Information security

25-01-2023, 15:58

Experts from Palo Alto Networks have recorded

Experts from Palo Alto Networks have recorded a surge in cyber attacks aimed at the RCE vulnerability in the Realtek Jungle SDK. We are talking about the error CVE-2021-35394, which was made public back in August 2021.

0

Information security

26-01-2023, 14:07

New surprises in AD CS... Let's add the ESC11 technique?

0

Information security

26-01-2023, 14:20

Next week, BlackHat Europe, and now new tulzas have already gone

Next week, BlackHat Europe, and now new tulzas have already gone (or rather, a coolly redesigned old ones).

0

Information security

26-01-2023, 14:21

Quite an interesting analysis on the example of Avast

0

Information security

26-01-2023, 14:23

This tool was presented at Source Zero Com 2022

This tool was presented at Source Zero Com 2022. In short: you throw a compiled binary, tulza removes known Ios strings from the binary, signs with a certificate from another binary, well, and helps to bypass EDR (by increasing the file size)

0

Information security

26-01-2023, 14:25

That's cool! The research discusses new methods for recovering NTLM

That's cool! The research discusses new methods for recovering NTLM hashes from encrypted credentials protected by CredGuard in Windows.

0

Information security

26-01-2023, 14:27

BOF, to run in-memory PE files, not just DotNet assemblies.

0

Information security

26-01-2023, 14:28

CVE-2023-24055 KeePass 2.5x

In short, having access to the KeePass configuration file, you can filter the stored passwords to your server in plain text.The trick is that you don't need to monitor when the user opens the manager. CVE-2023-24055 KeePass 2.5x

0

Information security

26-01-2023, 14:33

And a new study from specialists from SpecterOps

And a new study from specialists from SpecterOps about read-only domain controllers (RODC) and pentest.

0

Information security

26-01-2023, 14:35

Google's product, which is widely in demand among hackers from the point of view of exploitation

Google's product, which is widely in demand among hackers from the point of view of exploitation - Chrome, has received regular updates. Six security holes were fixed in Chrome 109, including four that were reported to Google by external researchers, for which they received $ 25,000.

0

Information security

26-01-2023, 14:38

#news Last Friday, Riot Games reported a hack: attackers stole the sources of League of Legends

##news Last Friday, Riot Games reported a hack: attackers stole the sources of League of Legends, Team fight Tactics and Packman anti-cheat software. The day before yesterday, the company announced that it refused to pay $10 million in ransom. Well, now the stolen 72 gigs of sources have been put up for auction with a starting price of a million dollars. #news Last Friday, Riot Games reported a hack: attackers stole the sources of League of Legends