-rcs.html
4 Posts
SteelCon Call For Papers 2024
https://
docs.google.com
/forms/d/e/1FAIpQLSeRupimgtwsbf0SmdcEk4KJt6JZiKp6Za30wkffAYZTWbGLNw/viewform
4 Posts
SCCM / MECM LAB - Part 0x1 - Recon and PXE | Mayfly
https://
mayfly277.github.io
/posts/SCCM-LAB-part0x1/
3 Posts
GitHub - soufianetahiri/TeamsNTLMLeak: Leak NTLM via Website tab in teams via MS Office
https://
github.com
/soufianetahiri/TeamsNTLMLeak/
3 Posts
Update Chrome now! Google patches possible drive-by vulnerability | Malwarebytes
https://
www.malwarebytes.com
/blog/news/2024/03/update-chrome-now-google-patches-possible-drive-by-vulnerability
3 Posts
New Darcula phishing service targets iPhone users via iMessage
https://
www.bleepingcomputer.com
/news/security/new-darcula-phishing-service-targets-iphone-users-via-imessage/
3 Posts
Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack
https://
thehackernews.com
/2024/03/finland-blames-chinese-hacking-group.html
3 Posts
GitHub - hoodoer/JS-Tap: JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application.
https://
github.com
/hoodoer/JS-Tap
3 Posts
HackerOne | Report #2310620 - New Hacktivity features:Bounty rewards leakage Where programs doesn’t decide to disclose bounty in limited disclosure report | HackerOne
https://
hackerone.com
/reports/2310620
3 Posts
Chinese Cyberspies Targeting ASEAN Entities - SecurityWeek
https://
www.securityweek.com
/chinese-cyberspies-targeting-asean-entities/
3 Posts
Criminals Are Weaponizing Child Abuse Imagery to Ban Discord Servers
https://
www.404media.co
/criminals-are-weaponizing-child-abuse-imagery-to-ban-discord-servers/
3 Posts
Peter G is fundraising for Pilgrims Hospices In East Kent
https://
www.justgiving.com
/page/petegriggs-pilgrims-2024
3 Posts
Retail chain Hot Topic hit by new credential stuffing attacks
https://
www.bleepingcomputer.com
/news/security/retail-chain-hot-topic-hit-by-new-credential-stuffing-attacks/
3 Posts
Malware-IOCs/2024-03-27 FakeUpdates IOCs at main · executemalware/Malware-IOCs · GitHub
https://
github.com
/executemalware/Malware-IOCs/blob/main/2024-03-27%20FakeUpdates%20IOCs
3 Posts
Analysis SecureClientInstaller.exe (MD5: D3B4EACCE35FB5B50B0F45F35119508C) Malicious activity - Interactive analysis ANY.RUN
https://
app.any.run
/tasks/2d1f27b6-b6b6-4eaa-a518-0289c1335186
3 Posts
A review of zero-day in-the-wild exploits in 2023
https://
blog.google
/technology/safety-security/a-review-of-zero-day-in-the-wild-exploits-in-2023/
3 Posts
Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries
https://
thehackernews.com
/2024/03/linux-version-of-dinodasrat-spotted-in.html
3 Posts
Office of Public Affairs | Latvian Broker Arrested for Allegedly Smuggling Advanced U.S. Aircraft Technology to Russia | United States Department of Justice
https://
www.justice.gov
/opa/pr/latvian-broker-arrested-allegedly-smuggling-advanced-us-aircraft-technology-russia
3 Posts
CISA Moving Forward With Cyber Incident Reporting Rules Impacting 316,000 Entities - SecurityWeek
https://
www.securityweek.com
/cisa-moving-forward-with-cyber-incident-reporting-rules-impacting-316000-entities/
3 Posts
Decade-old Linux ‘wall’ bug helps make fake SUDO prompts, steal passwords
https://
www.bleepingcomputer.com
/news/security/decade-old-linux-wall-bug-helps-make-fake-sudo-prompts-steal-passwords/