Those suffering emotional and physical impact surges
Players were sent malicious links disguised as support tickets
La Commission des valeurs mobilières de Hong Kong (SFC) a blâmé et sanctionné Six Fook Securities (ou Luk Fook Securities) pour des lacunes importantes dans ses mesures de cybersécurité. L'incident, une attaque par ransomware survenue en septembre 2022, a causé des perturbations majeures aux infrast...
Sonatype says it has detected 95,000 since 2019
The new legislation will implement some of the strictest privacy requirements in the US
All about the new look for Hacking The Cloud v2.
Potential attacks resulting from it may include privilege escalation and cross–tenant access
LockerGoga targeted several companies in Norway and across the US in 2019
On a network and need credentials? Try password spraying the domain controller directly.
A few years ago, I wrote this password spray tool called gospray that was used succesfully in a couple of engagements since. It does an LDAP bind directly against the domain controller to validate credentials. T...
The threat actor ‘teapotuberhacker’ could be linked to the Lapsus$ hacking group
They tried to conduct a ransomware attack against IHG and upon failing, decided to delete the data
In October 2019, a security researcher found a devastating vulnerability in Tornado.cash, a decentralized, non-custodial mixer on the Ethereum network. Tornado.cash uses zero-knowledge proofs (ZKPs) to allow its users to privately deposit and withdraw funds. The proofs are supposed to guarantee that...
In the Deloitte poll, 50.2% of respondents said their organization is at risk of ‘harvest now, decrypt later’ attacks
An undisclosed number of people have been impacted
En septembre 2022, Toulouse INP a été victime d'une cyberattaque avec le ransomware AvosLocker. L'attaque a été déclenchée via un compte étudiant compromis et a bloqué l'annuaire, les mécanismes d'authentification et les capacités d'accès physique aux bâtiments. Des mesures ont été prises pour rétab...
Major phishing risk as personal details are compromised
Threat actor bombarded Uber contractor with 2FA requests
This week I learned about a design flaw with pip download, which allows an adversary to run arbitrary code.
I assumed that running pip install means anything could happen, but pip download seems a bit surprising.
Both seem useful for red teaming though.
Background This post from Yehuda Gelb named Au...
It tried to trick victims into clicking on malicious files as part of a fake Amazon job assessment
Four of the CVEs posted are from 2013, and one is from 2010