DigeeX @digeex@noc.social

Raider: A tool to test authentication in web applications | The Daily Swig: https://portswigger.net/daily-swig/raider-a-tool-to-test-authentication-in-web-applications

Roaming Mantis hits Android and iOS users in malware, phishing attacks: https://www.bleepingcomputer.com/news/security/roaming-mantis-hits-android-and-ios-users-in-malware-phishing-attacks/

Corrupting memory without memory corruption | The GitHub Blog: https://github.blog/2022-07-27-corrupting-memory-without-memory-corruption/

Researching Open Source apps for XSS to RCE flaws – PT SWARM: https://swarm.ptsecurity.com/researching-open-source-apps-for-xss-to-rce-flaws/

LibreOffice addresses security issues with macros, passwords: https://www.bleepingcomputer.com/news/security/libreoffice-addresses-security-issues-with-macros-passwords/

Microsoft SQL servers hacked to steal bandwidth for proxy services: https://www.bleepingcomputer.com/news/security/microsoft-sql-servers-hacked-to-steal-bandwidth-for-proxy-services/

Breach Exposes Users of Microleaves Proxy Service – Krebs on Security: https://krebsonsecurity.com/2022/07/breach-exposes-users-of-microleaves-proxy-service/

CVE-2022-31813: Forwarding addresses is hard : https://www.synacktiv.com/en/publications/cve-2022-31813-forwarding-addresses-is-hard.html

LockBit claims ransomware attack on Italian tax agency: https://www.bleepingcomputer.com/news/security/lockbit-claims-ransomware-attack-on-italian-tax-agency/

Malicious IIS extensions quietly open persistent backdoors into servers - Microsoft Security Blog: https://www.microsoft.com/security/blog/2022/07/26/malicious-iis-extensions-quietly-open-persistent-backdoors-into-servers/

Denmark bans Gmail and Co from schools due to privacy concerns.: https://tutanota.com/blog/posts/denmark-bans-google-email-and-cloud-services-due-to-privacy-concerns/

A Retrospective on the 2015 Ashley Madison Breach – Krebs on Security: https://krebsonsecurity.com/2022/07/a-retrospective-on-the-2015-ashley-madison-breach/

QBot phishing uses Windows Calculator sideloading to infect devices: https://www.bleepingcomputer.com/news/security/qbot-phishing-uses-windows-calculator-sideloading-to-infect-devices/

Cisco patches dangerous bug trio in Nexus Dashboard | The Daily Swig: https://portswigger.net/daily-swig/cisco-patches-dangerous-bug-trio-in-nexus-dashboard

Source code for Rust-based info-stealer released on hacker forums: https://www.bleepingcomputer.com/news/security/source-code-for-rust-based-info-stealer-released-on-hacker-forums/

Zero Day Initiative — Is exploiting a null pointer deref for LPE just a pipe dream?: https://www.zerodayinitiative.com/blog/2022/6/1/is-exploiting-a-null-pointer-deref-for-lpe-just-a-pipe-dream

CosmicStrand UEFI malware found in Gigabyte, ASUS motherboards: https://www.bleepingcomputer.com/news/security/cosmicstrand-uefi-malware-found-in-gigabyte-asus-motherboards/

Chrome use subject to restrictions in Dutch schools over data security concerns: https://www.bleepingcomputer.com/news/security/chrome-use-subject-to-restrictions-in-dutch-schools-over-data-security-concerns/

North Korean hackers attack EU targets with Konni RAT malware: https://www.bleepingcomputer.com/news/security/north-korean-hackers-attack-eu-targets-with-konni-rat-malware/

Vodafone & Deutsche Telekom to introduce persistent user tracking: https://blog.simpleanalytics.com/vodafone-deutsche-telekom-to-introduce-persistent-user-tracking

Why are McDonald’s Self Service Kiosks so hackable?: https://ghuntley.com/mcdonalds/