axsharma

More NodeJS malware has been spotted by NPM that spawned reverse shells on Windows & Linux machines, exfiltrated environment data, and has scored over 1,000 downloads!

This one hasn't been talked about much publicly, but an advisory shared with Microsoft enterprise customers (and BleepingComputer) mentions use of .CAT files to spoof signatures on Windows.

Palo Alto Networks researcher Or Cohen discovered a Linux privilege escalation vulnerability that let standard Linux user to gain root permissions.

that's not only to make itself look more legit to humans, but to evade detection by security tools, web proxies, email gateways, etc. aka 'bots'. The irony of it.

Great find!

...built on PrestaShop, WooCommerce, and Magento.

Actually, it depends.

and malware C&C server to make it hard for corporate security solutions to implement IOC/domain-based blocks.

Hundreds of Bank of America customers had trouble accessing their bank accounts yesterday due to Avast and AVG antivirus engines flagging the site as "malware."

These are the same hackers who had hacked Indian Prime Minister's Modi twitter account today.

A 2-year old #vulnerability still unpatched by #Apple has been used in SSH attacks for gaining full disk access on Macs.

Fileless, serverless, versatile and advanced FritzFrog is a botnet AND a worm that masters self-replication, deployment, growth and mining crypto.

Over 500 servers in the US and Europe belonging to government, education, healthcare and finance sectors have been breached already.

Guardicore Labs has identified the strand and provided remediation guidance.

DEF CON's revelation about BOEING-747 using floppies made headlines, but nobody explained WHY.

Why not USB devices, or CDs?

So I decided to do a detailed analysis on why do airplanes use floppy disks in 2020 for critical updates?

Google search has been indexing Hacker Noon's unfinished drafts.

Got an IoT smart lock? Watch out for hackers unlocking it from anywhere!

A security vulnerability discovered and responsibly reported by Craig Young of Tripwire exposes flaws in U-Tec UltraLoq locks, among other devices.

Plan was to go to the beach but considering how British beaches are flooded during this hot weekend, gonna write more hacker stuff.

Using iframe and TeamViewer's custom URI scheme, attackers could initiate connection from your Windows PC to their SMB shares!

Hackers abuse lookalike domains and favicons for credit card theft using a variation of older Magecart technique. This time they throw in homograph domains.

Abusing open redirects on many government sites including Weather.gov, spammers get easy organic SEO for porn sites.

An easier variation of an older technique using "mock folders" i.e. C:\Windows \System32 (notice the trailing space after Windows\) and DLL hijacking to bypass UAC and do other naughty things.

Affluent domain squatter "Domain King" apparently as $88k stuck with Crystal Cruises, so he hoards "CrystalCruisesSuck.com"

Other similar vulnerabilities in popular components revealed too.

D-Link encrypted firmware can be easily cracked by the leaking key

Previously abused for privilege escalation/UAC bypass. A use-case (deleting arbitrary files needing privileged access) was brought to light by a researcher. The behaviour can be used to disable antivirus products.