Suspected hacktivists inside country share sensitive info
Indictments form one of three cases involving Chinese spies
Des données médicales d'étudiants de San Diego ont été compromises lors d'une cyberattaque en octobre. Les noms et informations médicales des étudiants ont été compromis. Les responsables ont rapidement sécurisé le réseau, lancé une enquête et informé les autorités. Des mesures de sécurité supplémen...
Daixin Team is actively targeting US businesses, mainly in the healthcare sector
The Veeamp malware was used by the Monti and Yanluowang ransomware groups in these attacks
Une cyberattaque sur ses systèmes d’informations mettant au ralenti les opérations comptables durant une période de trois semaines environ. En date du 31 décembre 2022, l’ensemble des opérations ont pu être faite normalement sans aucune conséquence sur la clôture de l’année 2022.
It is due partly to a major phishing attack DHL warned about before the quarter started
The UK Cyber Security Council has announced a pilot program designed to create the country’s first chartered cyber professionals
Great news!
An article about ropci is in the latest free issue of the Pentest Magazine!
The article has a lot more info then my ropci blog post or the info on the ropci Github repo.
Get your copy and check it out! It also has an article about Nuclei, one of my favorite tools.
Cheers.
Link: https://p...
Google forced to remove over a dozen malicious apps
Interserve slammed by regulator after employee data breach
This post will highlight a pattern I have seen across multiple production Microsoft Azure Active Directory tenants which led to MFA bypasses using ROPC.
The key take-away: Always enforce MFA! Sounds easy, but there are often misconfigurations and unexpected exceptions. So, test your own AAD tenant f...
Cops also identify opportunities to enhance law enforcement
The campaigns are set up to provide fake services to the citizens and steal their credentials
There are some neat TTPs that I don’t use frequently, and if the time arises, I need to dig up details again. So, I figured to write some of them down, starting with SSH Agent Hijacking.
What is SSH Agent Hijacking? Short story, if you have keys added to an SSH Agent an adversary with root permissio...
GUAC aims to bring together many different sources of software security metadata
JFrog scanned over eight million artifacts in the most common open-source software registries
With ECR permissions you can easily distribute a backdoor to production servers, developer's laptops, or CI/CD pipelines and own the environment by gaining privileged permissions.
Lindy Cameron argues that smart cities are becoming an attractive target for threat actors, including nation states
Tim Brown, CISO and VP of security at SolarWinds shared his experiences remediating a major cyber-attack during Mandiant’s mWISE event on October 18, 2022