[每日信息流] 2023-04-21

[BruceFeIix]

每日安全资讯（2023-04-21）

• HackerOne Hacker Activity
  • Authentication bypass on gist.github.com through SSH Certificates
  • RichText parser vulnerability in scheduled posts allows XSS
  • Time Based SQL Injection
  • CVE-2018-6389 exploitation - using scripts loader
  • Reentrancy attack in eth-monero atomic swap
• Files ≈ Packet Storm
  • Ubuntu Security Notice USN-6034-1
  • Red Hat Security Advisory 2023-1888-01
  • FUXA 1.1.13-1186 Remote Code Execution
  • Ubuntu Security Notice USN-6033-1
  • WordPress PowerPress 10.0 Cross Site Scripting
  • Red Hat Security Advisory 2023-1899-01
  • Chitor-CMS 1.1.2 SQL Injection
  • Ubuntu Security Notice USN-6032-1
  • ProjeQtOr Project Management System 10.3.2 Shell Upload
  • Ubuntu Security Notice USN-6031-1
  • Piwigo 13.6.0 Cross Site Scripting
  • Red Hat Security Advisory 2023-1893-01
  • Franklin Fueling Systems TS-550 Hash Disclosure / Default Credentials
  • Red Hat Security Advisory 2023-1822-01
  • Ubuntu Security Notice USN-6028-1
  • Ubuntu Security Notice USN-6030-1
  • Ubuntu Security Notice USN-6029-1
  • Swagger UI 4.1.3 Critical Information Misrepresentation
  • Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution
  • Serendipity 2.4.0 Cross Site Scripting
  • Red Hat Security Advisory 2023-1879-01
  • Ubuntu Security Notice USN-6027-1
  • Serendipity 2.4.0 Shell Upload
• SecWiki News
  • SecWiki News 2023-04-20 Review
• Twitter @nicolas Krassas
  • Analyzing Malware using FREE Online Tools https://infosecwriteups.com/analyzing-malware-using-free-online-tools-e37b56bc3868?source=rss----7b722bfd1b8...
  • Ethereum Virtual Machine Internals – Part 1 https://www.netspi.com/blog/technical/blockchain-penetration-testing/ethereum-virtual-machine-internals-p...
  • Red Team Blues https://blog.dshr.org/2023/04/red-team-blues.html
  • Generating Deserialization Payloads for MessagePack C#’s Typeless Mode https://www.reddit.com/r/netsec/comments/12sxsql/generating_deserialization_pa...
  • New MgBot Malware Framework Plugins Target African Telecommunications Company https://securityonline.info/new-mgbot-malware-framework-plugins-target-a...
  • Lazarus hackers now push Linux malware via fake job offers https://www.bleepingcomputer.com/news/security/lazarus-hackers-now-push-linux-malware-via-f...
  • Criminal Records Service Still Disrupted 4 Weeks After Hack https://packetstormsecurity.com/news/view/34534/Criminal-Records-Service-Still-Disrupted-4...
  • 'AuKill' Malware Hunts & Kills EDR Processes https://www.darkreading.com/attacks-breaches/aukill-malware-hunts-kills-edr-processes
  • Capita has 'evidence' customer data was stolen in digital burglary https://go.theregister.com/feed/www.theregister.com/2023/04/20/capita_admits_to_evi...
  • Microsoft 365 outage blocks access to web apps and services https://www.bleepingcomputer.com/news/microsoft/microsoft-365-outage-blocks-access-to-web-...
  • PASTIS: Collaborative Fuzzing Framework https://github.com/quarkslab/pastis
  • Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job https://thehackernews.com/2023/04/lazarus-group-adds-linux-malware-to.html
  • 3CX hack caused by trading software supply chain attack https://www.bleepingcomputer.com/news/security/3cx-hack-caused-by-trading-software-supply-chai...
  • Daggerfly Cyberattack Campaign Hits African Telecom Services Providers https://thehackernews.com/2023/04/daggerfly-cyberattack-campaign-hits.html
  • NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders https://thehackernews.com/2023/04/nso-group-used-3-zero-click-iphone.html
  • Fortra shares findings on GoAnywhere MFT zero-day attacks https://www.bleepingcomputer.com/news/security/fortra-shares-findings-on-goanywhere-mft-zero...
