Aggregator

Chinese Nation-State Hackers Used a Custom Utility to Capture Packets
Chinese hackers who infiltrated U.S. telecoms likely only used one, known Cisco vulnerability, says Cisco's threat analysis unit. Otherwise, the Chinese nation-state cyberespionage operation known as Salt Typhoon used stolen login credentials living-off-the-land techniques, says Cisco Talos.

Computing Giant Warns Against Future Decryption of Secure Communications
Google adopted quantum-safe digital signatures for its cloud environment designed to help users combat the next phase of adversarial attacks. The announcement from the company comes days after Microsoft unveiled its latest quantum chip. NIST formalized the algorithms in August 2024.

Ransomware Attack Taught Lessons on Health Sector Resiliency, Vendor Redundancy
It's been one year since hackers attacked IT services provider Change Healthcare, quickly shutting down critical processes for thousands of healthcare entities, triggering a data breach affecting 190 million people. So what top lessons are emerging from that massive disruption and data compromise?

Vendors Consolidate Endpoint, Managed Offerings to Combat Major Industry Players
Rising competition from CrowdStrike and Microsoft is driving MDR and EDR providers to consolidate. Companies such as Sophos and Arctic Wolf are acquiring endpoint or managed security technology to enhance detection and response capabilities, signaling a shift toward full-stack security solutions.

BugChecker BugChecker is a SoftICE-like kernel and user debugger for Windows 11 (and Windows XP as well: it supports Windows versions from XP to 11, both x86 and x64). BugChecker doesn’t require a second machine...

The post BugChecker: kernel and user debugger for Windows 11 appeared first on Penetration Testing Tools.

r4ven The tool hosts a fake website that uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location (latitude and longitude) of the target,...

The post r4ven: Track the IP address and GPS location of the user’s smartphone or PC and capture a picture of the target appeared first on Penetration Testing Tools.

A vulnerability classified as critical has been found in Craft CMS up to 4.13.7/5.5.4. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is traded as CVE-2025-23209. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Maldev Academy – RemoteTLSCallbackInjection This method utilizes TLS callbacks to execute a payload without spawning any threads in a remote process. This method is inspired by Threadless Injection as RemoteTLSCallbackInjection does not invoke any API calls...

The post RemoteTLSCallbackInjection: execute a payload without spawning any threads in a remote process appeared first on Penetration Testing Tools.

英伟达 CEO 黄仁勋首次公开回应 DeepSeek：投资者误解，AI 发展仍需强大算力；侯毅创立「派特鲜生」进军宠物食品行业，计划今年开百店。

Chinese Nation-State Hackers Used a Custom Utility to Capture Packets
Chinese hackers who infiltrated U.S. telecoms likely only used one, known Cisco vulnerability, says Cisco's threat analysis unit. Otherwise, the Chinese nation-state cyberespionage operation known as Salt Typhoon used stolen login credentials living-off-the-land techniques, says Cisco Talos.

Computing Giant Warns Against Future Decryption of Secure Communications
Google adopted quantum-safe digital signatures for its cloud environment designed to help users combat the next phase of adversarial attacks. The announcement from the company comes days after Microsoft unveiled its latest quantum chip. NIST formalized the algorithms in August 2024.

Ransomware Attack Taught Lessons on Health Sector Resiliency, Vendor Redundancy
It's been one year since hackers attacked IT services provider Change Healthcare, quickly shutting down critical processes for thousands of healthcare entities, triggering a data breach affecting 190 million people. So what top lessons are emerging from that massive disruption and data compromise?

Vendors Consolidate Endpoint, Managed Offerings to Combat Major Industry Players
Rising competition from CrowdStrike and Microsoft is driving MDR and EDR providers to consolidate. Companies such as Sophos and Arctic Wolf are acquiring endpoint or managing security technology to enhance detection and response capabilities, signaling a shift toward full-stack security solutions.

浏览器已从单纯的访问工具演变为数据安全的第一道防线，企业浏览器更是从“可选工具”进化为“数字基建的核心组件”。

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Currently trending CVE - Hype Score: 1 - Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Currently trending CVE - Hype Score: 1 - An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Name: SAIBORG | Elite Hacking Competition | Edition #2 | 21/Feb/2025 (an SAIBORG event.)
Date: Feb. 21, 2025, 2:30 p.m. — 21 Feb. 2025, 21:00 UTC  [add to calendar]
Format: Hack quest
On-site
Location: Italy, Rome
Offical URL: https://www.saiborg.io/
Rating weight: 0.00
Event organizers: Saiborg

点击查看更多本周网络安全大事件。

Ransomware Attack Update for 21st of February 2025