In early February 2022, we came across a tweet from ShadowChasing1 identifying a SideWinder-related word document which referenced a template URL. In this article, we share our insights from…

The attack comprises of performing command injection vulnerability in Lambda Functions in order to steal the AWS keys and access AWS resources as the stolen keys of the IAM role.

Technical analysis of the Matanbuchus malware with focus on network traffic and commands

Thanks to Brad Duncan for sharing this pcap! https://www.malware-traffic-analysis.net/2022/06/16/index.html We did a quick analysis of this ...

The mobile banking malware BRATA keeps evolving into an APT. Read here the new Technical Report, which explains in detail how it monitors banks' account and how to prevent it.

Getting your foot in the door or finding your next gig in cyber security is sometimes a daunting task. Just like hacking, a methodology is needed to succeed. Here's how I see the core components (this methodology will evolve over time): Aquire Skillsets /…

Integrates logging with a custom application testing checklist.

A self-hosted scheduler app that will upgrade or downgrade your EC2 servers for you. - GitHub - ajaidanial/gipsy_avenger: A self-hosted scheduler app that will upgrade or downgrade your EC2 servers...

Cloud Engineer | Hobbyist Hacker. RoseSecurity has 17 repositories available. Follow their code on GitHub.

Posted by Mr-R3b00t - 7 votes and 4 comments

Introduction Rootkits are dangerous pieces of malware. Once in place, they are usually really hard to detect. Their code is typically more challenging to write than other malware, so developers resort to code reuse from open source projects. As rootkits are…

Contribute to elttam/semgrep-rules development by creating an account on GitHub.

This article will serve as a follow up to the Zero Trust primer ‘Zero Trust — An Introduction’. In this second part of the series, we’ll…

Two vulnerable Jacuzzi SmartTub administration panels exposed worldwide customer data for multiple brands.

Posted by u/qwerty0x41 - 3 votes and 1 comment

Just For Fun And Out Of Curiosity

Posted by u/CyberMasterV - 21 votes and 2 comments