Новости информационной безопасности

Malicious npm Code Packages Built for Hijacking Discord Servers

The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases.

Читать полностью: Malicious npm Code Packages Built for Hijacking Discord Servers

Дата: 2021-12-08 22:30:04

Источник: https://threatpost.com/malicious-npm-code-packages-discord/176886/

SMBeagle - Fileshare Auditing Tool That Hunts Out All Files It Can See In The Network And Reports If The File Can Be Read And/Or Written

Читать полностью: SMBeagle - Fileshare Auditing Tool That Hunts Out All Files It Can See In The Network And Reports If The File Can Be Read And/Or Written

Дата: 2021-12-08 21:56:56

Источник: http://www.kitploit.com/2021/12/smbeagle-fileshare-auditing-tool-that.html

Moobot Botnet Chews Up Hikvision Surveillance Systems

Attackers are milking unpatched Hikvision video systems to drop a DDoS botnet, researchers warned.

Читать полностью: Moobot Botnet Chews Up Hikvision Surveillance Systems

Дата: 2021-12-08 20:13:18

Источник: https://threatpost.com/moobot-botnet-hikvision-surveillance-systems/176879/

Not with a Bang but a Whisper: The Shift to Stealthy C2

DoH! Nate Warfield, CTO of Prevailion, discusses new stealth tactics threat actors are using for C2, including Malleable C2 from Cobalt Strike's arsenal.

Читать полностью: Not with a Bang but a Whisper: The Shift to Stealthy C2

Дата: 2021-12-08 19:28:35

Источник: https://threatpost.com/tactics-attackers-stealthy-c2/176853/

PHP Re-Infectors – The Malware that Keeps On Giving

We all know why bad actors infect sites: monetary gain, boosts in SEO ratings for their malware or spam campaigns and a number of other reasons explained in our post on hacker’s motivations...

Читать полностью: PHP Re-Infectors – The Malware that Keeps On Giving

Дата: 2021-12-08 19:22:15

Источник: https://blog.sucuri.net/2021/12/php-re-infectors-the-malware-that-keeps-on-giving.html

Critical SonicWall VPN Bugs Allow Complete Appliance Takeover

Unauthenticated, remote attackers can achieve root-level RCE on SMA 100-series appliances.

Читать полностью: Critical SonicWall VPN Bugs Allow Complete Appliance Takeover

Дата: 2021-12-08 19:16:54

Источник: https://threatpost.com/critical-sonicwall-vpn-bugs-appliance-takeover/176869/

AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK

The flaws, which could enable attackers to disable security and gain kernel-level privileges, affect Amazon WorkSpaces and other cloud services that use USB over Ethernet.

Читать полностью: AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK

Дата: 2021-12-08 18:54:12

Источник: https://threatpost.com/aws-cloud-services-flaws-eltima/176852/