A former UK Ministry of Defence (MoD) employee has been jailed for 16 months after being found guilty of storing …
MacHound – An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts
MacHound is an extension to the Bloodhound audting tool allowing collecting and ingesting of Active Directory relationships on MacOS hosts. …
Robinhood ordered to pay $70 million over ‘harm’ caused to ‘millions’ of traders
The US Financial Industry Regulatory Authority (FINRA) has fined Robinhood close to $70 million for allegedly causing “significant harm” to …
Gorsair – Hacks Its Way Into Remote Docker Containers That Expose Their APIs
Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has …
Series: A Journey in EDR-land ~ Vapra Varta
The series will cover building blocks of EDR, various ways to collect data, analysis and detection methods, and how to …
Colombia police collar suspected Gozi Trojan distributor
Law enforcement in Colombia has arrested an alleged cybercriminal who apparently acted as a distributor for the Gozi Trojan. As …
Invoke-DNSteal – Simple And Customizable DNS Data Exfiltrator
Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over …
Microsoft reveals authentication failures, system hijack vulnerabilities in Netgear routers
Microsoft has disclosed a series of vulnerabilities in Netgear routers which could lead to data leaks and full system compromise. …
Red-Shadow – Lightspin AWS IAM Vulnerability Scanner
Scan your AWS IAM Configuration for shadow admins in AWS IAM based on misconfigured deny policies not affecting users in …
GitHub bug bounties: payouts surge past $1.5 million mark
Over half a million dollars has been issued as rewards for researchers participating in GitHub’s bug bounty program over the …