We want to maintain this as an open-source project to fight against the attacks on our favorite Kubernetes ecosystem. By continuous contribution, we can fight threats together as a community. Protect your Applications running on Kubernetes from …
 |
|
| A zero-day vulnerability with a CVSS score of 10.0 has been discovered in Apache’s hugely popular Log4j utility.
Categories: Exploits and vulnerabilities Tags: cve-2021-44228log4jlog4shell |
The post Log4j zero-day “Log4Shell” arrives just in time to ruin your weekend appeared first on Malwarebytes Labs.
 |
|
| A sophisticated threat actor has been using a very unsophisticated method to defeat multi-factor authentication.
Categories: Reports Tags: 2facryptbotFoggyWebGoldMaxmfanobeliumpush notificationssolarwindsspear phishingsunburstteradrop |
The post Click “OK” to defeat MFA appeared first on Malwarebytes Labs.
Details have emerged about what’s the first Rust-language-based ransomware strain spotted in the wild that has already amassed “some victims from different countries” since its launch last month.
The ransomware, dubbed BlackCat, was disclosed by Malwa…
Russia has stepped up its censorship efforts in the country by fully blocking access to the Tor web anonymity service, coinciding with the ban of six virtual private network (VPN) operators, as the government continues its efforts to control the inter…
At least 300,000 IP addresses associated with MikroTik devices have been found vulnerable to multiple remotely exploitable security vulnerabilities that have since been patched by the popular supplier of routers and wireless ISP devices.
The most affe…
This repository is an accumulation of my code snippets for various shellcode injection techniques using fantastic D/Invoke API by @TheWover and @FuzzySecurity. Features: Fully ported to D/Invoke API Encrypted payloads which can be invoked from a U…
The operators of TrickBot malware have infected an estimated 140,000 victims across 149 countries a little over a year after attempts were to dismantle its infrastructure, even as the advanced Trojan is fast becoming an entry point for Emotet, another…
Free School Management Software 1.0 – Remote Code Execution (RCE)
Free School Management Software 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
