Aggregator

Prying Deep: An OSINT Tool to Collect Intelligence on the Dark Web

Zloader, a sophisticated Trojan, has recently evolved with features that enhance its stealth and destructive potential, as the latest version, 2.9.4.0, introduces a custom DNS tunnel for covert C2 communications, bypassing traditional network security measures.  An interactive shell empowers attackers with granular control over infected systems, facilitating advanced attacks like ransomware deployment, where Zloader’s relentless […]

The post Reserachers Uncovered Zloader DNS Tunneling Tactics For Stealthy C2 Communication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

周三 Black Hat Europe 会议上，安全公司 Lookout 的研究人员披露了警方用于从 Android 设备收集信息的间谍软件 EagleMsgSpy。该间谍软件至少从 2017 年就开始使用，Lookout 获得了间谍软件的多个版本。EagleMsgSpy 能从设备上获取通话记录、联系人、GPS 坐标、书签以及来自 Telegram 和 WhatsApp 等第三方应用的消息。它还能启动屏幕录制并捕获音频。EagleMsgSpy 被形容是一款手机司法监听产品，由武汉中软通证信息技术有限公司开发。

ESET scopre il primo bootkit UEFI per Linux

专家预测 2025 年网络安全将发生重大转变

面对勒索攻击，企业应该具备什么样的“反制”思维？

The US Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned Sichuan Silence Information Technology Company and its employee Guan Tianfeng for their involvement in the April 2020 global firewall compromise, which targeted numerous US critical infrastructure companies.  The Department of Justice has also indicted Guan for the same cybercrime, and the State Department […]

The post US Charged Chinese Hackers for Exploiting Thousands of Firewall appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

DMD Diamond – one of the oldest blockchain projects in the space has announced the start of Open Beta for the DMD Diamond v4 blockchain. Established in 2013, DMD Diamond is recognized as a decentralized, community-driven initiative. The v4 blockchain introduces a host of advanced features, designed to enhance efficiency and usability. Beginning December 9, the […]

The post DMD Diamond Launches Open Beta for v4 Blockchain Ahead of 2025 Mainnet appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

开启鸿蒙系统安全研究之旅 by ourren

更多最新文章，请访问SecWiki

Researchers reported a phishing attack on December 4th, 2024, where malicious emails purportedly from the Ukrainian Union of Industrialists and Entrepreneurs were distributed, inviting recipients to a NATO standardization conference.  The emails aimed to compromise systems by delivering malware, and CERT-UA warns users to be cautious of unsolicited emails, especially those with attachments or links […]

The post Hackers Deploy Weaponized LNK Files for Malicious Payload Delivery appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

银狐团伙再出新招，Web漏洞成切入点

信息安全漏洞周报（2024年第50期 ）

High-profile security incidents provide examples of how common vulnerabilities can be exploited. If you pay attention, you can learn from others' mistakes.

如果能物理接触硬件，那么硬件的安全性通常就无法保障了。然而在云计算时代，客户的敏感数据都储存在未知地点的云端，由未知身份的服务器管理员维护。如何防止能物理接触设备的人窃取敏感数据？芯片供应商的回应是加入保护措施，确保在服务器被物理篡改或感染恶意软件的情况下敏感数据不会被窃取。本周二，一个国际研究小组公布了针对 AMD SEV 的 BadRAM 攻击。AMD 的 Secure Encrypted Virtualization (SEV)被用于加密虚拟机内存并将其隔离以保障云计算的隐私和信任。研究人员报告，利用不到 10 美元的设备，他们可以篡改 DRAM 模块上的嵌入式 SPD 芯片，绕过 SEV 保护，包括最新版本的 SEV-SNP。AMD 已经释出了补丁，补丁没有影响性能，只是增加了启动时间。

Vienna, Austria, Dec. 11, 2024, CyberNewswire — DMD Diamond, one of the oldest blockchain projects in the space, has announced the start of Open Beta for the DMD Diamond v4 blockchain.

Established in 2013, DMD Diamond is recognized as … (more…)

The post News alert: DMD Diamond invites developers to participate in open beta for its v4 blockchain first appeared on The Last Watchdog.

The post News alert: DMD Diamond invites developers to participate in open beta for its v4 blockchain appeared first on Security Boulevard.

BadRAM: Raspberry Pi за $10 превратит безопасные облачные серверы в решето.

Let's Encrypt 将于 2025 年 8 月 6 日停止支持 OCSP

Krispy Kreme said the incident is likely to materially affect operations and short-term financial performance