  • Awesome EDR Bypass Resources For Ethical Hacking https://github.com/tkmru/awesome-edr-bypass
  • Medusa ransomware crew brags about spreading Bing, Cortana source code https://go.theregister.com/feed/www.theregister.com/2023/04/19/medusa_microsoft...
  • Killnet Boss Exposes Rival Leader in Kremlin Hacktivist Beef https://www.darkreading.com/threat-intelligence/killnet-boss-rival-leader-kremlin-hacktiv...
• unSafe.sh - 不安全
  • ln -s 两次无线递归问题：给目录创建两次软链接会出现无限递归
  • 解除 Xshell/Xftp 7 个人免费版退出弹窗的办法
  • 密码保护：OSDA-LAB-Challenge4 笔记
  • CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100
  • Avoiding the Storm | How to Protect Cloud Infrastructure from Insider Threats
  • 《CS:GO》AK-47 超罕见皮肤卖出了逾 40 万美元
  • Secure by default: recommendations from the CISA’s newest guide, and how Cloudflare follows these principles to keep you secure
  • ICANN 和 Verisign 提议允许任何政府扣押域名
  • Oxy: Fish/Bumblebee/Splicer subsystems to improve reliability
  • FreeBuf 早报 | 最容易遭受勒索软件攻击的十大行业；微软 SQL 服务器遭黑客入侵
  • UDPX - Fast A nd Lightweight, UDPX Is A Single-Packet UDP Scanner Written In Go That Supports The Discovery Of Over 45 Services With The Ability To Add Custom Ones
  • UK’s Cabinet Office Issues Cyber Warning to UK Businesses
  • 征求意见‖《汽车远程升级（OTA）信息安全测试规范》
  • Imgur 将从下个月开始禁止上传色情图像
  • 在 AI 和 ChatGPT 时代大学应该恢复口试
• 美团技术团队
  • 一次「找回」TraceId的问题分析与过程思考
• 先知安全技术社区
  • house of apple3 心得体会
• Sploitus.com Exploits RSS Feed
  • Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS) exploit
  • Franklin Fueling Systems TS-550 - Default Password exploit
  • Bang Resto v1.0 - Stored Cross-Site Scripting (XSS) exploit
  • Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution Exploit exploit
  • Franklin Fueling Systems TS-550 - Default Password Vulnerability exploit
  • Bang Resto v1.0 - Stored Cross-Site Scripting Vulnerability exploit
  • GDidees CMS 3.9.1 - Local File Disclosure Vulnerability exploit
  • Serendipity 2.4.0 - Remote Code Execution (Authenticated) Vulnerability exploit
  • Bang Resto v1.0 - (Multiple) SQL Injection Vulnerability exploit
  • Serendipity 2.4.0 - Cross-Site Scripting Vulnerability exploit
  • Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE) exploit
  • AspEmail v5.6.0.2 - Local Privilege Escalation exploit
  • ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE) exploit
  • Microsoft Word 16.72.23040900 - Remote Code Execution Vulnerability exploit
  • Bang Resto v1.0 - 'Multiple' SQL Injection exploit
  • Serendipity 2.4.0 Cross Site Scripting exploit
  • FUXA 1.1.13-1186 Remote Code Execution exploit
  • Swagger UI 4.1.3 Critical Information Misrepresentation exploit
  • Serendipity 2.4.0 Shell Upload exploit
  • Chitor-CMS 1.1.2 SQL Injection exploit
  • Piwigo 13.6.0 Cross Site Scripting exploit
  • Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution exploit
  • ProjeQtOr Project Management System 10.3.2 Shell Upload exploit
  • Franklin Fueling Systems TS-550 Hash Disclosure / Default Credentials exploit
  • GDidees CMS 3.9.1 - Local File Disclosure exploit
  • Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information Exploit exploit
  • Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated) exploit
  • Exploit for Vulnerability in Microsoft exploit
  • Exploit for Path Traversal in Apache Http Server exploit
• 安全脉搏
  • CVE-2023-21839：Weblogic反序列化漏洞
  • 【勒索防护】MSI 等多个企业已遭受攻击！MoneyMessage 勒索软件突现
  • Weblogic 关于T3协议和二次反序列化分析
  • 【漏洞预警】Oracle WebLogic 4月份补丁日安全通告
• 芒果很香
  • windows加入白名单
  • 记frp内网穿透配置
• Microsoft Security Blog
  • Microsoft Entra delivers 240 percent ROI, according to new Forrester study
• Sucuri Blog
  • How to Prevent SSH Brute Force Login Attacks
• 嘶吼 RoarTalk – 回归最本质的信息安全,互联网安全新媒体,4hou.com
  • Peach Fuzzer漏洞挖掘实战
  • 神话还是现实？揭穿围绕云勒索软件的错误概念
  • Mac恶意软件MacStealer伪装成P2E应用程序大肆传播
• Forcepoint
  • UK’s Cabinet Office Issues Cyber Warning to UK Businesses
• Twitter @bytehx
  • RT Tuan Anh Nguyen 🇻🇳 ⚡️: I already write a nuclei template to scan this vulnerability before. Not many server vulnerable. It cause due to mis...
