Deep Dive analysis of an AsyncRAT OneNote Dropper
Which cybercrimes will dominate the threat landscape for 2023 and beyond? Find out!
Starstream is suite of products for revenue aggregation, generation and smart contract deployments. It exists on the Metis L2 rollup. The DistributorTreasury contract had a low-level call that...
Prototype Pollution is a vulnerability in JavaScript that allows for the overwriting of the __prototype__ object. By doing this, an attacker can overwrite the default properties of an object to...
On 02 February 2023, an alert triggered in a Huntress-protected environment. We dive into triaging the threat in this blog.
Hal Denton // Have you ever been given an encrypted hard drive to perform forensic analysis on? What could go wrong? Probably the first thought rolling through your mind is […] The post Who’s...
Automatically push Wiz-identified cloud security issues to Snowflake to analyze and accurately report on your cloud security metrics.
Recent attacks leverage CVE-2021-21974 to install ransomware on VMWare ESXi servers. Security teams are advised to patch and stay vigilant for indicators of compromise.
Wiz's State of the Cloud 2023 report provides analysis of trends in cloud usage such as multi-cloud, use of managed services and more. In addition, the report highlights notable cloud risks based...
The function handleDeductFee() has no fee for incoming checks for who calls it and the amount. There were some other values that were controllable on this as well. The attacker transferred almost...
The article begins with a blurb on how to and how NOT to run a good bug bounty program. The first issue is NOT following up with emails from whitehats. Second is paying less than the advertised...
On 2023-02-03, a campaign was reported, involving an unknown actor, gaining initial access via 1-day vulnerability, to achieve RansomOp. The following tools were observed: Babuk.
Learn Rego basics from Wiz to express policy as code for your cloud security.
HypeBears is a collectable set of NFT bears. mint is used to create new bears within this ecosystem. When minting the NFTs, the code uses _safeMint from the OZ reference implementation. There is a...
Null dereferences are commonly known as an unexploitable bug. Sure, it's a denial of service but not much else. Well, in the context of some situations, we can make it more. In Linux, when a...
Equalizer Finance is a decentralized market focused on flash loans. The number of liquidity tokens created while minting was calculated based upon the amount of underlying tokens in the contract....
On 2023-02-01, a campaign was reported, involving HeadCrab operator, gaining initial access via Software misconfig, while using Misconfigured Redis abuse, targeting Redis to achieve Resource...
Copy on Write is functionality in the Linux kernel for only remapping memory once it has been written to after a fork. This is a major optimization, since forked code can reuse memory from other...
Simplify and centralize security and compliance management by sending audit-worthy events from Wiz into AWS CloudTrail Lake.
Code4rena is a crowd sourced security audit platform. Recently, Trader Joe V2 received a security audit. Joe V2 is a decentralized exchange based on Liquidity Book, an AMM protocol. The first...
Huawei's security hypervisor is leveraging the virtualization extensions of the ARMv8-A architecture. Additionally, it makes use of ARM TrustZone - a hardware enforced separation from called...
Helping analysts develop a better understanding of the elastic search syntax.
ApolloX Finance is a decentralized derivatives (short, longs, etc.) exchange, with the token APX. The contract was using a signature system for various calls given from an off-chain variant of the...
The Horton Principle is a principle that should always be followed in cryptography: "mean what you sign and sign what you mean". Any time this can be violated, there is a major security problem....
In the smart contract code, there is a function that takes in several address for storing an NFT. This includes the deployer (owner) and the beneficiary. When it does the saving, there is no...
On 2023-01-30, an incident was reported, involving an unknown actor, gaining initial access via End-user compromise, while using Phishing, targeting GitHub to achieve Data exfiltration.
The Mint function is used to create tokens. The Burn is a function used to destroy tokens. Both of these are standards with ERC20 tokens. This is the case with cryptoBurgers (BURG). BURG is a...
Shell commands that once had to be run manually now can be coded into a custom rule and run daily using Wiz agentless workload scanning.
Authored by Fernando Ruiz The popularity of AI-based mobile applications that can create artistic images based on pictures, such as... The post The Rise and Risks of AI Art Apps appeared first on...
Oasis offers leveraged trading and borrowing, among other things. Oasis Earn had recently been added to the scope of Immunefi. Since they had audited this before with no findings, it was worth...