RUBYCARP: A Detailed Analysis of a Sophisticated Decade-Old Botnet Group

Cyber Monday Scams: Unmasking the Shadows of Online Shopping

https://securityonline.info/cyber-monday-scams-unmasking-the-shadows-of-online-shopping/

The fascinating security model of dark web marketplaces

https://www.reddit.com/r/netsec/comments/1h47up9/the_fascinating_security_model_of_dark_web/

iPhones now auto-restart to block access to encrypted data after long idle times

https://www.bleepingcomputer.com/news/security/iphones-now-auto-restart-to-block-access-to-encrypted-data-after-long-idle-times/

Halliburton reports $35 million loss after ransomware attack

https://www.bleepingcomputer.com/news/security/halliburton-reports-35-million-loss-after-ransomware-attack/

Microsoft blames Windows Server 2025 automatic upgrades on 3rd-party tools

https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-windows-server-2025-automatic-upgrades-on-third-party-tools/

CVE-2024-48651: ProFTPD Vulnerability Grants Root Access to Attackers

https://securityonline.info/cve-2024-48651-proftpd-vulnerability-grants-root-access-to-attackers/

Zero-Day Exploit Code Released for Windows Task Scheduler Flaw (CVE-2024-49039), Actively Exploited by RomCom Group

https://securityonline.info/zero-day-exploit-code-released-for-windows-task-scheduler-flaw-cve-2024-49039-actively-exploited-by-romcom-group/

Critical Vulnerabilities in mySCADA myPRO Software Pose Significant Risk to Industrial Control Systems

https://securityonline.info/critical-vulnerabilities-in-myscada-mypro-software-pose-significant-risk-to-industrial-control-systems/

CVE-2024-52338: Critical Security Flaw in Apache Arrow R Package Allows Arbitrary Code Execution

https://securityonline.info/cve-2024-52338-critical-security-flaw-in-apache-arrow-r-package-allows-arbitrary-code-execution/

CVE-2024-11667: Critical Vulnerability in Zyxel Firewalls Actively Exploited

https://securityonline.info/cve-2024-11667-critical-vulnerability-in-zyxel-firewalls-actively-exploited/

Brainstorm Tool Release: Optimizing Web Fuzzing With Local LLMs

https://www.reddit.com/r/netsec/comments/1h090sb/brainstorm_tool_release_optimizing_web_fuzzing/

New NachoVPN attack uses rogue VPN servers to install malicious updates

https://www.bleepingcomputer.com/news/security/new-nachovpn-attack-uses-rogue-vpn-servers-to-install-malicious-updates/

Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests

http://www.kitploit.com/2024/09/mass-assigner-simple-tool-made-to-probe.html

File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add

http://www.kitploit.com/2024/09/file-unpumper-tool-that-can-be-used-to.html

Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking

http://www.kitploit.com/2024/09/damn-vulnerable-drone-intentionally.html

Trying to Exploit My Old Android Device, take 1

https://www.reddit.com/r/netsec/comments/1h2a0kx/trying_to_exploit_my_old_android_device_take_1/

Introduction to Fuzzing Android Native Components

https://www.reddit.com/r/netsec/comments/1h262yg/introduction_to_fuzzing_android_native_components/

New TryHackMe Room: AI Security Fundamentals – Learn AI Security and Pentesting

https://www.reddit.com/r/netsec/comments/1h2sj8v/new_tryhackme_room_ai_security_fundamentals_learn/

Everyday Ghidra: Ghidra Data Types — Creating Custom GDTs From Windows Headers — Part 2

https://www.reddit.com/r/netsec/comments/1h18g21/everyday_ghidra_ghidra_data_types_creating_custom/

New free, open, online, practical security class from Czech Technical University.

https://www.reddit.com/r/netsec/comments/1fkvjws/new_free_open_online_practical_security_class/

Vulnerability Researcher - TS

Company: CrowdCyber

Location: Chantilly, VA

Systems Engineer 3 - Cisco - TS/SCI/CI-Poly

Company: CrowdCyber

Location: Annapolis Junction, MD

TEMPEST Engineer - TS/SCI/CI-Poly

Company: CrowdCyber

Location: Annapolis Junction, MD

Windows Cyber Software Engineer - TS

Company: CrowdCyber

Location: Chantilly, VA

CyberSecurity Engineer - TS/SCI

Company: CrowdCyber

Location: Annapolis Junction, MD

Windows Reverse Engineer - Top Secret - Full Scope

Email Us to talk about our Candidates!

Linux Cyber Software Engineer - Top Secret - Full Scope

Email Us to talk about our Candidates!

Apple iOS Cyber Software Engineer - Top Secret SCI

Email Us to talk about our Candidates!

Mobile Android Cyber Software Engineer - Top Secret - Poly

Email Us to talk about our Candidates!

Windows Vulnerability Researcher - Top Secret - Full Scope Poly

Email Us to talk about our Candidates!

