06/17

Nighthawk 0.3 - Automate All the Things - MDSec

https://www.mdsec.co.uk/2024/06/nighthawk-0-3-automate-all-the-things/
Nighthawk 0.3 - Automate All the Things - MDSec

Create your first application on the Flipper Zero - The Gistre Blog

https://blog.gistre.epita.fr/posts/alan.gueret-2023-09-09-create_your_first_application_on_the_flipper_zero/
Create your first application on the Flipper Zero - The Gistre Blog

New ARM 'TIKTAG' attack impacts Google Chrome, Linux systems

https://www.bleepingcomputer.com/news/security/new-arm-tiktag-attack-impacts-google-chrome-linux-systems/
New ARM 'TIKTAG' attack impacts Google Chrome, Linux systems

D-Link Technical Support

https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
D-Link Technical Support

Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake | WIRED

https://www.wired.com/story/epam-snowflake-ticketmaster-breach-shinyhunters/
Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake | WIRED

Hackers use F5 BIG-IP malware to stealthily steal data for years

https://www.bleepingcomputer.com/news/security/hackers-use-f5-big-ip-malware-to-stealthily-steal-data-for-years/
Hackers use F5 BIG-IP malware to stealthily steal data for years

GitHub Copilot Chat: From Prompt Injection to Data Exfiltration · Embrace The Red

https://embracethered.com/blog/posts/2024/github-copilot-chat-prompt-injection-data-exfiltration/
GitHub Copilot Chat: From Prompt Injection to Data Exfiltration · Embrace The Red

Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

https://thehackernews.com/2024/06/hackers-exploit-legitimate-websites-to.html
Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

Thinkst

https://thinkst.com/ts
Thinkst

Exploitation of a kernel pool overflow from a restrictive chunk size (CVE-2021-31969) | STAR Labs

https://starlabs.sg/blog/2023/11-exploitation-of-a-kernel-pool-overflow-from-a-restrictive-chunk-size-cve-2021-31969/
Exploitation of a kernel pool overflow from a restrictive chunk size (CVE-2021-31969) | STAR Labs

LA County’s Department of Public Health (DPH) data breach impacted over 200,000 individuals

https://securityaffairs.com/164585/data-breach/la-countys-department-of-public-health-dph-data-breach.html
LA County’s Department of Public Health (DPH) data breach impacted over 200,000 individuals

Bypassing Okta’s Passwordless MFA: Technical Analysis and Detection - Rezonate

https://www.rezonate.io/blog/bypassing-oktas-passwordless-mfa-technical-analysis-and-detection/
Bypassing Okta’s Passwordless MFA: Technical Analysis and Detection - Rezonate

China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices

https://thehackernews.com/2024/06/china-linked-hackers-infiltrate-east.html
China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices

Keytronic Says Personal Information Stolen in Ransomware Attack - SecurityWeek

https://www.securityweek.com/keytronic-says-personal-information-stolen-in-ransomware-attack/
Keytronic Says Personal Information Stolen in Ransomware Attack - SecurityWeek

[Linux Kernel Exploitation 0x0] Debugging the Kernel with QEMU

https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x0-debugging.html
[Linux Kernel Exploitation 0x0] Debugging the Kernel with QEMU

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

https://thehackernews.com/2024/06/asus-patches-critical-authentication.html
ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

Online job offers, the reshipping and money mule scams

https://securityaffairs.com/164566/security/online-job-offers-reshipping-money-mule-scams.html
Online job offers, the reshipping and money mule scams

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested – Krebs on Security

https://krebsonsecurity.com/2024/06/alleged-boss-of-scattered-spider-hacking-group-arrested/
Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested – Krebs on Security

Untangling Azure Active Directory Principals & Access Permissions · csandker.io

https://csandker.io/2022/10/19/Untangling-Azure-Permissions.html
Untangling Azure Active Directory Principals & Access Permissions · csandker.io

Empire Market owners charged for enabling $430M in dark web transactions

https://www.bleepingcomputer.com/news/legal/empire-market-owners-charged-for-enabling-430m-in-dark-web-transactions/
Empire Market owners charged for enabling $430M in dark web transactions

CISA Conducts First AI Cyber Incident Response Exercise - SecurityWeek

https://www.securityweek.com/cisa-conducts-first-ai-cyber-incident-response-exercise/
CISA Conducts First AI Cyber Incident Response Exercise - SecurityWeek

MCTTP 2023 | Talk by Jimmy Bayne - YouTube

https://www.youtube.com/watch?v=xdc2ka3qtnM
MCTTP 2023 | Talk by Jimmy Bayne - YouTube

NiceRAT Malware Targets South Korean Users via Cracked Software

https://thehackernews.com/2024/06/nicerat-malware-targets-south-korean.html
NiceRAT Malware Targets South Korean Users via Cracked Software

Exploiting CVE-2024-21378 – Remote Code Execution in Microsoft Outlook

https://www.netspi.com/blog/technical-blog/red-team-operations/microsoft-outlook-remote-code-execution-cve-2024-21378/
Exploiting CVE-2024-21378 – Remote Code Execution in Microsoft Outlook

IPv6 Security & Capability Testing, Part 2 – The Internet Protocol Blog

https://theinternetprotocolblog.wordpress.com/2020/05/26/ipv6-security-capability-testing-part-2/
IPv6 Security & Capability Testing, Part 2 – The Internet Protocol Blog

IPv6 Security & Capability Testing, Part 1 – The Internet Protocol Blog

https://theinternetprotocolblog.wordpress.com/2020/05/24/ipv6-security-capability-testing-part-1/
IPv6 Security & Capability Testing, Part 1 – The Internet Protocol Blog