Building Casper's Shadow | @nao_sec
https://nao-sec.org/2024/06/building-caspers-shadow.html
EDRPrison: Borrow a Legitimate Driver to Mute EDR Agent
https://www.3nailsinfosec.com/post/edrprison-borrow-a-legitimate-driver-to-mute-edr-agent
GitHub - zgzhang/cve-2024-6387-poc: a signal handler race condition in OpenSSH's server (sshd)
https://github.com/zgzhang/cve-2024-6387-poc/
Caught in the Net: Using Infostealer Logs to Unmask CSAM Consumers | Recorded Future
https://www.recordedfuture.com/caught-in-the-net-using-infostealer-logs-to-unmask-csam-consumers
GitHub - ThePorgs/impacket: Impacket is a collection of Python classes for working with network protocols.
https://github.com/ThePorgs/impacket
Google Pixel 6 series phones bricked after factory reset
https://www.bleepingcomputer.com/news/google/google-pixel-6-series-phones-bricked-after-factory-reset/
'Almost every Apple device' vulnerable to CocoaPods • The Register
https://go.theregister.com/feed/www.theregister.com/2024/07/02/cocoapods_vulns_supply_chain_potential/
New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data
https://thehackernews.com/2024/07/new-intel-cpu-vulnerability-indirector.html
Securely design your applications and protect your sensitive data with VBS enclaves - Microsoft Community Hub
https://techcommunity.microsoft.com/t5/windows-os-platform-blog/securely-design-your-applications-and-protect-your-sensitive/ba-p/4179543
An unexpected journey into Microsoft Defender's signature World — retooling_
https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world
Patelco shuts down banking systems following ransomware attack
https://www.bleepingcomputer.com/news/security/patelco-shuts-down-banking-systems-following-ransomware-attack/
GitHub - mthcht/awesome-lists: Awesome Security lists for SOC/CERT/CTI
https://github.com/mthcht/awesome-lists
Cisco warns of NX-OS zero-day exploited to deploy custom malware
https://www.bleepingcomputer.com/news/security/cisco-warns-of-nx-os-zero-day-exploited-to-deploy-custom-malware/
A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA | PortSwigger Research
https://portswigger.net/research/a-hacking-hat-trick-previewing-three-portswigger-research-publications-coming-to-def-con-amp-black-hat-usa
Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware
https://thehackernews.com/2024/07/chinese-hackers-exploiting-cisco.html
Evading Event Tracing for Windows (ETW)-Based Detections | s4dbrd’s blog
https://s4dbrd.com/evading-etw-based-detections/
Xbox is down worldwide with users unable to login, play games
https://www.bleepingcomputer.com/news/technology/xbox-is-down-worldwide-with-users-unable-to-login-play-games/
Cyberinsurance Premiums are Going Down: Here’s Why and What to Expect - SecurityWeek
https://www.securityweek.com/cyberinsurance-premiums-are-going-down-heres-why-and-what-to-expect/
GitHub - zgzhang/cve-2024-6387-poc: a signal handler race condition in OpenSSH's server (sshd)
https://github.com/zgzhang/cve-2024-6387-poc
CDK Global says all dealers will be back online by Thursday
https://www.bleepingcomputer.com/news/security/cdk-global-says-all-dealers-will-be-back-online-by-thursday/
Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny
https://thehackernews.com/2024/07/metas-pay-or-consent-approach-faces-eu.html
Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies - SecurityWeek
https://www.securityweek.com/cisco-patches-nx-os-zero-day-exploited-by-chinese-cyberspies/
Korean ERP vendor's update systems subverted to spew malware • The Register
https://go.theregister.com/feed/www.theregister.com/2024/07/02/korean_erp_backdoor_malware_attack/
Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF · Doyensec's Blog
https://blog.doyensec.com/2024/07/02/cspt2csrf.html
Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought | Malwarebytes
https://www.malwarebytes.com/blog/news/2024/07/prudential-financial-data-breach-impacts-2-5-million-people-not-36000-as-first-thought
Prudential Financial data breach impacted over 2.5M individuals
https://securityaffairs.com/165121/data-breach/prudential-financial-data-breach-2-5m-individuals.html
Affirm tells SEC customer data stolen in Evolve breach • The Register
https://go.theregister.com/feed/www.theregister.com/2024/07/02/affirm_evolve_ransomware_breach/
Prudential Financial now says 2.5 million impacted by data breach
https://www.bleepingcomputer.com/news/security/prudential-financial-now-says-25-million-impacted-by-data-breach/
Google now pays $250,000 for KVM zero-day vulnerabilities
https://www.bleepingcomputer.com/news/security/google-now-pays-250-000-for-kvm-zero-day-vulnerabilities/