Windows Defender has very recently gained a new capability called "Microsoft Vulnerable Driver Blocklist". The feature is a part of Defender’s Application Control option and will essentially…
Click to expand…
Read more
The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion…
Click to expand…
Read more
The question is what remote connection software you use at home to help and assist your friends, family and loved ones. Personal noted that older/seniors tend to be able handle Microsofts built-in…
Read more
The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software.
“Users’ machines are ta…
Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system.
The vulnerability relates to CVE-2022-0543, a Lua sandbox escape flaw i…
Sophos has fixed a critical vulnerability in its Sophos Firewall product that allows remote code execution (RCE).
Tracked as CVE-2022-1040, the authentication bypass vulnerability exists in…
Click to expand…
Read more
I am looking for what CIS defines as each of the Asset Types. They have each of the asset types within the glossaries of their documents (Controls, Risk Assessment Methodology, Community Defence Profile) but i havent been able to see what…
The Sales Pitch If this is the first time you are visiting the Ostorlab Github page, here is the sales pitch. Security testing requires often chaining tools together, taking the output from one, mangling it, filtering it and then pushing it to ano…
A small Nebraska company is helping law enforcement around the world spy on users of Google, Facebook and other tech giants. A secretly recorded presentation to police reveals how deeply…
Click to expand…
Read more
I am slightly cynical about this offer given it is the Professional Plus version being sold, but StackSocial are a relatively established online business so I guess they are selling a legitimate…
Read more
