The cryptocurrency landscape has received yet another ominous signal as adversaries successfully breached yet another DeFi platform, leaving users to await an investigation only after the capital had already been exfiltrated from the protocol....
An oversight within a security remediation has inadvertently carved a novel path for exploitation. While the developers successfully neutralized the remote code execution flaw weaponized by the APT28 collective, they left behind a secondary...
Evilent Coerce A practical NTLM relay attack using the MS-EVEN RPC protocol and antivirus-assisted coercion. Evilent is a PoC tool that triggers the ElfrOpenBELW procedure in the MS-EVEN RPC interface (used for Windows Event...