Tag: tool
-
Automating parts of Active Directory pentests with BloodHound CE
BloodHound is one of the essential tools for every Penetration Tester and Red Teamer and with the new release of BloodHound CE, BloodHound got some ve… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/bloodhound-ce-and-automating-parts-of-ad-pentests
-
MSSQL for Pentester: NetExec
NetExec (nxc) is a powerful network exploitation tool developed as a modern successor to CrackMapExec (CME), which was widely used by penetration test… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/mssql-for-pentester-netexec/
-
A Detailed Guide on Feroxbuster
Feroxbuster is a robust tool designed to identify directories and files on web servers using brute-force techniques. It is frequently utilized in pene… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/a-detailed-guide-on-feroxbuster/
-
Automatically Fix Security Issues at the Source
Tags: toolMany static analysis tools exist out there for detecting security issues. These tools are a necessary part of the development lifecycle. Detecting iss… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2021/11/09/automatically-fix-security-issues-at-the-source/
-
CredManifest: Azure AD Information Disclosure Leading to Privilege Escalation Free Tool Released
Summary On November 17th, 2021 Microsoft disclosed the existence of a high severity information disclosure vulnerability impacting Azure Active Direct… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2021/11/30/credmanifest-azure-ad-information-disclosure-leading-to-privilege-escalation-free-tool-released/
-
>>Follina<< (CVE-2022-30190): Microsoft Support Diagnostic Tool 0-Day Vulnerability Being Actively Exploited
This bulletin was written by Michal Nowakowski of the Kudelski Security Threat Detection & Research Team Summary On May 27th, 2022, threat researc… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/05/31/follina-cve-2022-30190-microsoft-support-diagnostic-tool-0-day-vulnerability-being-actively-exploited/
-
Introducing Shufflecake: plausible deniability for multiple hidden filesystems on Linux
Today we are excited to release Shufflecake, a tool aimed at helping people whose freedom of expression is threatened by repressive authorities or dan… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/11/10/introducing-shufflecake-plausible-deniability-for-multiple-hidden-filesystems-on-linux/
-
Cybercriminals Transform Raspberry Pi into a Tool for Fraud and Anonymization: GEOBOX Discovery
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/cybercriminals-transform-raspberry-pi-into-a-tool-for-fraud-and-anonymization-geobox-discovery
-
How Python Software Development Enhances Cyber Defense
Python has emerged as a powerful ally in combating rising cybersecurity threats and tracking cybercrime through tools leveraging… First seen on hackread.com Jump to article: hackread.com/python-software-development-enhances-cyber-defense/
-
Phishing-as-a-Service Rockstar 2FA continues to be prevalent
Tags: 2fa, attack, authentication, credentials, malicious, mfa, microsoft, monitoring, phishing, service, threat, toolPhishing tool Rockstar 2FA targets Microsoft 365 credentials, it uses adversary-in-the-middle (AitM) attacks to bypass multi-factor authentication. Trustwave researchers are monitoring malicious activity associated with Phishing-as-a-Service (PaaS) platforms, their latest report focuses on a toolkit called Rockstar 2FA. Rockstar 2FA targets Microsoft 365 accounts and bypasses multi-factor authentication with adversary-in-the-middle (AitM) attacks. In AiTM phishing, threat…
-
The CSO guide to top security conferences
Tags: access, cio, cloud, compliance, conference, cyber, cybersecurity, email, germany, guide, identity, india, intelligence, international, jobs, law, resilience, risk, risk-management, threat, tool, training, updateThere is nothing like attending a face-to-face event for career networking and knowledge gathering, and we don’t have to tell you how helpful it can be to get a hands-on demo of a new tool or to have your questions answered by experts. Fortunately, plenty of great conferences are coming up in the months ahead.…
-
AI-based tools designed for criminal activity are in high demand
Multiple regional conflicts, such as Russia’s continued invasion of Ukraine and the Israel-Hamas conflict, have resulted in a surge in cyberattacks and hacktivist activities, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/29/ai-tools-ransomware/
-
Matrix, A Single Actor Orchestrate Global DDOS Attack Campaign
Cybersecurity researchers have uncovered a widespread Distributed Denial-of-Service (DDoS) campaign attributed to a threat actor using the alias >>Matrix.
