Port 22

~ 16 Apr 2019 ~

Spear Phishing Campaign Targets Ukraine Government and Military; Infrastructure Reveals Potential Link to So-Called Luhansk People's Republic

Google Makes it Tough for Rogue App Developers Get Back on Android Play Store

Scranos: New Rapidly Evolving Rootkit-Enabled Spyware Discovered

Attacking Hardware Root of Trust from UEFI Firmware

~ 15 Apr 2019 ~

How does Tor really work? An in-depth guide

Experts: Breach at IT Outsourcing Giant Wipro

Adblock Plus filter lists may execute arbitrary code in web pages

Vulnerabilities in the WPA3 Wi-Fi Security Protocol

The Outlook Winner is Dash

Microsoft reveals breach affecting webmail users

New Details Emerge on Windows Zero Day

Cobalt Strike Walkthrough - In Depth Post

FLASHMINGO: The FireEye Open Source Automatic Analysis Tool for Flash

Coerchck - PowerShell Script For Listing Local Admins - Blue Team

CVE-2019-9730: Local Privilege Elevation in Synaptics Sound Device Driver (Write-Up + Exploit)

Account With Admin Privileges Abused to Install BitPaymer Ransomware via PsExec

China Spying on Undersea Internet Cables

GitHub - realtho/PartyLoud: A simple tool to do several HTTP / HTTPS requests and simulate navigation

The Single Cybersecurity Question Every CISO Should Ask

New zero-day vulnerability CVE-2019-0859 in win32k.sys

A Series of Unfortunate Images: Drupal 1-click to RCE Exploit Chain Detailed

Google Helps Police Identify Devices Close to Crime Scenes Using Location Data

Quantum Cryptography

Apache Tomcat Patches Important Remote Code Execution Flaw

~ 14 Apr 2019 ~

Timing Attacks reviewed using Machine Learning

Land Lordz Service Powers Airbnb Scams

P4wnP1 USB shell while evading Symantec detection features.

Envoy CVE-2019-9900 and CVE-2019-9901

Spectre Attacks: Exploiting Speculative Execution

Anatomy of the Triton Malware Attack.

~ 13 Apr 2019 ~

CVE-2019-8513: Command injection in macOS TimeMachine allows reliable local root privilege escalation exploit

Exploiting Apache Solr through OpenCMS

Hack The Box - Redcross Writeup by 0xdf

Hack The Box - RedCross write-up by 0xRick

New linux privilege Escalation techniques abusing sudo token

Hackers Compromise Microsoft Support Agent to Access Outlook Email Accounts

VirusTotal for Investigators

~ 12 Apr 2019 ~

Friday Squid Blogging: Detecting Illegal Squid Fishing with Satellite Imagery

Credential stuffing attack - Gather information about leaked emails from Pastebin.

New Privilege Escalation techniques abusing sudo token

Maliciously Tampering with Medical Imagery

This Week in Security Funding: Where the Money Went

ThreatIngestor: a flexible, config-driven framework for harvesting/managing threat intelligence.

Apples App-Site Association - The New robots.txt

US-CERT - Multiple VPN applications insecurely store session cookies (Cisco, F5, Palo Alto, Pulse, affected)

Hackers crack university defenses in just two hours

A reviewed list on where to find malicious samples

Safety of Your Personal Data Online Is a Life-And-Death Issue

Miner Malware Spreads Beyond China, Uses Multiple Propagation Methods Including EternalBlue, Powershell Abuse

New Version of Flame Malware Discovered

Russia Fines Facebook $47 Over Citizens' Data Privacy Dispute

Week in security with Tony Anscombe

$177.5 M Settlement Proposal: The Second Possible Big Dent In Yahoos Treasury For 2013-16 Data Breach Incident

Ledger Backup Pack bundle offer - Ledger Nano X + Ledger Nano S (50%)

Exploiting an Exposed Docker.Sock

~ 11 Apr 2019 ~

New 'HOPLIGHT' Malware Appears in Latest North Korean Attacks, Say DHS, FBI

New type of a hijack BGP attack in the wild

Security Enhanced Linux (SELinux): From Concepts to Code Flow by J.C. Scaly

The Ping is the Thing: Popular HTML5 Feature Used to Trick Chinese Mobile Users into Joining Latest DDoS Attack | Imperva

Ad Exploit Activity Up by 428% since March: 70% of a sites users are exposed to an 'at-risk-ad' every month

BGP perforating wound

Tax Hacks: How Seasonal Scams Cause Yearlong Problems

New research: we discover how to avoid SmartScreen via COM Hijacking and with no privileges

Android 7.0+ Phones Can Now Double as Google Security Keys

WPA3 flaws may let attackers steal Wi-Fi passwords