Collaborate Disseminate
Remember xHelper?
A mysterious piece of Android malware that re-installs itself on infected devices even after users delete it or factory reset their devices—making it nearly impossible to remove.
xHelper reportedly infected over 45,000 devices last … Continue reading Unveiled: How xHelper Android Malware Re-Installs Even After Factory Reset
As an industry and community, we need to go beyond…go beyond looking at single artifacts to indicate or justify “evidence”, and we need to go beyond having those lists of single artifacts provided to us. Lists, such as the SANS DFIR poster of a… Continue reading Going Beyond
Since my blogging whip was gone I haven’t been posting as frequently as I’d like, but I realized we had recently published new versions of some of our coolest research and I completely missed announcing them here! So let me talk a bit about… Continue reading From my Gartner Blog – New Research on Threat Intelligence and SOAR
A cybersecurity researcher today disclosed technical details and proof-of-concept of a critical remote code execution vulnerability affecting OpenWrt, a widely used Linux-based operating system for routers, residential gateways, and other embedded devi… Continue reading Critical RCE Bug Affects Millions of OpenWrt-based Network Devices
Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers remotely take complete control over targeted computers.
According to Microsoft, both unpatc… Continue reading Warning — Two Unpatched Critical 0-Day RCE Flaws Affect All Windows Versions
Though it’s not Patch Tuesday, Adobe today released a massive batch of out-of-band software updates for six of its products to patch a total of 41 new security vulnerabilities.
Adobe last week made a pre-announcement to inform its users of an upcoming… Continue reading Adobe Releases Critical Patches for Acrobat Reader, Photoshop, Bridge, ColdFusion
Online guitar tutoring website TrueFire has apparently suffered a ‘Magecart’ style data breach incident that may have potentially led to the exposure of its customers’ personal information and payment card information.
TrueFire is one of the popular g… Continue reading TrueFire Guitar Tutoring Website Suffers Magecart-style Credit Card Breach
BugBounty story #bugbountytips
A fixed but they didn’t pay the bugbounty story…
Timeline:
reported 21 Oct 2019
validated at Critical 23 Oct 2019
validated as fixed 30 Oct 2019
Bounty amount stated (IDR 10.000.000 = ~700 USD) 12 Nov 2019
I… Continue reading What is your GCP infra worth?…about ~$700 [Bugbounty]
Microsoft today finally released an emergency software update to patch the recently disclosed very dangerous vulnerability in SMBv3 protocol that could let attackers launch wormable malware, which can propagate itself from one vulnerable computer to an… Continue reading Critical Patch Released for ‘Wormable’ SMBv3 Vulnerability — Install It ASAP!
Hardly a week (sometimes a day??) passes without some mention of ransomware, and another organization or municipality (or three) feeling the impact of a ransomware attack. In fact, just recently, the City of Durham, NC, was hit with a Ryuk ransomware i… Continue reading Ransomware