-
SMOKEDHAM Backdoor: UNC2465’s Stealth Weapon for Extortion and Ransomware Campaigns
A comprehensive analysis by TRAC Labs has shed light on the SMOKEDHAM backdoor, a malicious tool leveraged by the financially motivated threat actor UNC2465. Active since 2019, SMOKEDHAM plays a... First seen on securityonline.info Jump to article: securityonline.info/smokedham-backdoor-unc2465s-stealth-weapon-for-extortion-and-ransomware-campaigns/
-
‘Tis the season for website cloning tools, RCEs and AI phishing lures
First seen on scworld.com Jump to article: www.scworld.com/news/tis-the-season-for-website-cloning-tools-rces-and-ai-phishing-lures
-
Scientists demonstrate Pixelator deepfake image verification tool
With the age of deepfake imagery upon us, a team led by York St John University researchers has created a tool to help people ‘navigate the fine line between reality and fabrication’ First seen on Jump to article: /www.computerweekly.com/news/366616231/Scientists-demonstrate-Pixelator-deepfake-image-verification-tool
-
AmberWolf Launches NachoVPN Tool to Tackle VPN Security Risks
Researchers reveal major vulnerabilities in popular corporate VPN clients, allowing remote attacks. Discover the NachoVPN tool and expert… First seen on hackread.com Jump to article: hackread.com/amberwolf-nachovpn-tool-vpn-security-risks/
-
Russian Script Kiddie Assembles Massive DDoS Botnet
Over the past year, Matrix has used publicly available malware tools and exploit scripts to target weakly secured IoT devices, and enterprise servers. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-script-kiddie-assembles-massive-ddos-botnet
-
Zscaler-Tool <> bekämpft den Malware-Loader <>
Durch die Zusammenarbeit von internationalen Strafverfolgungsbehörden mit Partnern aus der Wirtschaft in der Operation Endgame konnten im Mai viele bekannte Malware-Loader ausgeschaltet werden. Mehr als 1.000 Befehls- und Kontrolldomänen (C2) wurden damals beschlagnahmt und über 50.000 Infektionen beseitigt. Diese erste großangelegte Aktion gegen eine C2-Infrastruktur seit über zehn Jahren hatte allerdings nur kurzfristige Wirksamkeit, denn…
-
Wie die künstliche Intelligenz die Zukunft von Cyberbedrohungen und -abwehr neu definiert
KnowBe4 hat ihre Cybersicherheitsprognosen für 2025 veröffentlicht. Die Experten von KnowBe4 beleuchten, wie fortschrittliche KI-Tools die Dynamik zwischen Angreifern und Verteidigern weiter verändern werden. Im Jahr 2024 beschleunigte sich die Entwicklung von Cyberbedrohungen erheblich angetrieben durch die zunehmende Verbreitung und Raffinesse von KI-Werkzeugen. Diese Tools ermöglichen es Cyberkriminellen, ihre Angriffe präziser, komplexer und schwerer […]…
-
Cybersecurity’s oversimplification problem: Seeing AI as a replacement for human agency
Tags: access, ai, awareness, business, ciso, computer, cyber, cybersecurity, data, election, infrastructure, intelligence, Internet, jobs, technology, threat, tool, trainingThere’s a philosophical concept called the Great Man Theory that suggests history is all about how significant individuals act as centers of gravity for society as a whole, think Alexander the Great, Napoleon Bonaparte, Queen Elizabeth I, or the founding fathers of the American Revolution.Recent research suggests that cybersecurity and related professions are developing a…
-
Hottest cybersecurity open-source tools of the month: November 2024
This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. ScubaGear … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/27/open-source-cybersecurity-tools-november-2024/
-
Firefox 133.0 Released with Multiple Security Updates What’s New!
Mozilla has officially launched Firefox 133.0, offering enhanced features, significant performance improvements, and critical security fixes. This latest release enhances privacy, developer tools, and enterprise functionality while introducing several new features and updates. Here’s everything you need to know! One of the most exciting additions is the new Bounce Tracking Protection, available in Firefox’s Enhanced…
-
AWS CISO details automated cybersecurity tools for customers
Chris Betz, CISO at AWS, discusses how three internal tools are designed to automatically identify and mitigate threats for the cloud giant’s customers. First seen on Jump to article: /www.techtarget.com/searchsecurity/news/366616344/AWS-CISO-details-automated-cybersecurity-tools-for-customers
-
Dell unveils new AI, cybersecurity tools at Microsoft Ignite event
First seen on scworld.com Jump to article: www.scworld.com/brief/dell-unveils-new-ai-cybersecurity-tools-at-microsoft-ignite-event
-
The 10 Hottest Cybersecurity Startups Of 2024
CRN’s picks for the hottest cybersecurity startups of 2024 include companies offering tools for cloud and AI security, data security and security operations. First seen on crn.com Jump to article: www.crn.com/news/security/2024/the-10-hottest-cybersecurity-startups-of-2024
-
Microsoft’s Cloud Defender integrates SCA tool by Endor Labs
First seen on scworld.com Jump to article: www.scworld.com/brief/microsofts-cloud-defender-integrates-sca-tool-by-endor-labs
-
Chinese APT Hackers Using Multiple Tools And Vulnerabilities To Attack Telecom Orgs
Tags: apt, attack, backdoor, china, control, cyber, exploit, government, group, hacker, infrastructure, rat, tool, vulnerabilityEarth Estries, a Chinese APT group, has been actively targeting critical sectors like telecommunications and government entities since 2023. They employ advanced techniques, including exploiting vulnerabilities, lateral movement, and deploying multiple backdoors like GHOSTSPIDER, SNAPPYBEE, and MASOL RAT, which have impacted Southeast Asia significantly. The group makes use of a sophisticated command and control infrastructure…