Talkback

AI Powered Infosec Resource Aggregator to Boost Productivity.

Developed by elttam

Trending Resources See all

Azure Key Vault Tradecraft with BARK cloud

BARK supports adversarial tradecraft research for Azure Key Vault, offering functions for authentication, enumeration, persistence, collection/credential access, and encryption/decryption, with capabilities for requesting tokens for Azure REST API and Azure Key Vault REST API, enumerating key vaults, manipulating permissions, collecting key vault secret values, and encrypting/decrypting data, demonstrated through a red team operator walkthrough for assessment purposes.

Wed 20 Nov posts.specterops.io

Leveling Up Fuzzing: Finding more vulnerabilities with AI app

Google's OSS-Fuzz project uses AI-generated fuzz targets to automate vulnerability finding, reporting 26 new vulnerabilities, including a critical one in OpenSSL, and aims to enhance automation and integration of AI-powered vulnerability discovery.

Wed 20 Nov security.googleblog.com

Five Local Privilege Escalation Vulnerabilities found in Ubuntu’s Default Utility - needrestart : More : LPEs in needrestart (CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003) : app exp sys

Qualys Security Advisory reveals Local Privilege Escalations in needrestart on Ubuntu Server, allowing attackers to execute code as root through interpreter vulnerabilities.

Wed 20 Nov qualys.com

Making a Powershell Shellcode Downloader that Evades Defender (Without Amsi Bypass) exp mal

Demonstrates evasion of Windows Defender by modifying a PowerShell shellcode runner to download and run shellcode while obfuscating the code.

Tue 19 Nov luisgerardomoret_69654.medium.com

Zero Day Initiative — Looking at the Internals of the Kenwood DMX958XR IVI ics

The Pwn2Own Automotive contest will target the Kenwood DMX958XR IVI head unit, featuring Android Auto, Apple CarPlay, USB media playback, and wireless mirroring, with internal components including a video processing IC, PMIC, NAND flash, DDR3 SDRAMs, SoC, radio module, eMMC, and more, offering a hidden debugging interface for vulnerability research ahead of the contest.

Tue 19 Nov zerodayinitiative.com

Extracting Plaintext Credentials from Palo Alto Global Protect app net

Plaintext credentials stored in memory by PanGPA during a Red Team engagement were extracted, revealing a significant security flaw and emphasizing the risks of data security and lateral movement within the network.

Tue 19 Nov shells.systems

Trending Vulnerabilities See all

CVE-2024-23967 8.0

Received

Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharge…

Sat 28 Sep

CVE-2024-23959 8.0

Received

Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger A…

Sat 28 Sep

CVE-2024-23958 6.5

Received

Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Business C50 charg…

Sat 28 Sep

CVE-2024-23938 8.8

Received

Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not…

Sat 28 Sep

CVE-2022-30688 7.8

Analyzed

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are us…

Tue 17 May

CVE-2019-1040 5.9

Analyzed

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.

Wed 12 Jun

Virtualization

Helldown Ransomware: an overview of this emerging threat
CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux
GitHub - m4rco-/dorothy2: A malware/botnet analysis framework written in Ruby.
...

Thu 21 Nov

Firewalls Zyxel

Security

Helldown Ransomware: an overview of this emerging threat
CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux
Linux Variant of Helldown Ransomware Targets VMware
...

Thu 21 Nov

Ransomware Helldown

Malware

Helldown Ransomware: an overview of this emerging threat
Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground? | SANS Institute
Akira Ransomware Drops 30 Victims on Leak Site in One Day
...