The campaign had several features differentiating it from other ransomware tracked by Microsoft
Which? said it has reported the fake URLs to the National Cyber Security Centre
There are some neat TTPs that I don’t use frequently, and if the time arises, I need to dig up details again. So, I figured to write some of them down, starting with SSH Agent Hijacking.
What is SSH Agent Hijacking? Short story, if you have keys added to an SSH Agent an adversary with root permissio...
The collection became increasingly clear through the tools used by both threat actors
Underground organization said to have laundered €300m annually
With ECR permissions you can easily distribute a backdoor to production servers, developer's laptops, or CI/CD pipelines and own the environment by gaining privileged permissions.
Local government's travails highlight devastating impact of breaches
Black Axe syndicate responsible for multimillion-dollar losses
Andrew Haberlandt During my summer internship at Trail of Bits, I worked on the fork of the RBPF JIT compiler that is used to execute Solana smart contracts. The RBPF JIT compiler plays a critical role on the Solana blockchain, as it facilitates the execution of contracts on validator nodes by defa...
The multi-vector, 2.5Tbps attack consisted of UDP and TCP floods
The data breach saw Zoetop allegedly trying to keep the real impact of the leak quiet
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in August and September.
Articles
AuthPoint ADFS agent installation fails on secondary server
AuthPoint Gateway status is Not Installed or Not Connected after upgrade to...
An average of 2297 attacks against organizations were recorded every week
Jake Moore, global cybersecurity advisor at ESET, shared at DTX Europe 2022 how he used a fake social media profile to hack employees of a company
Earlier this year, I successfully completed my internship at Trail of Bits and secured a full-time position as a Blockchain Security Analyst. This post is not intended to be a technical description of the work I did during my internship. Rather, it is intended to describe my general experience as a...
Consumers should protect themselves by using least-privilege principles
Consultancy firm Booz Allen has published a comprehensive report on Chinese-sponsored threat
tl;dr: Our publicly available Semgrep ruleset now has 11 rules dedicated to the misuse of machine learning libraries. Try it out now! Picture this: You’ve spent months curating images, trying out different architectures, downloading pretrained models, messing with Kubernetes, and you’re finally read...
The group is characterized by the use of a stolen digital certificate issued by DEEPSoft
YoWhatsApp v2.22.11.75 was distributed via ads on Android apps like Snaptube and VidMate