08/20

Windows driver zero-day exploited by Lazarus hackers to install rootkit

https://www.bleepingcomputer.com/news/microsoft/windows-driver-zero-day-exploited-by-lazarus-hackers-to-install-rootkit/
Windows driver zero-day exploited by Lazarus hackers to install rootkit

PoC Exploit for Windows 0-Day Flaws CVE-2024-38202 and CVE-2024-21302 Released

https://securityonline.info/poc-exploit-for-windows-0-day-flaws-cve-2024-38202-and-cve-2024-21302-released/
PoC Exploit for Windows 0-Day Flaws CVE-2024-38202 and CVE-2024-21302 Released

Web Browser Stored Credentials – Penetration Testing Lab

https://pentestlab.blog/2024/08/20/web-browser-stored-credentials/
Web Browser Stored Credentials – Penetration Testing Lab

Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

https://thehackernews.com/2024/08/hackers-exploit-php-vulnerability-to.html
Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

National Public Data Published Its Own Passwords – Krebs on Security

https://krebsonsecurity.com/2024/08/national-public-data-published-its-own-passwords/
National Public Data Published Its Own Passwords – Krebs on Security

.:: Phrack Magazine ::.

http://phrack.org/issues/71/2.html#article
.:: Phrack Magazine ::.

US warns of Iranian hackers escalating influence operations

https://www.bleepingcomputer.com/news/security/us-warns-of-iranian-hackers-escalating-influence-operations/
US warns of Iranian hackers escalating influence operations

Best Laid Plans: TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset | Proofpoint US

https://www.proofpoint.com/us/blog/threat-insight/best-laid-plans-ta453-targets-religious-figure-fake-podcast-invite-delivering
Best Laid Plans: TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset | Proofpoint US

Previously unseen Msupedge backdoor targeted a university in Taiwan

https://securityaffairs.com/167298/malware/msupedge-backdoor.html
Previously unseen Msupedge backdoor targeted a university in Taiwan

Hacker locks Unicoin staff out of Google accounts for 4 days

https://www.bleepingcomputer.com/news/security/hacker-locks-unicoin-staff-out-of-google-accounts-for-4-days/
Hacker locks Unicoin staff out of Google accounts for 4 days

Major Backdoor in Millions of RFID Cards Allows Instant Cloning - SecurityWeek

https://www.securityweek.com/major-backdoor-in-millions-of-rfid-cards-allows-instant-cloning/
Major Backdoor in Millions of RFID Cards Allows Instant Cloning - SecurityWeek

F5 Patches High-Severity Vulnerabilities in BIG-IP, NGINX Plus - SecurityWeek

https://www.securityweek.com/f5-patches-high-severity-vulnerabilities-in-big-ip-nginx-plus/
F5 Patches High-Severity Vulnerabilities in BIG-IP, NGINX Plus - SecurityWeek

Hackers use PHP exploit to backdoor Windows systems with new malware

https://www.bleepingcomputer.com/news/security/hackers-use-php-exploit-to-backdoor-windows-systems-with-new-malware/
Hackers use PHP exploit to backdoor Windows systems with new malware

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

https://thehackernews.com/2024/08/thousands-of-oracle-netsuite-sites-at.html
Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

https://thehackernews.com/2024/08/researchers-uncover-tls-bootstrap.html
Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America

https://thehackernews.com/2024/08/blind-eagle-hackers-exploit-spear.html
Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America

Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware

https://thehackernews.com/2024/08/iranian-cyber-group-ta453-targets.html
Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware

Toyota disclosed a data breach after ZeroSevenGroup leaked stolen data on a cybercrime forum

https://securityaffairs.com/167274/uncategorized/zerosevengroup-toyota-data-breach.html
Toyota disclosed a data breach after ZeroSevenGroup leaked stolen data on a cybercrime forum

Oregon Zoo warns visitors their credit card details were stolen

https://www.bleepingcomputer.com/news/security/oregon-zoo-warns-visitors-their-credit-card-details-were-stolen/
Oregon Zoo warns visitors their credit card details were stolen

.:: Phrack Magazine ::.

http://phrack.org/issues/71/1.html
.:: Phrack Magazine ::.

Vulnerabilities in Microsoft macOS apps may give attackers access to microphone, camera - Help Net Security

https://www.helpnetsecurity.com/2024/08/20/microsoft-macos-vulnerabilities/
Vulnerabilities in Microsoft macOS apps may give attackers access to microphone, camera - Help Net Security

Hacker Pics

https://hackerpics.com
Hacker Pics