[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Ransomware Soars 148% to Record-Breaking Levels in 2021
Total attempted attacks could top 700 million by year-end
> Small Businesses Pay Up to $1M to Recover from Breaches
Non-profit warns it takes years to fully recover from a serious incident
> Metadata in Google Cloud Instances
Information about the data an attacker can access via GCP's API endpoints
> US Launches Appeal Against Assange Extradition Decision
UK court's decision is challenged by Biden administration
> India’s Supreme Court Orders Pegasus Probe
Inquiry will examine whether government used surveillance software for illegal espionage
> Offensive BPF: Understanding and using bpf_probe_write_user
This post is part of a series about Offensive BPF to learn how BPFs use will impact offensive security, malware, and detection engineering. Click the “ebpf” tag to see all relevant posts. Building advanced BPF programs So far in this Offensive BPF series the focus was on bpftrace to build and run BP...
> EC-Council Offers Free Cybersecurity Training
Network Defense, Ethical Hacking, and Digital Forensics covered in EC-Council’s first-ever MOOC
> HM Treasury Hit by Five Million Malicious Emails in Past Three Years
A total of 4,870,389 phishing, malware and spam emails targeting HM Treasury were blocked in the past three years
> Classe de vulnérabilités en environnement Active Directory (15 octobre 2021)
Résumé Le protocole d’authentification NTLM souffre de faiblesses permettant, sous conditions, à un attaquant de relayer une authentification qu’il reçoit d’une victime vers un serveur cible. Ceci peut potentiellement permettre à cet attaquant d’élever ses privilèges ou d’envoyer des commandes à...
> North Korean Lazarus APT Targets Software Supply Chain
Prolific threat group take a leaf out of the SolarWinds campaign
> Ofcom's Scam Call-Blocking Plan Could Save Consumers Millions
Report suggests strategy may prevent 115 million fraudulent calls from abroad
> Classe de vulnérabilités en environnement Active Directory (15 octobre 2021)
Le protocole d’authentification NTLM souffre de faiblesses permettant, sous conditions, à un attaquant de relayer une authentification qu’il reçoit d’une victime vers un serveur cible. Ceci peut potentiellement permettre à cet attaquant d’élever ses privilèges ou d’envoyer des commandes à...
> Digital Extortionists DDoS VoIP Providers
UK body warns of “unprecedented” attack campaign
> State Department to Form Cyber Bureau
United States announces plans to launch new Bureau for Cyberspace and Digital Policy
> Offensive BPF: Sniffing Firefox traffic with bpftrace
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware, and detection engineering. Click the “ebpf” tag to see all relevant posts. One of the issues I ran into when trying out sslsniff-bpfcc was that it did not work with Fi...
> 150 Arrested Over Darknet Drug Trafficking
Drugs, weapons, and over $31m seized under Operation Dark HunTor
> Study Coordinator Falsified Clinical Trial Data
Subjects made to appear as though they were participating in clinical trials when they were not
> Google Earth Hacking - EaaS (Espionage as a Service)
Credits John Github: https://github.com/johnjhacking Molly White Twitter: https://twitter.com/molly0xFFF Zultan Twitter: https://twitter.com/orpheus9001 Summary First and foremost, we may have taken the phrase “Hack the Planet” a little too serious. Google Earth Enterprise is an application that is...
> Almost All US Organizations Experienced a Cyber Event in the Past Year
98% of US organizations have experienced at least one cyber event in the past year, which compares to 86% of non-US organizations
> Global Security Skills Shortage Falls to 2.7 Million Workers
(ISC)2 study warns that demand continues to rise in most regions