NEW BOT Телеграм, страница

Android Security Bulletin—November 2021

https://source.android.com/security/bulletin/2021-11-01

2.58K views03:09

Credit card skimmer evades Virtual Machines - Malwarebytes Labs | Malwarebytes Labs
https://blog.malwarebytes.com/threat-intelligence/2021/11/credit-card-skimmer-evades-virtual-machines/

Malwarebytes

Credit card skimmer evades Virtual Machines

This blog post was authored by Jérôme Segura There are many techniques threat actors use to slow down analysis or, even...

2.63K views04:02

Sys-Admin InfoSec

Forwarded from Sys-Admin Up (Yevgeniy Goncharov)

Cybersecurity Awareness training

Free from AWS

https://learnsecurity.amazon.com/

P.S. Прикольно, есть на разных языках включая русский

2.53K views04:07

Sys-Admin InfoSec

note: На хостинге где хостится doh.sys-adm.in произошел сбой, кто использует doh пожалуйста переключайтесь на bld.sys-adm.in эти сервера работают штатно.

PS. как подключаться (параметры для браузеров и тп) кратко описаны на lab.sys-adm.in

2.71K views14:16

Sys-Admin InfoSec

BrakTooth Proof of Concept

https://github.com/Matheus-Garbelini/braktooth_esp32_bluetooth_classic_attacks

What is BrakTooth

https://news.1rj.ru/str/sysadm_in_channel/3346

GitHub

GitHub - Matheus-Garbelini/braktooth_esp32_bluetooth_classic_attacks: A Series of Baseband & LMP Exploits against Bluetooth Classic…

A Series of Baseband & LMP Exploits against Bluetooth Classic Controllers - Matheus-Garbelini/braktooth_esp32_bluetooth_classic_attacks

2.81K views15:16

Sys-Admin InfoSec

Hardcoded SSH Key in Cisco Policy Suite Lets Remote Hackers Gain Root Access

https://thehackernews.com/2021/11/hardcoded-ssh-key-in-cisco-policy-suite.html

P.S. thx for the link dear subscriber ✌️

2.88K views15:18

Sys-Admin InfoSec

Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk

https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html

Cisco Talos Blog

Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk

By Chetan Raghuprasad and Vanja Svajcer, with contributions from Caitlin Huey.

* Cisco Talos recently discovered a malicious campaign deploying variants of the Babuk ransomware predominantly affecting users in the U.S. with smaller number of infections…

3.06K views18:03

Sys-Admin InfoSec

Action needed by self-managed customers in response to CVE-2021-22205 | GitLab
https://about.gitlab.com/blog/2021/11/04/action-needed-in-response-to-cve2021-22205/

Gitlab

Action needed by self-managed customers in response to CVE-2021-22205

Self-managed users using outdated versions should update immediately.

3.13K views02:25

Sys-Admin InfoSec

Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions:

- Log in with a default credential if the Telnet protocol is enabled
- Perform command injection
- Modify the configuration

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr

Cisco

Cisco Security Advisory: Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions:

Log in with…

3.01K viewsedited 05:30

Sys-Admin InfoSec

Why You Should Delete Google Chrome On Your Phone

https://www.forbes.com/sites/zakdoffman/2021/11/06/stop-using-google-chrome-on-android-samsung-apple-iphone-and-windows-10-devices/?sh=256118567bf8

Forbes

Latest Google Chrome Privacy Warning Gives You Another Reason To Switch

Users given another reason to quit Chrome as more hidden data harvesting is exposed...

2.87K viewsedited 04:42

Sys-Admin InfoSec

New Magecart group uses an e-Skimmer that avoids VMs and sandboxesSecurity Affairs
https://securityaffairs.co/wordpress/124287/hacking/magecart-e-skimmer-avoids-vms.html

Security Affairs

New Magecart group uses an e-Skimmer that avoids VMs and sandboxes

A new Magecart group leverages a browser noscript to evade virtualized environments and sandboxes used by researchers.

2.78K views11:20

Sys-Admin InfoSec

Как российские компании защищаются от целевых атак

Каких угроз опасаются, какие решения используют и тп, полезно для общего понимания общей картины. Отчет от PT:

https://www.ptsecurity.com/ru-ru/research/analytics/kak-rossijskie-kompanii-zashchishchayutsya-ot-celevyh-atak/

ptsecurity.com

Аналитические статьи

По данным исследования Positive Technologies, треть специалистов по ИБ сообщили, что их компании когда-либо подвергались целевой атаке, в большинстве случаев — с серьезными последствиями. В каждом пятом случае организации защищаются с помощью систем класса…

2.86K views13:31

Sys-Admin InfoSec

General Availability of PowerShell 7.2 - PowerShell Team
https://devblogs.microsoft.com/powershell/general-availability-of-powershell-7-2/

Microsoft News

General Availability of PowerShell 7.2

Announcing general availability of PowerShell 7.2

2.79K views17:07

Sys-Admin InfoSec

Microsoft Exchange Server Remote Code Execution Vulnerability

Again:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42321

2013, 2016, 2019

https://techcommunity.microsoft.com/t5/exchange-team-blog/released-november-2021-exchange-server-security-updates/ba-p/2933169