Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats. Proof-of-concept tools, such as 0xBoku’s Ninja_UUID_Runner and ChoiSG’s UuidShellcodeExec, inspir…
 |
|
| The most important and interesting security stories from the last seven days.
Categories: A week in security Tags: deadboltqnapransomware |
The post A week in security (January 24 – 30) appeared first on Malwarebytes Labs.
A regional court in the German city of Munich has ordered a website operator to pay €100 in damages for transferring a user’s personal data — i.e., IP address — to Google via the search giant’s Fonts library without the individual’s consent.
The unaut…
A group of academics at South Korea’s Gwangju Institute of Science and Technology (GIST) have utilized natural silk fibers from domesticated silkworms to build an environmentally friendly digital security system that they say is “practically unbreacha…
Apple last year fixed a new set of macOS vulnerabilities that exposed Safari browser to attack, potentially allowing malicious actors to access users’ online accounts, microphone, and webcam.
Security researcher Ryan Pickren, who discovered and report…
I lent my mobile data to someone’s computer and was not in the room while they were using it.
Suppose they wanted to gain control/access to my android device. How easy would it be? As far as I know, malware can infect android phones mostly…
An Israeli national was sentenced to 97 months in prison in connection with operating the DeepDotWeb (DDW) clearnet website, nearly a year after the individual pleaded guilty to the charges.
Tal Prihar, 37, an Israeli citizen residing in Brazil, is sa…
Type: Webinars6 Traits of a Robust Cyber Defense Practical Advice from Drizly CSO on How to Foster a Well-Protected OrganizationIn this webinar, discover how to execute a winning MDR security strategy as well as the top challenges that Managed Detect…
An script to perform kerberos bruteforcing by using the Impacket library. When is executed, as input it receives a user or list of users and a password or list of password. Then is performs a brute-force attack to enumerate: Valid username/passwo…
This tool queries the following configurations in the Azure AD/O365 tenant which can shed light on hard-to-find permissions and configuration settings in order to assist organizations in securing these environments. Exchange Online (O365): Federa…
