On Thursday, RiskIQ researchers published a report on the network infrastructure footprint of SolarWinds-linked cyberattackers, labeling it as “significantly larger than previously identified.” click here to read full Article Read More on latest vulnerability...
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl (@Ne0nd0g). Our Motivation While...
This LPE vulnerability (not yet tracked using a CVE ID) stems from the misconfiguration of two service registry keys and it allows local attackers to escalate privileges on any fully patched systems. click here...
Reproxy is a simple edge HTTP(s) server / reverse proxy supporting various providers (docker, static, file). One or more providers supply information about requested server, requested url, destination url and health check url. Distributed...
Six days after installing the webshell, the actor used the installed webshell to run PowerShell commands to gather information from the local server and the Active Directory and stole credentials from the compromised Exchange...
Researchers at Sophos have reported that an unknown attacker is attempting to use a compromised Microsoft Exchange Server to deliver a malicious Monero cryptominer onto other vulnerable Microsoft Exchange Servers. click here to read...
12 Microsoft Exchange Server security best practices click here to read full Article Read More on latest Security Updates
A researcher said that two malicious commits that were added to the PHP web development programming language’s official Git server earlier this week may have been prevented if the maintainers had enabled signed commits...
To compromise the PHP codebase, two malicious commits were pushed to a Git repository maintained by the PHP development team. click here to read full Article Read more on computer hacking news
Two high-ranked players of the Apex Legends game have been banned from the platform for cheating by launching distributed denial-of-service (DDoS) attacks on an Xbox server. click here to read full Article Read more...
The server of Maharashtra Industrial Development Corporation was hacked as of late. The ransomware ‘SYNack’ affected the applications and database servers facilitated at the MIDC headquarters in Mumbai by encrypting the information put...
In the most recent software supply chain assault, the official PHP Git repository was hacked and the code base altered. On Sunday, two malevolent commits were pushed to the php-src Git repository kept...
Many on-premises Microsoft Exchange servers are being patched, but Microsoft warns that its investigations have found multiple threats lurking on already-compromised systems. click here to read full Article Read More on latest vulnerability and...
Stratus Technologies suffered a ransomware attack on March 17, 2021. Upon detecting suspicious activity, the firm took some systems offline to prevent the spread of the attack. click here to read full Article Read...
Creates a local or “reverse” Socks proxy using powershell. The local proxy is a simple Socks 4/5 proxy. The reverse proxy creates a tcp tunnel by initiating outbond SSL connections that can go through...
One interesting technique researchers have come across in recent months leverages the Telegram API to exfiltrate stolen data and send it in a private message to a bot under the attacker’s control. click here...
