Port 22

~ 13 Aug 2019 ~

Mautic Unauthenticated Remote Code Execution

MANRS Observatory: Monitoring the State of Internet Routing Security

Bitrock's InstallBuilder - Windows binaries tampering while preserving authenticode signature

New Burp Suite extension: bypassing IP based blocking with AWS API Gateway

Intercepting traffic from Android Flutter applications

700K Guest Records Stolen in Choice Hotels Breach

Back-to-Back Campaigns: Neko, Mirai, and Bashlite Malware Variants Use Various Exploits to Target Several Routers, Devices

4 New BlueKeep-like 'Wormable' Windows Remote Desktop Flaws Discovered

Intercepting traffic from Android Flutter applications

Exploiting GDPR to Get Private Information

Mitsubishi Electric smartRTU and INEA ME-RTU

Mitsubishi Electric smartRTU and INEA ME-RTU

Delta Industrial Automation DOPSoft

OSIsoft PI Web API

Siemens SCALANCE X Switches

Google Discloses 20-Year-Old Unpatched Flaw Affecting All Versions of Windows

Hacking my airplane BlackHat edition

2019 Pwnie Award Winners (And Those Who Wish They Weren't)

Cerberus: A New Android 'Banking Malware For Rent' Emerges

State of Cybersecurity Report 2019 (Visual edition)

Let Experts Do Their Job Managed WAF by Indusface

Epic Games Hit With Class Action Lawsuit Over Hacked 'Fortnite' Accounts

~ 12 Aug 2019 ~

SEC Investigating Data Leak at First American Financial Corp.

An Overview of Public Platform C2s

A Live Simulation of Cloud Misconfiguration Attacks

FBI Plans to Monitor Social Media May Spark Privacy Issues

Hackers Can Hurt Victims with Noise

Security Pros, Congress Reps Talk National Cybersecurity at DEF CON

More Focus on Security as Payment Technologies Proliferate

Evaluating the NSA's Telephony Metadata Program

Android Users Can Now Log in to Google Services Using Fingerprint

Recent Cloud Atlas activity

Modern-Day SOCs: People, Process & Technology

Screwed Drivers - Windows 10 Privilege Escalation to Ring 0

140 domains of Deloitte are vulnerable by subdomain takeover attacks

Canon DSLR Cameras Can Be Hacked With Ransomware Remotely

Apache Solr Injection whitepaper

~ 11 Aug 2019 ~

Say Cheese - How I Ransomwared Your DSLR Camera

SELECT code_execution FROM * USING SQLite;

Firmware Slap: Automating the discovery of exploitable vulnerabilities in Firmware

Nmap 7.80 Released!

Over 40 Drivers Could Let Hackers Install Persistent Backdoor On Windows PCs

Dont Underestimate Grep Based Code Scanning

~ 10 Aug 2019 ~

Vulnhub Write-up Kioptrix 5

PS Exploit for Steam Zero Day

Arkham: Hack The Box Walkthrough

Hack The Box - Arkham Write-up

Hack The Box - Arkham Write-up by 0xRick

Making it Rain shells in Kubernetes

#AlphanumericShellcoding: RISC-V constrained shellcode generator [DEFCON'27]

~ 9 Aug 2019 ~

Friday Squid Blogging: Sinuous Asperoteuthis Mangoldae Squid

Responding to Firefox 0-days in the wild [Coinbase Writeup]

LeakLooker part 3 DNA samples, internal files and more

iNSYNQ Ransom Attack Began With Phishing Email

New Vulnerability Risk Model Promises More-Efficient Security

State Farm Reports Credential-Stuffing Attack

Commando VM 2.0

RunasCs - Csharp and open version of windows builtin runas.exe

AndroidProjectCreator 1.3-stable release notes: convert an APK into an Android Studio project

Building a custom malware sandbox with PANDA

Week in security with Tony Anscombe

Week in security with Tony Anscombe

Gone to the Dogs - A Lock Screen LPE

LLDBFuzzer: Debugging and Fuzzing the Apple Kernel with LLDB Script

Apple will now pay hackers up to $1 million for reporting vulnerabilities