Iran would have directed several networks of cyber threat actors in support of its political goals
The flaws affect HP EliteBook devices and have CVSS scores between 7.5 and 8.2
En septembre 2022, Toulouse INP a été victime d'une cyberattaque avec le ransomware AvosLocker. L'attaque a été déclenchée via un compte étudiant compromis et a bloqué l'annuaire, les mécanismes d'authentification et les capacités d'accès physique aux bâtiments. Des mesures ont été prises pour rétab...
The flaws were discovered despite Harbor having implemented RBAC on most HTTP endpoints
Gang believed to have posed as UK financial regulator
This week I learned about a design flaw with pip download, which allows an adversary to run arbitrary code.
I assumed that running pip install means anything could happen, but pip download seems a bit surprising.
Both seem useful for red teaming though.
Background This post from Yehuda Gelb named Au...
New technique makes for faster encryption and improved evasion
Regulator takes a harder line on enforcement
Background If you haven’t done so yet, read my first Zix exploitation article: Spear Phishing with Zix: An Undisclosed Red Team Method for the Hungry APT, which established baselines to abuse the native organizational trust that Zix provides to perform spear phishing on the affected company. Shortly...
The campaign was disclosed by Symantec and AhnLab but Cisco Talos is now providing more details
Funds were taken in biggest ever digital currency heist
Background If you haven’t done so yet, read my first Zix exploitation article: Spear Phishing with Zix: An Undisclosed Red Team Method for the Hungry APT, which established baselines to abuse the native organizational trust that Zix provides to perform spear phishing on the affected company. Shortly...
Law firm is demanding more info from the company
Wordfence claimed to have blocked 4,948,926 attacks targeting this vulnerability
2.5 million people were affected, in a breach that could spell more trouble down the line.
The report also found that 89% of them experienced an average of 43 attacks in the past 12 months
Figure is more than 10% higher than cross-sector average
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
We are deeply saddened by the passing of Her Majesty Queen Elizabeth II. We send our sincerest condolences to the Royal Family.
The vulnerabilities, now fixed, allowed for a potential man in the middle attack