Information Security News Blog
DumpGuard BOF Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. This repository contains a Beacon Object File (BOF) implementation of DumpGuard, ported from the original C#/.NET implementation to...
Cisco has remediated a vulnerability within its Identity Services Engine (ISE) network access control system, for which a public proof-of-concept exploit has already surfaced. This flaw, which can be weaponized by an adversary possessing...
What originated as a compelling narrative of “pre-emptive cyber-strike” has concluded in a far more pedestrian fashion: Cloudflare maintains that the disruptions within Venezuelan networks were likely the result of mere digital negligence rather...
Security researchers have documented a nascent surge in offensives orchestrated by the GoBruteforcer botnet, specifically targeting the infrastructure of cryptocurrency and blockchain enterprises. The primary casualties of this campaign are internet-exposed databases and administrative...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a formal advisory regarding the active exploitation of a critical vulnerability within HPE OneView, the integrated IT infrastructure management solution by Hewlett Packard Enterprise. Designed...
Google has elected to diminish the frequency with which it publishes the Android source code to the open-source AOSP repository. Departing from the established cadence of four annual releases, the corporation will henceforth restrict...
A critical vulnerability has been unearthed within the ubiquitous JavaScript library jsPDF, a tool primarily utilized for the programmatic generation of PDF documents. This flaw empowers an adversary to manipulate file paths, thereby facilitating...
Trend Micro has remediated a critical vulnerability within the on-premise iteration of Apex Central, a flaw that empowered remote adversaries to execute arbitrary code with SYSTEM-level privileges—the pinnacle of authority within a Windows environment....
The Cisco Talos intelligence unit has reported a significant geographical expansion in the activities of a threat actor utilizing sophisticated Linux malware to target telecommunication entities. While these operations were previously concentrated within Southern...
Surveyor Advanced Windows kernel analysis and system profiling tool. Provides comprehensive visibility into kernel callbacks, ETW sessions, driver analysis, and system state through both userland APIs and optional kernel driver integration. Key features Kernel...
While backup repositories are traditionally regarded as the ultimate bastion of defense, Veeam recently issued a stark reminder that these systems can themselves serve as a primary vector for intrusion. The company has released...
For the first time in over a decade, United States authorities have secured a conviction against the proprietor of a stalkerware enterprise. Bryan Fleming, the Michigan-based founder of pcTattletale, has pleaded guilty to federal...