The post How to Play Competitive Backdoors & Breaches w/ Jason Blanchard (1-Hour) appeared first on Black Hills Information Security, Inc..
New Wiz capabilities protect containerized applications by bringing deep cloud context and visibility to quickly identify and prioritize risks across containers, Kubernetes and cloud environments...
KubeCon 2022 will be full of great presentations and content. Here's our take on the conference sessions (apart from our own) that you shouldn't miss, whether you're onsite or attending virtually.
In modern technology-intensive production, IT and large-scale digitalization, and therefore new cybersecurity technologies, are essential to remaining competitive, reducing costs associated with...
Hancom Office is an alternative version of Office used in South Korea. Docx files are mostly just XML documents. Instead of sharing the bug then the crash, the authors show the crash with the...
The online version of Microsoft Office is used to view various Microsoft type documents. The GET request to /op/view.aspx had a Server-Side Request Forgery (SSRF) vulnerability. They learned this...
Sophos Firewall is a network security solution that can be deployed essentially anywhere. The application exposes a web admin console on port 4444 and a user portal on port 443. The application...
Secure boot is an important part of ensuring that a running device is not modified. While reading a reference manual for the NNXP i.MX 6/7/8M Application Processors (AP) , they noticed a weird...
Optimism is a L2 sidechain of Ethereum. There are several bridges that allow for the taking of assets from L1 to L2 by creating a wrapped variant of the asset. One of these bridges is BitBTC. When...
Authored by SangRyol Ryu Cybercriminals are always after illegal advertising revenue. As we have previously reported, we have seen many... The post New Malicious Clicker found in apps installed by...
Wiz will be attending and sponsoring KubeCon for the first time and we have a lot to share regarding how enterprises can better secure their container and Kubernetes environments. Come say hi!
Community Feature - @BushidoTokenCurated Intelligence co-founder Will T recently sat down with Jack Rhysider from Darknet Diaries to discuss how the REvil ransomware group changed the game...
The cross-chain bridge for the Binance Coin (BNB) on the Binance Smart Chain (BSC) was hacked. An attacker drained 2 million in BNB (566 million in USD). How did this happen? Let's follow the...
In this first blog post, we will introduce lateral movement as it pertains to the VPC. We will discuss attacker TTPs, and outline best practices for security practitioners and cloud builders to...
Transit Swap is a cross-chain exchange. It allows for aggregating all of the tokens you owe between the different platforms. When performing a swap, there is a routing contract. Depending on the...
While reading various security advisories the author missed while on vacation, there noticed a Pixel anti-rollback notice. This indicated that a vulnerability occurred in the bootloader of the...
In the previous post, a format string vulnerability was found that led to a crash. This post is all about exploiting the vulnerability to get code execution. The vulnerability occurs in the stdout...
Kaspersky Lab has discovered a denial-of-service vulnerability in the WAGO 750 controllers.
The author of the post was interested in binary only fuzzing via snapshots and fuzzing highly structured inputs. Given their requirements, they saw Trackmaina Nations Forever from 2008 to be a...
The PS5 has a vulnerable version of WebKit to a use after free (UAF) bug in the IPv6 stack. The Github repo is an implementation of the exploit to gain a read/write primitive. The PS5 has an...
uClibC and uClibC-ng are both standalone replacements for glibc that are extremely lightweight. These are commonly used on embedded platforms. When creating threads on the platform, the thread...
In the previous two posts, they got root access to the system by breaking the update functionality. So, now what? Let's build some software! ccOS(Connected Car Operating System) is an OS developed...
MediaWiki, which is a PHP, claimed to have a deprecated dependency that was an HTTP web server called got. How does this effect MediaWiki? Some submodules were using this. The got library added...
Each file is encrypted individually, with the name being enc_{OriginalName}. There is a configuration file with the file name and the SHA224 hash. The hash of the configuration file is signed....
The author simply wants to pwn his car! They bought a 2021 Hyundai Ioniq SEL to drive and play with. The author wanted to target In-Vehicle Infotainment (IVI) system. Additionally, there is a mode...
DomPDF is an HTML to PDF converter for PHP. In the past, a vulnerability was found that allowed for code execution in PHP. CSS font can be remotely loaded with any extension, leading to code...
While fuzzing a web application, the authors of the post noticed something weird. When putting one single quote (') in a field for time, a 400 error occurred. However, when putting two single...
Impacted organization discovered that long-lived AWS creds had leaked. Initially alerted to the following suspicious activity:Follow-up investigation into CloudTrail logs showed compromise of...
Unisoc is a semiconductor company that is commonly put on Android smart phones. The authors decided to review the Boot process of these chips. The first step is extracting the BootROM in order to...
Crow is an HTTP server written in a C++. While triaging a different vulnerability, they stumbled across an issue that required nothing special! If a file was smaller than 16KB, then the request...