DISCLAIMER: as many other security researchers […]

THREAT CON is an initiative that aims to facilitate a gateway to standard practices and create a new development within the field of cybersecurity- for developers, security practitioners, IT administrators or anyone interested.

The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.

Privacy focused messenger that doesn't trust anyone with your identity, your contact list, or your communications - Speek-App/Speek

Posted by rbarkley - 17 votes and 4 comments

JFrog discovers hundreds of npm malicious packages in a large-scale typosquatting attack designed to steal PII from Azure developers. Find out more >

Contribute to support-ukraine/support-ukraine development by creating an account on GitHub.

Posted in r/netsec by u/Late_Ice_9288 • 1 point and 0 comments

This blog post describes an unchecked return value vulnerability found and exploited in September 2021 by Alex Plaskett, Cedric Halbronn and Aaron Adams working at the Exploit Development Group (ED…

The hacking group LAPSUS$ has been making waves across the technology industry over the past few months, the new group, thought to be a collective of

The discovery of an undocumented hardware block in the LPC55S69

With OpenSSH 8.5 agent forwarding was implemented for SFTP and SCP to allow remote copy operations. Agent forwarding has already been considered a security risk…

A comprehensive guide that provides a structured approach to reviewing the security architecture of a multi-cloud SaaS company and finding its most critical components.

Posted in r/netsec by u/tvjust • 2 points and 0 comments

A main component of Splunk Enterprise is Splunk patch indexer, which handles parsing and indexing of data. Discover more with Claroty.

CVE-2020-20093; 20094; 20095; 20096, 2022-28345 RTLO Injection URI Spoofing - GitHub - zadewg/RIUS: CVE-2020-20093; 20094; 20095; 20096, 2022-28345 RTLO Injection URI Spoofing

How I found various vulnerabilities and chained some of the vulnerabilities into an unauthenticated command execution in NETGEAR WAC124.

Sysdig has released the following binaries that will allow us to collect Okta events and using Falco OOTB rules to detect suspicious activity