Sys-Admin InfoSec – Telegram
Sys-Admin InfoSec
12.7K subscribers
235 photos
2 videos
103 files
4.55K links
News of cybersecurity / information security, information technology, data leaks / breaches, cve, hacks, tools, trainings
* Multilingual (En, Ru).
* Forum - forum.sys-adm.in
* Chat - @sysadm_in
* Job - @sysadm_in_job
* ? - @sysadminkz
Download Telegram
Weaponizing WDAC: Killing the Dreams of EDR

Windows Defender Application Control (WDAC) is a technology introduced with and automatically enabled by default on Windows 10+ and Windows Server 2016+ that allows organizations fine grained control over the executable code that is permitted to run on their Windows machines...:

https://beierle.win/2024-12-20-Weaponizing-WDAC-Killing-the-Dreams-of-EDR/
Inside FireScam : An Information Stealer with Spyware Capabilities

This report explores the mechanics of FireScam, a sophisticated Android malware masquerading as a Telegram Premium app. Through in-depth analysis, authors aim to shed light on its distribution methods, operational features, and the broader implications of its malicious activities.

The findings highlight the malware’s capabilities and the critical need for robust security measures to counteract such threats..:

https://www.cyfirma.com/research/inside-firescam-an-information-stealer-with-spyware-capabilities/
Forwarded from Sys-Admin Up (Yevgeniy Goncharov)
Phishing vs Real - Red flags 🚩
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from OpenBLD.net (Yevgeniy Goncharov)
🟩 OpenBLD.net v8 is here – Cache Warming, UNIX Sockets, and More! 🚀

Excited to introduce the next milestone in the evolution of the open DNS service OpenBLD.net! Here’s what’s new:

Speed – UNIX sockets + Caching + Load Balancing
Efficiency – Port reuse allows multiple instances to run on the same port
Load Balancing – Zero logs (except for errors) for maximum performance
Memory Optimization – The core binaries take up just 6MB, with the cache stored in binary form, totaling only 11MB
Buffered Disk Writes – When necessary, writes go through dedicated buffers (tested at 10 million entries in 3.3 seconds)
🔥 Cache Warming – Thousands of domains are preloaded to keep the cache hot, ensuring ultra-fast DNS responses
🔐 Security – Supports Prometheus, SIEM, and Syslog exports for advanced monitoring (for business usage needs)

New mechanisms unlock new possibilities—helping you maintain cyber hygiene, save time, and protect your privacy.

Easy setup: https://openbld.net/docs/category/get-started/

Stay safe. Stay free. Peace to all! ✌️
Please open Telegram to view this post
VIEW IN TELEGRAM
AWS re:Invent re:Cap в Алматы

AWS re:Invent — здесь Amazon Web Services показывает, каким будет IT завтра. Разбор ключевых анонсов, трендов и новинок, всё самое важное и практичное, можно узнать не летая в Лас-Вегас.

Что будет:

• Самые свежие технологии в облаках, данных, AI/ML и DevOps.
• Полезные инсайты и идеи для вашего бизнеса и проектов.
• Лайфхаки от практиков AWS, которые знают, как это работает в реальной жизни.

• 30 января, 19:00. Алматы, ул. Ходжанова 2/2, MOST IT Hub (8 этаж).

Вход бесплатный.

Спикеры

• Антон Коваленко — 20 лет в IT, Senior Solutions Architect в AWS.
• Александр Бернадский — 15+ лет опыта, Solutions Architect в AWS.

• Мест немного, регистрация здесь
RID Hijacking Technique

RID Hijacking is typically performed by manipulating the Security Account Manager (SAM) database. Threat actors can create an administrator account or escalate privileges to gain administrator access without knowing the password..:

https://asec.ahnlab.com/en/85942/
119 vulnerabilities in LTE/5G (some with RCE)

Cellular networks are considered critical infrastructure both for day-to-day communication and emergency services, to the extend that their availability and reliability is often highly regulated by government agencies... what happens if they suddenly become unavailable?

Research:

https://cellularsecurity.org/ransacked
Forwarded from Sys-Admin Up (Yevgeniy Goncharov)
Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2025-21293)

https://birkep.github.io/posts/Windows-LPE/
Forwarded from OpenBLD.net (Yevgeniy Goncharov)
🧠 OpenBLD.net - ML Predictive Balancing Coming

This is undoubtedly an innovation. OpenBLD.net smart balancing service is now a separate project, introducing key features:

► Detects slow servers before they start lagging
► If an upstream server shows an increase in timeouts or errors → ML predicts potential failures and automatically prepares backup routes before the infrastructure starts "firing"
► Based on historical data, ML knows when servers experience peak loads (e.g., during lunch hours or at the end of the workday)
► Instead of reacting to downtime, it distributes traffic efficiently in advance
► Reduces latency and timeouts by proactively optimizing traffic distribution
► And much more, including environmental factors such as server energy consumption optimization

The balancer operates like a living organism, learning and adapting to conditions on its own)

How does this benefit users?

🚀 More autonomy and focus on your own development.
More speed.

📢 This week, the updated balancers will be seamlessly integrated into ADA’s infrastructure—the only thing you might notice is the increased speed.

✌️ Stay fast, stay optimized!
Please open Telegram to view this post
VIEW IN TELEGRAM