2 Billion Bluetooth Devices are Still Vulnerable to Dangerous BlueBorne Attack After 1 Year
https://gbhackers.com/blueborne-attack/

Wasabi A framework for dynamic analysis of WebAssembly programs
http://wasabi.software-lab.org/

looking for android malware (miner)
send for me @moonshaker

Privilege Escalation & Post-Exploitation
https://movaxbx.ru/2018/09/16/privilege-escalation-post-exploitation/

A Microsoft Zero-day vulnerability that existing in Microsoft JET Database Engine has been crossed zero-day Initiative (ZDI) 120 days disclosure deadline and now it released in public. ZDI initially reported this zero-day flow to Microsoft on May 8, 2018, since then Microsoft acknowledged the vulnerability and started working on it to provide the patch for […]
The post ZDI Exposed Unpatched Microsoft RCE Zero-day Flaw in Public After it Crossed the 120 Days Deadline (https://gbhackers.com/zdi-opened-microsoft-zero-day/) appeared first on GBHackers On Security (https://gbhackers.com/).

3000 Hacked Websites Access comes to Sale in Russian Underground Dark Web Marketplace
https://gbhackers.com/hacked-websites/

Retail Sector Second-Worst Performer on Application Security
https://www.darkreading.com/application-security/retail-sector-second-worst-performer-on-application-security/d/d-id/1332860?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

A "point-in-time" approach to PCI compliance could be one reason why so many retailers appear to be having a hard time.

Romanian Woman Admits Involvement in Hacking Attack On Washington Police Computers
https://www.bleepingcomputer.com/news/security/romanian-woman-admits-involvement-in-hacking-attack-on-washington-police-computers/

[...]

Malware Disguised as Job Offers Distributed on Freelance Sites
https://www.bleepingcomputer.com/news/security/malware-disguised-as-job-offers-distributed-on-freelance-sites/

Attackers are using freelance job sites such as fiverr and Freelancer to distribute malware disguised as job offers. These job offers contain attachments that pretends to be the job brief, but are actually installers for keyloggers such as Agent Tesla or Remote Access Trojan (RATs). [...]

Hello to all dear reverse engineers.
Since 2012, We've tried to keep alive the webscene and 0777 distros.

Now, We create the webscene with many features in order to promote the scene activity. From the beginning of spring, We've got to adding some sections to the webscene as follows:

• Distro -> All scene teams releases.
• Tools -> All tools you need for RCE, full version, and retail.
• Tutorial -> Some tutorials for learners of RCE, spoken and written language does not matter.
• Challenge -> In the challenge section you can find many targets to practice and learn more.
• Request -> That's a place for Crack or Analyze request for other scene members
• Question -> This is a helpful section for newbie and pro members to ask any question about RCE, etc.
• Scene news -> In this section you can find all scene news and scene's teams news. All team admins can post any news about their teams.
• GFX area -> for all GFXer who can publish their GFXs that are related to RCE.
• Team section -> you can see teams info. That contains members, releases, NFO, news, denoscription, and logo.

The features that will be added early to the webscene:
• Documentation of analyzed malwares
• The archive of malwares
• SFX area
• The wiki for RCE term in different languages
• The scene chatroom
• The medals and badges for the members and teams who are active in the webscene.

Note:
1. We are all subset of the webScene society, regardless of team, all strong teams and freelancers can active in webscene.
2. We don’t have any limit on copyright & facilities.
3. Feel free to contact us, any suggestion or constructive criticism is welcome.
4. The vision of the webscene is providing a safe and unlimited environment for reverse engineers activity.

Join us to keep alive the scene.
https://webscene.ir

Artan Unpackme / crackme challenge
http://challenge.vsec.ir/