Взлом робота-пылесоса и слежка за хозяином в прямом эфире (Hacking a robot vacuum cleaner and spying on its owner live)
- https://habr.com/ru/companies/cloud4y/articles/849294/
- https://habr.com/ru/companies/cloud4y/articles/849294/
Хабр
Взлом робота-пылесоса и слежка за хозяином в прямом эфире
Крупный производитель домашней робототехники не смог устранить проблемы безопасности своих роботов‑пылесосов, хотя получил предупреждение о рисках ещё в прошлом году. Даже...
SeamlessPass - Leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
https://github.com/Malcrove/SeamlessPass/tree/main
https://github.com/Malcrove/SeamlessPass/tree/main
GitHub
GitHub - Malcrove/SeamlessPass: A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO - Malcrove/SeamlessPass
Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions
..red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity:
https://www.trendmicro.com/en_us/research/24/j/edrsilencer-disrupting-endpoint-security-solutions.html
EDRSilencer:
https://github.com/netero1010/EDRSilencer
..red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity:
https://www.trendmicro.com/en_us/research/24/j/edrsilencer-disrupting-endpoint-security-solutions.html
EDRSilencer:
https://github.com/netero1010/EDRSilencer
Trend Micro
Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions
WhatsApp may expose the OS you use to run it – which could expose you to crooks
Messaging service creates persistent user IDs that have different qualities on each device
https://www.theregister.com/2024/10/16/whatsapp_privacy_concerns/
Messaging service creates persistent user IDs that have different qualities on each device
https://www.theregister.com/2024/10/16/whatsapp_privacy_concerns/
The Register
WhatsApp may expose the OS you use to run it – which could expose you to crooks
Meta knows messaging service creates persistent user IDs that have different qualities on each device
Multiple Splunk Enterprise Vulnerabilities Let Attackers Execute Remote Code
https://research.kudelskisecurity.com/2024/10/16/splunk-enterprise-multiple-vulnerabilities-for-rce/
https://research.kudelskisecurity.com/2024/10/16/splunk-enterprise-multiple-vulnerabilities-for-rce/
Kudelski Security Research
Splunk Enterprise Multiple Vulnerabilities for RCE
Summary Splunk has disclosed several high-severity vulnerabilities in Splunk Enterprise and Splunk Cloud Platform, which allowattackers to execute remote code on vulnerable systems. The vulnerabili…
Critical hardcoded SolarWinds credential now exploited in the wild
A critical, hardcoded login credential in SolarWinds' Web Help Desk line has been exploited in the wild by criminals..:
https://www.theregister.com/2024/10/16/solarwinds_critical_hardcoded_credential_bug/
A critical, hardcoded login credential in SolarWinds' Web Help Desk line has been exploited in the wild by criminals..:
https://www.theregister.com/2024/10/16/solarwinds_critical_hardcoded_credential_bug/
The Register
Critical hardcoded SolarWinds credential now exploited in the wild
Another blow for IT software house and its customers
How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends
https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023
https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023
Google Cloud Blog
How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends | Google Cloud Blog
Mandiant analyzed 138 vulnerabilities that were disclosed in 2023 and that we tracked as exploited in the wild.
New macOS vulnerability, “HM Surf”, could lead to unauthorized data access
https://www.microsoft.com/en-us/security/blog/2024/10/17/new-macos-vulnerability-hm-surf-could-lead-to-unauthorized-data-access/
https://www.microsoft.com/en-us/security/blog/2024/10/17/new-macos-vulnerability-hm-surf-could-lead-to-unauthorized-data-access/
Microsoft News
New macOS vulnerability, “HM Surf”, could lead to unauthorized data access
Microsoft Threat Intelligence uncovered a macOS vulnerability that could potentially allow an attacker to bypass the operating system’s Transparency, Consent, and Control (TCC) technology and gain unauthorized access to a user’s protected data. The vulnerability…
The Ultimate Guide to Fine-Tuning LLMs from Basics to Breakthroughs:
An Exhaustive Review of Technologies, Research, Best Practices, Applied Research Challenges and Opportunities
(Version 1.0)
https://arxiv.org/html/2408.13296v2
An Exhaustive Review of Technologies, Research, Best Practices, Applied Research Challenges and Opportunities
(Version 1.0)
https://arxiv.org/html/2408.13296v2
Call and Register — Relay Attack on WinReg RPC Client
https://www.akamai.com/blog/security-research/2024/oct/winreg-relay-vulnerability
https://www.akamai.com/blog/security-research/2024/oct/winreg-relay-vulnerability
Akamai
Call and Register — Relay Attack on WinReg RPC Client | Akamai
Akamai researchers explore a new vulnerability that can be exploited to lead to elevation of privilege attacks against Windows machines.
Trojanized Ethers Forks on npm Attempting to Steal Ethereum Private Keys
https://blog.phylum.io/trojanized-ethers-forks-on-npm-attempting-to-steal-ethereum-private-keys/
https://blog.phylum.io/trojanized-ethers-forks-on-npm-attempting-to-steal-ethereum-private-keys/
Phylum Research | Software Supply Chain Security
Trojanized Ethers Forks on npm Attempting to Steal Ethereum Private Keys | Phylum
Software supply chain attack targets open-source developers in npm via malicious packages that steal Ethereum private keys, gain SSH persistence.