In this third blog post, we will discuss lateral movement risks from the cloud to Kubernetes. We will explain attacker TTPs, and outline best practices for cloud builders and defenders to help...
Security researchers discovered a database containing sensitive data operated by Fayvo, a Saudi Arabia-based social media app. The server hosting the database also leaked its staging environment...
We’re going to try to cut through the noise and shed some light on EDR to understand the variance, capability, and efficacy of EDR solutions in the market.
Optimism is a L2 blockchain and Wintermute is a liquidity provider. Optimism sent funds to Wintermute on the L2 chain but it should have been on mainnet ETH. So, nothing should happen, right?...
Timeless Finance released a product called Bunni. The purpose of this is to make Uniswap v3 liquidity pools composable. This allows loans to be taken out via Uniswap liquidity and aims to have...
BabySwap is a trading platform on BNB chain. When performing a swap call, the address of the factory is used controlled. With proper input validation, this would be okay. However, this factory...
FEG (Feed Every Gorilla) is a peer-to-peer trading protocol with its own governance token FEGToken on the Binance Smart Chain. It also supports NFT trading. The project allowed for user supplied...
TL;DR: I couldn’t make a custom BlazorPack editor work in Burp, so I used Mallet instead. From an indecipherable binary mess to this, in about 100 lines: Decoded BlazorPack messages For details on...
From the Big Bang to Leonardo da Vinci, these socks have protected the cloud throughout history.
ENS is a naming service for wallets, websites and more. In March of 2022, there was a vote to replace the existing price oracle. The original interface returned 1 value but the new interface...
ENS stores domains. Once it's been registered, there is a metadata service that is offchain and written in JS/TS. This is done with the following steps: Register the name Emit an event of...
bDollar is a algorithmic stablecoin on the Binance Smartchain. It is pegged to multiply assets. The contract attempts to do some asset rebalancing depending on what assets are in or out of the...
Feminist Metaverse (FM) is a DAO for women's rights. The contract had its own token - FM. The smart contracts _transfer function had code for figuring out the dividends for the stakers of the...
We discuss some of our favorite and most interesting built-in macOS security tools.
Mobile banking users are being manipulated by attackers to authorize fraudulent transactions. Learn what financial service providers can do to render these organized crimes powerless.
Float is a currency that tracks digit assets instead of pegging to the dollar. The pool for FLOAT was using Uniswap V3. The price of a pool is calculated based upon the proportional amount of...
Deus Finance is a derivatives trading platform. Calculating the price of a token is complicated in a decentralized system. If it is done via an off-chain oracle, like chainlink, then a deep amount...
Deep Dive analysis of an Vidar Stealer
On 2023-02-18, a research was reported, involving , gaining initial access via Software misconfig, to achieve Resp. disclosure.
What happens when you combine ransomware with information stealers, remote access Trojans, and other malware in one easy-to-download package?
1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company (BD) Equipment: Alaris Infusion Central --------- Begin Update A part 1 of 2 ---------...
Miner/Maximal Extractable Value (MEV) is the capability of gaining profit by reordering or adding transactions in a block. This leads to arbitrage, frontrunning and sandwich attacks. There is a...
A lot of companies use the word managed, leading to the idea that all solutions are the same when it comes to being managed; however, similar doesn’t mean the same.
A vulnerability in the openSSL component (CVE-2022-0778, [0]) could allow an attacker to create a denial of service condition by providing specially crafted elliptic curve certificates to products...
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as X_B, DWG, DXF, STL, STP,...
Affected models of the S7-1500 CPU product family do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during...
The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection...
Learn how CISOs are preparing for what’s ahead by embracing consolidation and continuing to invest in security.
“In six months, you’ll go home, having received a pardon. (…) Those who come with us and on the first day say, ‘I ended up somewhere I shouldn’t have’, we’ll mark a deserter and execute. (…) You...
How a nation-state APT attempted to attack Group-IB