Port 22

~ 11 Jun 2019 ~

Project Zero: DoS in Windows core crypto-library SymCrypt

Recipe for Root - LPE Reference for Win+linux

HTTP screenshots with Nmap, Chrome, and Selenium

Addressing Cloud Security with Infrastructure Baselines

Amazon S3 Ransomware Prevention and Defense

Amazon S3 Ransomware Attack Vector

Hunting COM Objects (Part Two)

'Have I Been Pwned' Is Up for Sale

Cyberattack exposes travelers photos, says US border agency

Attack vector for an S3 Ransomware

DICOM Standard in Medical Devices

Microsoft Releases June 2019 Security Updates to Patch 88 Vulnerabilities

Workshop on the Economics of Information Security

Siemens Siveillance VMS

Siemens SIMATIC Ident MV420 and MV440 Families

Siemens LOGO!8 Devices

Siemens SCALANCE X

Rainbow Crackalack: Make Rainbow Tables Great Again

Adobe Issues Critical Patches for ColdFusion, Flash Player, Campaign Software

Free OSINT tool: interface to the new Facebook search engine

New Flaw in WordPress Live Chat Plugin Lets Hackers Steal and Hijack Sessions

Want to take over the Java ecosystem? All you need is a MITM!

~ 10 Jun 2019 ~

New tool: AVML - a userland volatile memory acquisition tool for x86_64 Linux

Cognitive Bias Can Help Shape Security Decisions

Cognitive Bias Can Hamper Security Decisions

GoldBrute Botnet Brute-Forcing 1.5M RDP Servers

Mobile Malware Analysis : Overlay and How to Counter It

Python for Reverse Engineering 1: ELF Binaries

MuddyWater Resurfaces, Uses Multi-Stage Backdoor POWERSTATS V3 and New Post-Exploitation Tools

Your Linux Can Get Hacked Just by Opening a File in Vim or Neovim Editor

Employment Scam

'Lone Wolf' Scammer Built a Multifaceted BEC Cybercrime Operation

18 Cases of Insider Bank Threats

XSS: bypass user input validation using JavaScript global variables

CVE-2019-2725 Exploited and Certificate Files Used for Obfuscation to Deliver Monero Miner

Large European Routing Leak Sends Traffic Through China Telecom

~ 9 Jun 2019 ~

State of Industrial Control Systems in Poland and Switzerland

Collection of 18 Real Cases of Insider Bank Threats

~ 8 Jun 2019 ~

GitHub - Hnfull/Intensio-Obfuscator: Obfuscate a python code 2.x and 3.x

Digging Android Applications Part 1 Drozer + Burp

Protostar stack6

Hack The Box - Help Write-up by 0xRick

Hackers can hijack WhatsApp to run malicious code that pores over encrypted chats, eavesdrops on calls, turns on the microphone and camera, accesses photos, contacts, and other information on a handheld, and potentially further compromises the device.

Local file inclusion exploitation tool

Stealthier communications & Port Knocking via Windows Filtering Platform (WFP)

TRICKBOT Analysis - How to decode config and modules

~ 7 Jun 2019 ~

Friday Squid Blogging: Possible New Squid Species

Logging Made Easy for Windows Environments

Rapid creation of users in a lab ad with youzer

Bloodhound Walkthrough Blue and Red Team Tips

Week in security with Tony Anscombe

Week in security with Tony Anscombe

Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness

Massive Changes to Tech and Platforms, But Cybercrime? Not So Much

Exfiltration series: Spotexfil

Critical bug found in popular mail server software

Critical bug found in popular mail server software

iOS Shortcut for Recording the Police

The Minefield of Corporate Email

NVISO Labs | Solving a CTF challenge: Exploiting a Buffer Overflow (video)

Looking for contributors to ArchStrike

Auditing with Securify

Hacker Discloses Second Zero-Day to Bypass Patch for Windows EoP Flaw

New Brute-Force Botnet Targeting Over 1.5 Million RDP Servers Worldwide

~ 6 Jun 2019 ~

Severe vulnerability in Exim [LWN.net]