  • RT ProjectDiscovery.io: Extract ASN records for a given list of domains or subdomains with dnsx 💪 Install dnsx 👉 http://github.com/projectdiscov...
• GuidePoint Security
  • Quarterly GRIT Ransomware Report – Q1 2023
  • The Next Step: The GRIT Threat Feed is here
• Trail of Bits Blog
  • Typos that omit security features and how to test for them
• blog.avast.com EN
  • The importance of independent third-party testing of anti-malware solutions
• SAP Blogs
  • A Customer Journey through the SAP S/4HANA Cloud 3 System Landscape (3SL) Upgrade & Hotfix Process
  • Document and Reporting Compliance – Statutory Reporting supporting Broad-Based Black Economic Empowerment in South Africa
  • SAP ISU Intercompany and Data Exchange : Choice
  • What is SAP Business Network Planning Collaboration ?
  • Visibility of charge hierarchy in SAP TM for tendering
  • Plastic packaging taxes – SAP supports with SAP Responsible Design and Production
  • The Impact of Payment Automation in the Subscription Economy
  • What’s actually new within Margin Analysis within S4HANA (Cutting out the noise addressable by process
  • Jenkins Pipeline setup for Backup, Version Compare and Validation (cpilint) of SAP Integration Suite Artifacts
  • A Technical Guide to Uploading Events Using Spreadsheet Templates in SAP Business Network Material Traceability Solution
• Hex Rays
  • IDA Trivia – Test your IDA knowledge! DAY 4
• SentinelOne
  • Avoiding the Storm | How to Protect Cloud Infrastructure from Insider Threats
• Reverse Engineering
  • An interesting talk I saw last March @ BSIDES Security Rochester
• Hexacorn
  • The words that go adapataadadapata
• Exploit-DB.com RSS Feed
  • [webapps] ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE)
  • [webapps] Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS)
  • [webapps] FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE)
  • [local] Linux Kernel 6.2 - Userspace Processes To Enable Mitigation
  • [webapps] Chitor-CMS v1.1.2 - Pre-Auth SQL Injection
  • [remote] Franklin Fueling Systems TS-550 - Default Password
  • [webapps] GDidees CMS 3.9.1 - Local File Disclosure
  • [local] AspEmail v5.6.0.2 - Local Privilege Escalation
  • [webapps] Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information
  • [webapps] Bang Resto v1.0 - 'Multiple' SQL Injection
  • [webapps] Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
  • [remote] Microsoft Word 16.72.23040900 - Remote Code Execution (RCE)
  • [local] File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control
  • [webapps] Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)
