11/27

GRUB LUKS Bypass and Dump | REMY HAX

https://remyhax.xyz/posts/luks-vm-dump/
GRUB LUKS Bypass and Dump | REMY HAX

Chinese hackers breached T-Mobile's routers to scope out network

https://www.bleepingcomputer.com/news/security/chinese-hackers-breached-t-mobiles-routers-to-scope-out-network/
Chinese hackers breached T-Mobile's routers to scope out network

Cloudflare says it lost 55% of logs pushed to customers for 3.5 hours

https://www.bleepingcomputer.com/news/security/cloudflare-says-it-lost-55-percent-of-logs-pushed-to-customers-for-35-hours/
Cloudflare says it lost 55% of logs pushed to customers for 3.5 hours

7fcfdd0eab35e983d3468860f5cf15b40492e2cb - v8/v8.git - Git at Google

https://chromium.googlesource.com/v8/v8.git/+/7fcfdd0eab35e983d3468860f5cf15b40492e2cb
7fcfdd0eab35e983d3468860f5cf15b40492e2cb - v8/v8.git - Git at Google

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

https://thehackernews.com/2024/11/researchers-discover-bootkitty-first.html
Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

Source Code of $3,000-a-Month macOS Malware 'Banshee Stealer' Leaked - SecurityWeek

https://www.securityweek.com/source-code-of-3000-a-month-macos-malware-banshee-stealer-leaked/
Source Code of $3,000-a-Month macOS Malware 'Banshee Stealer' Leaked - SecurityWeek

APT-C-60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign

https://thehackernews.com/2024/11/apt-c-60-exploits-wps-office.html
APT-C-60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign

Hacker in Snowflake Extortions May Be a U.S. Soldier – Krebs on Security

https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/
Hacker in Snowflake Extortions May Be a U.S. Soldier – Krebs on Security

Introduction | QEMU internals

https://airbus-seclab.github.io/qemu_blog/
Introduction | QEMU internals

Breaking Down Multipart Parsers: File upload validation bypass

https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/
Breaking Down Multipart Parsers: File upload validation bypass

EDR as an Offensive Tool | SafeBreach

https://www.safebreach.com/blog/dark-side-of-edr-offensive-tool/
EDR as an Offensive Tool | SafeBreach

New AMSI Bypss Technique Modifying CLR.DLL in Memory – Practical Security Analytics LLC

https://practicalsecurityanalytics.com/new-amsi-bypss-technique-modifying-clr-dll-in-memory/
New AMSI Bypss Technique Modifying CLR.DLL in Memory – Practical Security Analytics LLC

INTERPOL Busts African Cybercrime: 1,006 Arrests, 134,089 Malicious Networks Dismantled

https://thehackernews.com/2024/11/interpol-busts-african-cybercrime-1006.html
INTERPOL Busts African Cybercrime: 1,006 Arrests, 134,089 Malicious Networks Dismantled

Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets - SecurityWeek

https://www.securityweek.com/russian-apt-chained-firefox-and-windows-zero-days-against-us-and-european-targets/
Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets - SecurityWeek

Telco engineer spying on employer for Beijing gets 4 years • The Register

https://go.theregister.com/feed/www.theregister.com/2024/11/27/telco_spy_beijing_jailed/
Telco engineer spying on employer for Beijing gets 4 years • The Register

MalwareBazaar | Bootkitty

https://bazaar.abuse.ch/browse/tag/Bootkitty/
MalwareBazaar | Bootkitty

Detection Opportunities — EDR Silencer, EDRSandblast, Kill AV… | by SIMKRA | Nov, 2024 | Detect FYI

https://detect.fyi/detection-opportunities-edr-silencer-edrsandblast-kill-av-d882c290a393
Detection Opportunities — EDR Silencer, EDRSandblast, Kill AV… | by SIMKRA | Nov, 2024 | Detect FYI

ProjectSend Vulnerability Exploited in the Wild - SecurityWeek

https://www.securityweek.com/projectsend-vulnerability-exploited-in-the-wild/
ProjectSend Vulnerability Exploited in the Wild - SecurityWeek