Collaborate Disseminate
As COVID-19 slowly spread across the globe, consumer demand for commercial virtual private network (VPN) services has soared – both for security reasons and for bypassing geo-blocking of (streaming) content. Not unexpectedly, enterprise VPN use h… Continue reading RDP and VPN use soars, increasing enterprise cyber risk
A watering hole was discovered on January 10, 2020 utilizing a full remote iOS exploit chain to deploy a feature-rich implant named LightSpy. The site appears to have been designed to target users in Hong Kong based on the content of the landing page. Continue reading iOS exploit chain deploys LightSpy feature-rich malware
A fresh module aims to compromise remote desktop accounts to access corporate resources. Continue reading TrickBot Trojan Adds RDP Brute-Forcing to Its Arsenal
I have a question about protecting myself against attacks on the RDP service.
I note that I have already done the appropriate configuration:
I am using a local user (not administrator) to connect
the administrator group is excluded from… Continue reading RDP – access security
I am puzzled by how people on Youtube bait scammers into connecting to their machines and end up “reversing” the connection on them. Essentially controlling the scammer’s PC.
Is this done via reverse shells ? Or do you get them to open up… Continue reading How is it possible for people to reverse a GoToAssist session? [duplicate]
The healthcare industry has significantly more exposed attack surfaces than any other industry surveyed, according to Censys’s research findings of cloud risks and cloud maturity by industry, revealed at RSA Conference 2020. Leveraging the Censys… Continue reading Healthcare industry at greatest risk of data breach
Hey so I run a server and was just checking through ” TCPView “.
TCPView brief explination of prog,
TCPView is a Windows program that will show you detailed listings of all TCP and
UDP endpoints on your system, including the local and r… Continue reading TCPView showed strange ip
Microsoft has finally patched the Internet Explorer (IE) zero-day flaw the company said in January was being used in “limited targeted attacks”. Continue reading IE zero day and heap of RDP flaws fixed in February Patch Tuesday
Here are the most serious bugs from Microsoft’s Patch Tuesday – Including CryptoAPI and RCE flaws in Windows Remote Desktop Gateway. Continue reading Microsoft fixes critical bugs in CryptoAPI, RD Gateway and .NET
There are many pre-made tools around for brute-forcing RDP credentials, but I haven’t found one for username enumeration. Is it possible by design to enumerate potential RDP logins? If not within the standard of the protocol,… Continue reading Is RDP user enumeration possible?