  • [webapps] Serendipity 2.4.0 - Cross-Site Scripting (XSS)
  • [webapps] Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated)
• Malwarebytes Labs
  • What your peers said: G2 comparison of top Endpoint Security vendors
  • QBot changes tactic, remains a menace to business networks
  • FTC tackles tech support scams by chasing payment processor firms
  • Fancy Bear known to be exploiting vulnerability in Cisco routers
• glzjin
  • 密码保护：OSDA-LAB-Challenge5 笔记
  • 密码保护：OSDA-LAB-Challenge4 笔记
• Black Hills Information Security
  • If You Don’t Ruse, You Lose: A Simple Guide to Blending in While Breaking In
• 安全牛
  • Twitter上最具人气的20个网络安全博主及账户
  • 产业观察丨亚信安全推出40G高性能防毒墙，为网络边界防护提供新思路
  • 直播预告 | 网安大讲堂（69期）：APP开发者如何利用GPT和NFT降低合规成本提高推广效率
• FreeBuf网络安全行业门户
  • FreeBuf 早报 | 最容易遭受勒索软件攻击的十大行业；微软 SQL 服务器遭黑客入侵
  • 征求意见‖《汽车远程升级（OTA）信息安全测试规范》
  • Weblogic CVE 2023-21839漏洞复现
  • 印度跨国银行遭遇数据泄露，数百万敏感数据被公开访问
  • 微软SQL服务器遭黑客入侵，所有文件都被加密
  • 五月正式实施！一文带你看懂《关基保护要求》
• 绿盟科技技术博客
  • RSA 2023创新沙盒盘点｜Zama：开源全同态加密方案支持自动化改造
  • RSA 2023创新沙盒盘点｜HiddenLayer：针对机器学习攻击的防护与响应平台
• 奇客Solidot–传递最新科技情报
  • 《CS:GO》AK-47 超罕见皮肤卖出了逾 40 万美元
  • ICANN 和 Verisign 提议允许任何政府扣押域名
  • Imgur 将从下个月开始禁止上传色情图像
  • 在 AI 和 ChatGPT 时代大学应该恢复口试
  • Reddit 将对利用其数据训练 AI 收费
  • 高等教育中女性比例超过半数
  • 电刺激能加速伤口愈合
  • 黑客无聊劫持保守派名人账号去制造混乱
  • 微软拒绝为 API 付费其广告平台停止支持 Twitter
  • 希捷因向华为出口硬盘被罚 3 亿美元
• 杨龙
  • ln -s 两次无线递归问题：给目录创建两次软链接会出现无限递归
• 代码卫士
  • 谷歌修复今年的第二个已遭利用 Chrome 0day
  • 无需钥匙，一台老旧手机诺基亚 3310就能开走豪车
• 腾讯玄武实验室
  • 每日安全动态推送(4-20)
• 安全内参
  • 欧盟网络安全战略最后一块拼图：《网络团结法案》提案发布
  • RSAC 2023上的十大韩国新锐网络安全公司
• 黑奇士
  • “双面人”吴军：9号说ChatGPT不是新革命，20号卖GPT课程，已有一万多人购买
• 看雪学苑
  • 破解 Switch 的黑客提前出狱，但仍需赔偿任天堂 1450 万美元
  • Angr 使用技巧速通笔记
  • LLVM与代码混淆技术 | 打造出属于自己的代码混淆工具
• 三六零CERT
  • 安全日报（2023.04.20）
• HackerNews
  • 欧盟网络安全战略最后一块拼图：《网络团结法案》提案发布
  • 微软 SQL 服务器遭黑客入侵，所有文件都被加密
  • 间谍软件制造商 QuaDream 终于要倒闭了
  • 马斯克称：美国政府及情报机构可监视推特所有私聊信息
  • 美英警告：俄黑客组织在 Cisco 路由器部署恶意软件
• GobySec
  • Weblogic CVE-2023-21931 漏洞挖掘技巧：后反序列化利用
• 长亭技术沙盒
  • 漏洞风险提示 | WebLogic多个高危漏洞
• Checkmarx.com
  • Shifting Left Is No Longer Enough: It’s Time to Shift Everywhere
• 信息安全国家工程研究中心
  • 新型电力系统网络安全防护挑战与展望
  • RSA 2023的十大看点
• 极客公园
  • 当创业者开始用 ChatGPT 裁员
  • 雷军现身上海车展，参观多家友商展台；特斯拉一季度盈利暴跌 20%；飞猪：五一出游爆发，预定超去年 10 倍｜极客早知道
• 国家互联网应急中心CNCERT
  • Oracle发布2023年4月的安全公告
• 山石网科安全技术研究院
  • 山石网科安全研究员入选ASUS产品安全名人堂
• 安全学术圈
  • 基于失败测试用例相似性的补丁正确性预测
• KCon 黑客大会
  • “归源·智变”！第12届KCon大会主题及主视觉揭晓
• 网安寻路人
  • 欧盟《人工智能法案》如何监管GPT模型：立法提案的迭代
• 黑海洋 - WIKI
  • 解除 Xshell/Xftp 7 个人免费版退出弹窗的办法
• 安全研究GoSSIP
  • G.O.S.S.I.P 阅读推荐 2023-04-20 CarpetFuzz
• 360漏洞云
  • 2022网信自主创新调研报告|三连任组长单位深度参与，360持续贡献产业智慧
