Mashing Enter To Bypass Full Disk Encryption With Tpm, Clevis, Dracut And Systemd

— https://pulsesecurity.co.nz/advisories/tpm-luks-bypass

CVE-2023-36874 Windows Error Reporting LPE BOF

This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's (@filip_dragovic) CVE-2023-36874 Windows Error Reporting LPE exploit.

— https://github.com/Octoberfest7/CVE-2023-36874_BOF

Get your Home Network Secured with Raspberry Pi & Wazuh — 2023 Edition

— https://medium.com/@henrion.frn/get-your-home-network-secured-with-raspberry-pi-wazuh-2023-edition-c7ac2044df3e

Hackers Can Silently Grab Your IP Through Skype. Microsoft Is In No Rush to Fix It

— https://www.404media.co/hackers-find-your-skype-ip-address-microsoft-wont-fix/

P.S. thx for the link dear subscriber! 🤝

Strategies for the Integration of
Software Supply Chain Security in DevSecOps CI/CD Pipelines

*from NIST

New Attack Vector In The Cloud: Attackers caught exploiting Object Storage Services

MinIO under attack 🔫

— https://www.securityjoes.com/post/new-attack-vector-in-the-cloud-attackers-caught-exploiting-object-storage-services

VMWare Aria Operations For Networks Static SSH Key RCE

CVE-2023-34039 Exploit:

— https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/

AutoSmuggle - quickly create your HTML smuggled files

— https://github.com/surajpkhetani/AutoSmuggle

6 free resources for getting started in cybersecurity

https://www.helpnetsecurity.com/2023/09/05/free-resources-getting-started-in-cybersecurity/

Exposing and Addressing Security Vulnerabilities in Browser Text Input Fields

DDoS mitigation guidance from CISA

Application Security Questions and Answers

Improving the stealthiness of memory injections techniques

— https://www.naksyn.com/edr%20evasion/2023/06/01/improving-the-stealthiness-of-memory-injections.html

Threat Actors Target MSSQL Servers in...

https://www.securonix.com/blog/securonix-threat-labs-security-advisory-threat-actors-target-mssql-servers-in-dbjammer-to-deliver-freeworld-ransomware/

Velociraptor - Endpoint visibility and collection tool

https://github.com/Velocidex/velociraptor

Socomec MOD3GP-SY-120K

Successful exploitation of these vulnerabilities could allow an attacker to execute malicious Javanoscript code, obtain sensitive information, or steal session cookies.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

Technical Analysis of HijackLoader

A new evasive malware downloader with a modular architecture:

— The loader is being leveraged to drop numerous malware families, including Danabot, SystemBC, and RedLine Stealer, amplifying its potential threat.
— HijackLoader utilizes syscalls to evade monitoring from security solutions, detects specific processes based on an embedded blocklist, and delays code execution at different stages.
— The malware uses embedded modules that facilitate flexible code injection and execution - a feature uncommon among traditional loaders..:

— https://www.zscaler.com/blogs/security-research/technical-analysis-hijackloader

Bypassing Windows Defender And Ppl Protection With Pplblade To Dump Lsass Without Detection

— https://tacticaladversary.io/adversary-tactics/bypass-defender-and-ppl-protection-to-dump-lsass/