Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Code search and navigation platform Sourcegraph on Thursday announced that it has experienced a data breach after an engineer accidentally leaked an admin access token. Sourcegraph account email addresses for community members and license owners were obtained. No other customer info, including private code, passwords, usernames, or other PII, was accessible.
The blog post details the Android team’s massive investment into fuzzing and the fuzzing pipeline that they’ve built. It highlights how the Android team writes and detects fuzzers, how those bugs get routed and examined for vulnerabilities, and examples of CVEs that were detected by fuzzing.
The Classiscam scam-as-a-service program has reaped criminal actors $64.5 million in illicit earnings since its emergence in 2019. This blog includes a detailed analysis of how Classiscam campaigns have changed over the past four years. Would-be cybercriminals can now leverage a range of automated tools to create new Classiscam schemes – including phishing sites — in a handful of minutes.
Using the vulnerability described in this blog, an attacker may take control of an encrypted Linux computer during the early boot process, manually unlock TPM-based disk encryption, and either modify or read sensitive information stored on the computer’s disk. This blog post runs through how the vulnerability was identified and exploited - no tiny soldering required.
JavaScript & Node.js open-source SAST scanner. A static analyzer for detecting most common malicious patterns.
Cherrybomb is a CLI tool written in Rust that helps prevent incorrect code implementation early in development. It works by validating and testing your API using an OpenAPI file. Its main goal is to reduce security errors and ensure your API functions as intended.
ChromeAudit is a plugin for the nuclei vulnerability scanner for Chrome Extension. It allows you to download the Chrome extension as a zip file and supply it to nuclei to find any vulnerabilities in the Chrome extension.
Trickbot was formed in 2016 and rose to become one of the world’s top cybercrime gangs. An investigation into the leaked internal messages, known as Trickfiles, from this group reveals the identities of key players, ties to the Kremlin, and insights into their internal organization.
The Zero Day Initiative (ZDI) this week announced that it will be offering more than $1 million in cash and prizes at Pwn2Own Automotive, the first Pwn2Own hacking contest focused on car systems.
Netwrix survey shows 69% of education organizations suffered a cyberattack in the past year, higher than other sectors. Phishing and compromised on-prem user/admin accounts were top attack vectors, unlike others. Highlights increased threats and account risks facing the education sector.
The Church of Scientology's Author Services filed a letter with the US regarding the triennial review of the DMCA. In this letter, Author Services contests the changes that Right to Repair advocates are seeking. Representatives from iFixit speculate that the Church is concerned with the hacking community digging into the Church’s E-meter devices.
Yet another supply chain attack campaign on Rust programmers. Libraries that were named similar to popular libraries like postgress, if-cfg, xrvrv, serd, oncecell, lazystatic, and envlogger were malware uploaded to get the developer’s operating system information and transmit the data to a hard-coded Telegram channel.
The Key Group ransomware family was first revealed on January 6, 2023. It is a financially motivated threat group using Telegram channel keygroup777Tg for the negotiation of ransoms. Cyber intelligence firm EclecticIQ on Thursday announced the release of a free decryption tool to help victims of the Key Group ransomware recover their data without having to pay a ransom.
Japan's National Center of Incident Readiness and Strategy for Cybersecurity (NISC) has confirmed that it was hacked for as long as nine months. The Chinese military is suspected to be behind the breach, which was discovered in June 2023. Email conversations were exposed to unauthorized parties, and there were also "suspicious phone calls and emails" from people posing as employees of Japan's NISC.
The International Gemini Observatory, a key player in global astronomical research, has temporarily halted astronomical operations following a cyberattack. The culprits and their motives remain unknown.
Fashion retailer Forever 21 has started informing more than 500,000 individuals that their personal information was compromised in a data breach earlier this year. There are suggestions that Forever 21 engaged in communication with the attackers and that a ransom might have been paid.
An open-source .NET-based information stealer malware dubbed SapphireStealer is being used by multiple entities to enhance their capabilities and spawn their own bespoke variants. This blog post dives into how this malware operates, which organizations seem to be using it to steal data, and the different variants that have been brought to light.
The blog post covers the basics of Windows containers, breaks down its file system isolation framework, reverse-engineers its main mini-filter driver, and details how it can be utilized and manipulated by a bad actor to bypass EDR products in multiple domains.
A blog post introducing a technique to reverse minified JS using LLMs while keeping the semantics intact. The technique involves utilizing webcrack, plugins that reverse lossless minification, and then having an LLM generate a name for the variable based on its function in the code.
Fianu Labs raises $2 million in seed funding to bring governance to every software release. It does this by maintaining a continuous audit trail of every code change from creation to release.
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
tfsec is a static analysis tool for Terraform code. tfsec identifies and provides possible fixes for misconfigurations in Terraform code. It is highly configurable and can be integrated into CI/CD pipelines.
This article goes in-depth about how the FBI nuked Qakbot malware from infected Windows PCs. The FBI dismantled the Qakbot botnet by seizing the attacker's server infrastructure and creating a special removal tool that uninstalled the Qakbot malware from infected devices. Qakbot was distributed through phishing campaigns that utilize a variety of lures, including reply-chain email attacks.
Cybersecurity giant Malwarebytes this week laid off 100 employees as it prepares for a major restructuring that will see the business split into two.
Although Barracuda believed they drove out the Chinese state hackers who accessed their Email Security Gateway, it now appears they were able to evade the expellers.
Apple is inviting researchers to join the iPhone Security Research Device Program, which allows them to work with Apple directly in discovering vulnerabilities while still receiving bounty payments.
The DoE has launched a competition for rural utility providers to receive $8.9 million in aid for improving cyber defenses. The program is split into three phases where utilities will describe the resources they need, plan how to acquire and implement those resources, and then implement them. The deadline for the first phase is November 29.