Combining even more techniques to defeat EDR via DLL unhooking and AMSI bypass

Research article:

https://kymb0.github.io/malwaredev-defeat-edr-unhook/

Evil Never Sleeps:
When Wireless Malware Stays On After Turning Off iPhones

Wizard Spider In-Depth Analysis

https://www.prodaft.com/m/reports/WizardSpider_TLPWHITE_v.1.4.pdf

Auto PY to EXE (python: 3.6-3.10)

A .py to .exe converter using a simple graphical interface (demo)

https://github.com/brentvollebregt/auto-py-to-exe

GradeJS - is an open-source project that allows you to analyze webpack production bundles without having access to the source code of a website. It detects a list of bundled NPM libraries and works even for minified or tree-shaken bundles:

https://github.com/fingerprintjs/gradejs

#sec #npm #node

Ads by Microsoft on DuckDuckGo Private Search

https://help.duckduckgo.com/duckduckgo-help-pages/company/ads-by-microsoft-on-duckduckgo-private-search/

Рецепт борща. Рассуждение, Фантазия, Аналогия.

Рецепт борща. Фантазия на тему жизни. Во первых рецепт борща - у каждого он свой. Некоторое время назад в моей жизни появился термин "рецепт борща", термин родился недавно и как-то всплыл, когда я кому-то рассказывал про BLD проект.

Мое определение рецепта борща, классификация гостей и не только:

https://sys-adm.in/live/979-retsept-borshcha-rassuzhdenie-analogiya.html

v86 emulates an x86-compatible CPU and hardware. Machine code is translated to WebAssembly modules at runtime in order to achieve decent performance.

https://github.com/copy/v86

/ Zero to hero: save your org from cyber-attack with a zero trust model

simple conceptual

https://specopssoft.com/blog/zero-trust-model-save-your-org-from-cyber-attack/

npm security update: Attack campaign using stolen OAuth tokens

https://github.blog/2022-05-26-npm-security-update-oauth-tokens/

Dumping Linuxfx customers - A Windows-like distro including the spyware and activation

https://kernal.eu/posts/linuxfx/

/ High-severity vulnerabilities in a mobile framework owned by mce Systems

mce Systems used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote (albeit complex) or local attacks..:

http://www.microsoft.com/security/blog/2022/05/27/android-apps-with-millions-of-downloads-exposed-to-high-severity-vulnerabilities/

Как быстро установить и настроить Redis кластер

В данном случае подразумевается схема master > slave, как итог реализация позволяет восстанавливать ключи-значения, а с реплики читать точно такие-же данные, как на master:

https://sys-adm.in/systadm/980-kak-bystro-ustanovit-i-nastroit-redis-klaster.html

* How to install and configure Redis cluster

[RU] - Мониторинг сервисов при помощи Monit с алертингом в телеграм

Суть статьи: Установка и настройка monit на предмет мониторинга локального REDIS сервера и удаленных HTTPS серверов с отсылкой алертов в телеграм:

* Детали Здесь

[EN] - How to monitor services with Monit with Teleram alerting

Linux and Tiny C Compiler in the browser

https://ja.nsommer.dk/articles/linux-and-tiny-c-compiler-in-the-browser-part-one.html

Dragonfly - A modern replacement for Redis and Memcached

https://github.com/dragonflydb/dragonfly

THIS CRAFTY TOOL CAN EAVESDROP ON 6G WIRELESS SIGNALS

https://www.futurity.org/metasurface-in-the-middle-6g-wireless-signals-2741042-2/

Beware, here is how WhatsApp accounts are getting hacked..

https://www.linkedin.com/posts/fb1h2s_beware-here-is-how-whatsapp-accounts-are-activity-6934386561048264704-NnFf

R4IoT: When Ransomware Meets IoT and OT

Next-generation ransomware report:

https://www.forescout.com/resources/r4iot-next-generation-ransomware-report