• CNCERT国家工程研究中心
  • 全球数据跨境流动合规 半月观察（第七期）
  • 卫星照片的ChatGPT已经存在
  • 美英警告：俄黑客组织在 Cisco 路由器部署恶意软件
  • 63%的数据泄露事件都是从外部发现的
• leveryd
  • [写了一个测爬虫能力的靶场，因为目前leveryd-asm的爬虫能力是基于katana，就测试了一下，结果看到很多场景里目前katana还不能解析页面中的链接。

测试的结果：projectdiscovery/katana#415

爬虫靶场项目：https://github.com/leveryd-asm/crawler-test](https://mp.weixin.qq.com/s?__biz=MzkyMDIxMjE5MA==&mid=2247485360&idx=1&sn=c108c3d186ab7ae85d50116b9b01bf96&chksm=c1970001f6e08917acf3e6b41b737cf783980608084ccf618dc206bc82134e626b61dd79ae93&scene=58&subscene=0#rd)

• 火线Zone
  • OSRC众测挑战赛，奖励加倍香到爆 | OPPO 安全应急响应中心
  • 主打一个“成功人生”，火线Zone恭迎p牛、R3s3arcm
  • Zone在招聘 | 好好干，东哥罩你
• 嘶吼专业版
  • 神话还是现实？揭穿围绕云勒索软件的错误概念
  • Mac恶意软件MacStealer伪装成P2E应用程序大肆传播
• 深信服千里目安全技术中心
  • 【高级威胁追踪(APT)】Patchwork组织更新技术卷土重来，针对境内教育科研单位再次发起攻击行动
• SecPulse安全脉搏
  • 【漏洞预警】Oracle WebLogic 4月份补丁日安全通告
• 数世咨询
  • 为什么安全从业人员应当了解业务？
  • 专利背后的故事 | 行为异常检测方法和装置
• 关键基础设施安全应急响应中心
  • 全球数据跨境流动合规 半月观察（第七期）
  • 工信部部署开展5G网络运行安全能力提升专项行动
  • 老旧医疗设备网络安全该怎么做？
  • 警惕！健身跟踪社交网络中的隐私数据泄露-隐私区域保护功能可能形同虚设
• vivo千镜
  • vivo X Fold2：全能且轻薄，隐私保护更周到！
• 青藤云安全
  • 新品牌宣传片 | 青藤品牌全面升级，正式发布新定位、Slogan
• 绿盟科技金融事业部
  • ChatGPT潜在的八大“安全隐患”洞察
• 中国信息安全
  • 《中国信息安全》2023 年第 3 期目录
  • 前沿 | 从美方推动零信任战略过程看网络安全创新的规律特点
  • 专家观点 | 生成式人工智能产品的应用风险与法治规制
  • CNNVD | 关于Oracle多个安全漏洞的通报
  • 注意 | 银保监会关于“中国时间银行”有关风险的提示
  • 行业 | 青藤首提“业安融合”理念，正式发布先进云安全方案CNAPP
  • 观点 | 废墟探险类直播乱象的成因及法律规制
• 微步在线研究响应中心
  • 全球APT威胁2022年度报告：企业必备的安全指南
• 情报分析师
  • 美国家地理空间情报局发布《地理空间情报基本教程》
  • G7会议公报2023（完整附下载）
• Il Disinformatico
  • Twitterremoto, settima puntata: finalmente sparite le spunte blu “classiche”; riattivati 67mila account di hater; ridotte le protezioni LGBTQ; Microsoft molla Twitter
  • (AGG 2023/04/21 1:30) SpaceX ritenta il lancio della Starship e offre lo spettacolo promesso
• Secureworks Blog
  • The Key to Better Cybersecurity: Why Security Posture Matters
  • Bumblebee Malware Distributed Via Trojanized Installer Downloads
• 补天平台
  • 议题征集|2023补天白帽大会重磅来袭！
• Securityinfo.it
  • La prima caratteristica per la sicurezza as-a-service è la velocità
  • I vecchi router possono rivelare importanti informazioni aziendali
• Over Security - Cybersecurity news aggregator
  • How to Prevent SSH Brute Force Login Attacks
  • Attackers use abandoned WordPress plugin to backdoor websites
  • Google: Ukraine targeted by 60% of Russian phishing attacks in 2023
  • Consumer Financial Protection Bureau says former employee sent confidential info on 256,000 people to personal email
  • Threat Source newsletter (April 20, 2023) — Preview of Cisco and Talos at RSA
  • S3 Ep131: Can you really have fun with FORTRAN?
