Social Engineering
VMware Aria Operations for Logs CVE-2023-34051 Technical Deep Dive and IOCs
Introduction This report is a follow up to https://www.horizon3.ai/vmware-vrealize-log-insight-vmsa-2023-0001-technical-deep-dive/. Earlier this year we reported the technical details for VMSA-2023-0001 affecting VMware Aria Operations for Logs (formerly VMware vRealize Log Insight). […] The ...
KeePass Malicious Ads: Google Goof Permits Punycode Attacks Again
Mote below k: Not only malvertising, but also “verified by Google.” ...
Survey Sees Zero-Trust Transition Gaining Momentum
A recent Okta survey found the majority of organizations have implemented a zero-trust IT initiative, with another 35% planning to do so soon ...
How Digital Forensics Can Investigate the Dark Web
If your personal information is stolen in a data breach, it can find its way to the dark web to be sold, traded and exploited ...
Cisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198
Overview On Monday, 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software actively being exploited by threat actors to install Remote […] The ...
Google Enhances Play Protect to Defend Against Polymorphic Malware
Google is strengthening its Google Play Protect tool with new real-time scanning features that aim to deal with the growing challenge of malicious apps that use polymorphic malware to evade detection. The ...
Elon’s CSAM FAIL: Twitter Fined by Australian Govt.
Straya strikes back: Musk’s mob declines to answer questions, breaking law dunundah ...
Stalking: Fear of Apple AirTag ‘Explodes’ — Lawsuit Momentum Grows
This is why we can’t have nice things: 38 victims of Apple’s “negligence” named in amended class action ...
Hackers Still Abusing LinkedIn Smart Links in Phishing Attacks
Email security firm Cofense in 2022 uncovered a phishing campaign that abused LinkedIn’s Smart Links feature to redirect unsuspecting victims to malicious websites, another example of bad actors using a trusted source ...
Perfect Loader Implementations
Thank you to SpecterOps for supporting this research and to Lee and Sarah for proofreading and editing! Crossposted on GitHub.TLDR: You may use fuse-loader or perfect-loader as examples for extending an OS’s native ...
