Kodex (Community Edition – CE) is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following...
A new Chrome extension has been released to help bug bounty hunters find keys that have made their way into JavaScript online. The open-source extension, now available on GitHub, is called TruffleHog. click here...
This tactic is actively used to push OpenSUpdater, a family of unwanted software dubbed as riskware, which injects ads into victims’ browsers and installs other unwanted programs onto their devices. click here to read...
Low-Code development is a diverse simple application software compatible with all kinds of businesses globally.… Is Low Code development the biggest cyber threat? on Latest Hacking News. click here to read full Article Read...
Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution) Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 (docx file) You need to install...
On Tuesday, cybersecurity researcher Randy Westergren discovered a pre-authentication RCE security flaw and the means to obtain a full root shell of the Motorola Halo+, a popular baby monitor. click here to read full...
GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA (single static assignment) form of Go source code. It is capable of tracing the source of variables and function arguments...
In the course of two months (July and August), security experts at GitHub have discovered arbitrary code execution vulnerabilities in the open-source Node.js packages, tar, and @npmcli/arborist. click here to read full Article Read...
“Karta” (Russian for “Map”) is an IDA Python plugin that identifies and matches open-sourced libraries in a given binary. The plugin uses a unique technique that enables it to support huge binaries (>200,000 functions),...
On September 7, 2021, Microsoft disclosed an active in-the-wild attack affecting Microsoft Windows. This vulnerability, CVE-2020-40444, is a remote code execution vulnerability in MSHTML and does not currently have a patch. click here to...
The vulnerabilities affect both Windows and Unix-based users, and if left unpatched, can be exploited by attackers to achieve arbitrary code execution on a system installing untrusted npm packages. click here to read full...
A very popular NPM package called ‘pac-resolver’ for the JavaScript programming language has been fixed to address a remote code execution flaw that could affect a lot of Node.js applications. click here to read...
Pandora is a music streaming app which lets you stream music on multiple platforms, including Android, Windows, macOS, and iOS. You can download the app on any of your devices and then use it...
As first noticed by security researcher vx-underground, an alleged member of the Babuk group released the full source code for their ransomware on a popular Russian-speaking hacking forum. click here to read full Article...
The ad, posted by an individual earlier linked to the botnet’s operation, claims that none of its two authors are involved in running the botnet, hence the reason they decided to sell its source...
Electronic Code Book (ECB) click here to read full Article Read More on latest Security Updates