  • VMware fixes vRealize bug that let attackers run code as root
  • AuKill abusa dei driver di Process Explorer per aggirare i software di sicurezza: come proteggersi
  • La prima caratteristica per la sicurezza as-a-service è la velocità
  • Cyber Solidarity Act, così l’Europa diventerà resiliente e “solidale” contro i cyber attacchi
  • Lazarus hackers now push Linux malware via fake job offers
  • Analysis of BlackBasta ransomware gang (Part 1)
  • Minacce interne: un approccio proattivo per essere sempre un passo avanti
  • Microsoft 365 outage blocks access to web apps and services
  • St. Louis suburb investigating network security incident
  • UK says ‘Wagner-like cyber groups’ attacking critical infrastructure
  • ‘Denim Tsunami’ and ‘Mulberry Typhoon’: Microsoft alters the way it names hacking groups
  • Belarus-linked hacking group targets Poland with new disinformation campaign
  • NSA deputy plans to step down, creating possible leadership openings
  • Capita confirms hackers stole data in recent cyberattack
  • 3CX hack caused by trading software supply chain attack
  • DAAM Android Botnet being distributed through Trojanized Applications
  • Phishing: il punto della giurisprudenza per individuare le responsabilità di banche e utenti
  • Le cyber minacce non fanno il weekend: come mitigare i rischi nei ponti lunghi di primavera
  • I vecchi router possono rivelare importanti informazioni aziendali
  • Instagram scam promises money in exchange for your image
  • Malware authors join forces and target organisations with Domino Backdoor
  • Introducing the Malwarebytes Admin app: Endpoint security at your fingertips
• ICT Security Magazine
  • Ukraine in cyberspace, 1 year after
  • Fortify per un codice sicuro: la scelta delle banche
• 阿里安全响应中心
  • 阿里云CTF倒计时1天，云之攻防赛即将开启
• 东软NetEye网络安全
  • 东软智能网联汽车信息信息安全解决方案亮相上海车展
• Schneier on Security
  • New Zero-Click Exploits Against iOS
• KitPloit - PenTest & Hacking Tools
  • UDPX - Fast A nd Lightweight, UDPX Is A Single-Packet UDP Scanner Written In Go That Supports The Discovery Of Over 45 Services With The Ability To Add Custom Ones
• TrustedSec
  • Incident Response Rapid Triage: A DFIR Warrior’s Guide (Part 2 – Incident Assessment and Windows Artifact Processing)
• Hakin9 – IT Security Magazine
  • When PT in ChatGPT refers to Penetration Testing
• Instapaper: Unread
  • iPhone rubato se il ladro ha sbirciato il codice di sblocco, sono guai grossi
  • Used routers often come loaded with corporate secrets
  • How Criminals Are Hacking Printers to Take Over Your Entire Network
• SANS Internet Storm Center, InfoCON: green
  • VMware releases Security Advisory VMSA-2023-0007, multiple vulnerabilities in VMware Aria for Logs (formerly vRealize Log Insight) CVSS 7.2 - 9.8, time to patch! https://www.vmware.com/security/advisories/VMSA-2023-0007.html, (Thu, Apr 20th)
  • ISC Stormcast For Thursday, April 20th, 2023 https://isc.sans.edu/podcastdetail.html?id=8462, (Thu, Apr 20th)
  • Taking a Bite Out of Password Expiry Helpdesk Calls, (Wed, Apr 19th)
• TorrentFreak
  • YouTube Ripper Sends Cease and Desist to Google, Hoping to Stop DMCA Abuse
  • Nintendo’s War With 1Fichier is Not Over – But Could Be For $0.00
• The Register - Security
  • Capita has 'evidence' customer data was stolen in digital burglary
  • An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says
  • AI defenders ready to foil AI-armed attackers
  • Protect the Industrial Control Systems (ICS)
• Information Security
  • What Threat Intel Feeds Do You Use and How Do You Integrate Them?
