KeePass 2.X Master Password Dumper allows retrieving the KeePass master passwordSecurity Affairs·May 18, 20:17 UTC · May 18, 2023Exploit / PoCCVE-2023-3278450
Tanium expands XEM platform with enhanced device and policy managementHelp Net Security·Mar 15, 00:00 UTC · Mar 15, 2023Vulnerability30
What’s next for NCSC’s Ian Levy? ‘A Proper Job,’ he tells The RecordThe Record·Dec 22, 00:00 UTC · Dec 22, 2022Vulnerability30
5 Kali Linux tools you should learn how to useHelp Net Security·Nov 14, 00:00 UTC · Nov 14, 2022Exploit / PoC45
Microsoft: Raspberry Robin worm already infected hundreds of networksSecurity Affairs·Jul 3, 17:32 UTC · Jul 3, 2022Malware30
Researcher Spotlight: Martin Lee, EMEAR lead, Talos Strategic CommunicationsCisco Talos·May 31, 13:00 UTC · May 31, 2022Malware30
Raspberry Robin spreads via removable USB devicesSecurity Affairs·May 7, 15:30 UTC · May 7, 2022Malware30
What are phishing kits (phishkits)?Kaspersky Securelist·Mar 24, 10:00 UTC · Mar 24, 2022Phishing & fraud30
Kali Linux 2022.1 released: New tools, kali-linux-everything, visual changesHelp Net Security·Feb 15, 00:00 UTC · Feb 15, 2022Vulnerability30
StegBaus: Because Sometimes XOR Just Isn’t EnoughPalo Alto Unit 42·Jan 28, 20:35 UTC · Jan 28, 2022Malware30
Mekotio Banking Trojan Resurfaces with New Attacking and Stealth TechniquesThe Hacker News·Nov 3, 10:07 UTC · Nov 3, 2021Malware30
MyKings botnet operators already amassed at least $24 millionSecurity Affairs·Oct 13, 19:48 UTC · Oct 13, 2021Malware30
Friday Squid Blogging: Person in Squid Suit Takes Dog for a WalkSchneier on Security·Sep 24, 21:20 UTC · Sep 24, 2021Policy & legal30
Vulnerability Spotlight: Multiple vulnerabilities in Synology SRM (Synology Router Manager)Cisco Talos·Oct 29, 09:13 UTC · Oct 29, 2020VulnerabilityCVE-2020-27648CVE-2020-27650CVE-2020-27652+2 CVEs35
HP Device Manager vulnerabilities may allow full system takeoverHelp Net Security·Oct 7, 00:00 UTC · Oct 7, 2020VulnerabilityCVE-2020-6925CVE-2020-6926CVE-2020-692735
New Raccoon Attack Could Let Attackers Break SSL/TLS EncryptionThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2020VulnerabilityCVE-2020-592935
How do I select a DMARC solution for my business?Help Net Security·Jul 22, 00:00 UTC · Jul 22, 2020Vulnerability30
PoetRAT: Python RAT uses COVID-19 lures to target Azerbaijan public and private sectorsCisco Talos·Apr 16, 17:52 UTC · Apr 16, 2020Malware30
Friday Squid Blogging: How Scientists Captured the Giant Squid VideoSchneier on Security·Jan 29, 08:03 UTC · Jan 29, 2020Vulnerability30
Penetrating a Casino's Network through an Internet-Connected Fish TankSchneier on Security·Jan 27, 14:28 UTC · Jan 27, 2020Phishing & fraud30
Friday Squid Blogging: Striped Pyjama SquidSchneier on Security·Jan 27, 14:14 UTC · Jan 27, 2020Vulnerability130
Friday Squid Blogging: Space KrakenSchneier on Security·Jan 27, 14:12 UTC · Jan 27, 2020Vulnerability30
Some Fortinet products used hardcoded keys and weak encryptionSecurity Affairs·Nov 26, 08:25 UTC · Nov 26, 2019Exploit / PoCCVE-2018-919550
18 iOS apps with stealthy ad clicking code removed from App StoreHelp Net Security·Oct 24, 00:00 UTC · Oct 24, 2019Malware30
Researchers Find New Hack to Read Content Of Password Protected PDF FilesThe Hacker News·Oct 1, 17:39 UTC · Oct 1, 2019Exploit / PoC45
ExtraHop launches a new SaaS-based NDR solution for the cloud-first hybrid enterpriseHelp Net Security·Jun 27, 00:00 UTC · Jun 27, 2019Vulnerability30
Shamoon 3 Targets Oil and Gas OrganizationPalo Alto Unit 42·Jan 22, 09:06 UTC · Jan 22, 2019Malware30
Digital Quartermaster Scenario Demonstrated in Attacks Against the Mongolian GovernmentPalo Alto Unit 42·Jan 18, 20:49 UTC · Jan 18, 2019Exploit / PoCCVE-2012-0158CVE-2014-1761150
TwoFace Webshell: Persistent Access Point for Lateral MovementPalo Alto Unit 42·Nov 1, 10:54 UTC · Nov 1, 2018Malware30
Musical Chairs: Multi-Year Campaign Involving New Variant of Gh0st MalwarePalo Alto Unit 42·Nov 1, 09:52 UTC · Nov 1, 2018Malware30
Evilgrab Delivered by Watering Hole Attack on President of Myanmar’s WebsitePalo Alto Unit 42·Nov 1, 09:46 UTC · Nov 1, 2018VulnerabilityCVE-2014-633235
Researchers presented an improved version of the WPA KRACK attackSecurity Affairs·Oct 9, 19:55 UTC · Oct 9, 2018Vulnerability30
Hacker hijacked original LokiBot malware to sell samples in the wildSecurity Affairs·Jul 9, 04:51 UTC · Jul 9, 2018Malware30