Collaborate Disseminate
Some bad actors are honing tools to go after small fry: This variant was refined to target not one, but two vendors’ devices that are common in SOHO setups. Continue reading eCh0raix Ransomware Variant Targets QNAP, Synology NAS Devices
Is fuzzing for the cybersec elite, or should it be accessible to all software developers? FuzzCon panelists say join the party as they share fuzzing wins & fails.
Continue reading Fuzz Off: How to Shake Up Code to Get It Right – Podcast
Coupon codes for Netlifx or Google AdWords? Voting for the best football team? Beware: Malicious apps offering such come-ons could inflict a new trojan. Continue reading Android Malware ‘FlyTrap’ Hijacks Facebook Accounts
IBM X-Force detailed the custom-made “LittleLooter” data stealer and 4+ hours of ITG18 operator training videos revealed by an opsec goof. Continue reading Black Hat: Charming Kitten Leaves More Paw Prints
Were we work-from-home clicking zombies? Steganography attacks snagged three out of eight recipients. Nasty CAPTCHAs suckered 50 times more clicks during 2020.
Continue reading We COVID-Clicked on Garbage, Report Finds: Podcast
Podcast: Blood samples aren’t martinis. You can’t shake them. But bugs in pneumatic control systems could lead to that, RCE or ransomware. Continue reading ‘PwnedPiper’: Devastating Bugs in >80% of Hospital Pneumatics
Vulnerability Name Affected Component CVE# Date Underflow in udpRXThread HMI3 Control Panel in: Nexus Panel CVE-2021-37161 02/08/2021 Overflow in sccProcessMsg HMI3 Control Panel in: Nexus Panel CVE-2021-37162 02/08/2021 Overflow in hmiProcessMsg HMI3 … Continue reading Threatpost 2021-08-02 19:34:17
There are patches or remediations for all of them, but they’re still being picked apart. Why should attackers stop if the flaws remain unpatched, as so many do? Continue reading CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer
They’re either new or old REvil & DarkSide wine in new bottles. Both have a taste for deep-pocketed targets and DarkSide-esque virtue-signaling. Continue reading BlackMatter & Haron: Evil Ransomware Newborns or Rebirths
Researchers preview work to be presented at Black Hat on how AD “misconfiguration debt” lays out a dizzying array of attack paths, such as in PetitPotam.
Continue reading Podcast: Why Securing Active Directory Is a Nightmare