  • SD card with the read only switch, can the SD card reader still get viruses?
• Technical Information Security Content & Discussion
  • Multiple Vulnerabilities found in Docker Desktop - privesc, code execution, file overwrite/delete and more.
  • Generating Deserialization Payloads for MessagePack C#’s Typeless Mode
  • The Fuzzing Guide to the Galaxy: An Attempt with Android System Services
  • CVE-2023-29084 Command injection in ManageEngine ADManager Plus
• Graham Cluley
  • US charges three men with six million dollar business email compromise plot
  • LockBit ransomware for Mac – coming soon?
  • MacStealer – newly-discovered malware steals passwords and exfiltrates data from infected Macs
  • Ex-CEO of hacked therapy clinic sentenced for failing to protect patients’ session notes
  • FTC accuses payments firm of knowingly assisting tech support scammers
• Social Engineering
  • Glorify what they’re already doing
  • Jacque Fresco – Psychologists, Psychiatrists, & Psychological Problems (Audio With Scrolling Video Transcript)
  • Getting Back into Friend Group
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • CompTIA Sec+ / PenTest+ / CySA+ / CASP+ - Tips & Tricks, Getting Certified Cheap, and my Personal Experience
  • Metasploit Commands: How to Get Around in the MSFConsole
  • What's a good tool for AV Scanning large files?
• Palo Alto Networks Blog
  • The Value of CYBERFORCE — Breakaway 1=5
• Security Affairs
  • Multinational ICICI Bank leaks passports and credit card numbers
  • VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root
  • Lazarus APT group employed Linux Malware in recent attacks and was linked to 3CX supply chain attack
  • Experts disclosed two critical flaws in Alibaba cloud database services
  • Google TAG warns of Russia-linked APT groups targeting Ukraine
  • Trigona Ransomware targets Microsoft SQL servers
• 安全圈
  • 【安全圈】全国首例：长沙一男子植入“戒酒芯片”，管用 5 个月
  • 【安全圈】男子编写短信轰炸软件，非法获利10万余元
  • 【安全圈】微软SQL服务器遭黑客入侵，所有文件都被加密
  • 【安全圈】黑入iPhone仅需一条iMessage消息！多起NSO“零点击”攻击曝光
  • 【安全圈】最容易遭受勒索软件攻击的十大行业
• TG Soft Software House - News
  • TG Soft Cyber Security Specialist chiusura per il Ponte della Liberazione del 25 Aprile 2023
    
• Computer Forensics
  • Email forensics acquisition?
  • Where is the run diaglogue box getting it's list of folders/files from (Windows 10)?
  • UFED4PC on a MacBook Pro
• KitPloit - PenTest Tools!
  • UDPX - Fast A nd Lightweight, UDPX Is A Single-Packet UDP Scanner Written In Go That Supports The Discovery Of Over 45 Services With The Ability To Add Custom Ones
• NetSPI
  • Ethereum Virtual Machine Internals – Part 1
• Trend Micro Research, News and Perspectives
  • Cyber Threat Intelligence: The Power of Data
  • Top 5 Infrastructure as Code Security Challenges
• The Hacker News
  • Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases
  • Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks
  • Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job
  • Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
  • ChatGPT's Data Protection Blind Spots and How Security Teams Can Solve Them
  • Daggerfly Cyberattack Campaign Hits African Telecom Services Providers
  • NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders
• Deeplinks
  • The EARN IT Bill Is Back, Seeking To Scan Our Messages and Photos
• Paul's Security Weekly
  • PSW #781 - Ivan Arce