Google now pays $250,000 for KVM zero-day vulnerabilities

https://www.bleepingcomputer.com/news/security/google-now-pays-250-000-for-kvm-zero-day-vulnerabilities/

Bug Bounty: An Economic Disadvantage for Researchers?

https://www.digitaloperatives.com/2023/07/29/bug-bounty-an-economic-disadvantage-for-researchers/

Google Pixel Titan M with Persistence - Zero click Up to $1,000,000

https://bughunters.google.com/about/rules/6171833274204160/android-and-google-devices-security-reward-program-rules

Facebook Full Mobile Remote Code Execution exploit is $300,000

https://www.facebook.com/whitehat/payout_guidelines/mobile_rce

When Can A Quantum Computer Steal Your Money? When There Is A Data Point At 256 On The Graph Below

https://proof-of-quantum.com/

Dissecting JA4H for improved Sliver C2 detections

https://www.reddit.com/r/netsec/comments/1h2i411/dissecting_ja4h_for_improved_sliver_c2_detections/

New PE Vulnerability in Windows OS!

https://www.reddit.com/r/netsec/comments/1h112rz/new_pe_vulnerability_in_windows_os/

Analyzing APT36’s ElizaRAT: Evolution of Espionage Techniques

https://www.reddit.com/r/netsec/comments/1h1rtvt/analyzing_apt36s_elizarat_evolution_of_espionage/

Security Analysis of the MERGE Voting Protocol

https://www.schneier.com/blog/archives/2024/11/security-analysis-of-the-merge-voting-protocol.html

A Journey From `sudo iptables` To Local Privilege Escalation - Shielder

https://www.reddit.com/r/netsec/comments/1flca3w/a_journey_from_sudo_iptables_to_local_privilege/

Operation Triangulation: What You Get When Attack iPhones of Researchers

https://media.ccc.de/v/37c3-11859-operation_triangulation_what_you_get_when_attack_iphones_of_researchers

Our Polymorphic Reverse Shell Generator beat EVERY AV!

https://m.youtube.com/watch?v=9kAq-OO72Uk

How Hackers Hide From Memory Scanners

https://youtu.be/WYuhJzngfVc?si=KYvedCuIOsItE7sc

How Hackers Exploit Vulnerable Drivers

https://youtu.be/ELVdDwvELKY?feature=shared

DEF CON 31 - Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare - STÖK

https://m.youtube.com/watch?v=3T2Al3jdY38&feature=youtu.be

FX of Phenoelit - @41414141

https://twitter.com/41414141

vx-underground - @vx-underground

https://twitter.com/vx-underground

BTCillustrated - @BTCillustrated

https://www.twitter.com/btcillustrated

Halvar Flake - @halvarflake

https://twitter.com/halvarflake

Dave Aitel - @daveaitel

https://twitter.com/daveaitel

Fabric is an open-source framework for augmenting humans using AI.

https://github.com/danielmiessler/fabric

OpenAI Is Not Training on Your Dropbox Documents—Today

https://www.schneier.com/blog/archives/2023/12/openai-is-not-training-on-your-dropbox-documents-today.html

AI-Powered Fuzzing: Breaking the Bug Hunting Barrier

https://security.googleblog.com/2023/08/ai-powered-fuzzing-breaking-bug-hunting.html?m=1

Self-Operating Computer Framework: framework to enable multimodal models to operate a computer

https://github.com/OthersideAI/self-operating-computer

Threat Intel Bot - specialized GPT for the latest APT threat intelligence.

https://chat.openai.com/g/g-Vy4rIqiCF-threat-intel-bot

Cisco Confirms Active Exploitation of Decade-Old WebVPN Vulnerability in ASA Software

https://securityonline.info/cisco-confirms-active-exploitation-of-decade-old-webvpn-vulnerability-in-asa-software/

Zero-Day Attack Alert: Corrupted Files Weaponized in New Attacks

https://securityonline.info/zero-day-attack-alert-corrupted-files-weaponized-in-new-attacks/

Mystery google.com certificate issued by Brazilian CA

https://www.reddit.com/r/netsec/comments/1h4h1iy/mystery_googlecom_certificate_issued_by_brazilian/

Malicious npm Packages Threaten Crypto Developers: Keylogging and Wallet Theft Revealed

https://securityonline.info/malicious-npm-packages-threaten-crypto-developers-keylogging-and-wallet-theft-revealed/

Beyond FUD Links: Rockstar PaaS Kit Exploits Trusted Platforms for Phishing

https://securityonline.info/beyond-fud-links-rockstar-paas-kit-exploits-trusted-platforms-for-phishing/

Cencora’s $75 Million Ransom: A New High in Cyber Extortion

https://securityonline.info/cencoras-75-million-ransom-a-new-high-in-cyber-extortion/

FBI warns against using unlicensed crypto transfer services

https://www.bleepingcomputer.com/news/security/fbi-warns-against-using-unlicensed-crypto-transfer-services/

iOS v17.4 Beta 2 Nerfs (Some) Progressive Web Apps for EU Users

https://www.nobsbitcoin.com/ios-v17-4-beta2-undermines-progressive-web-apps-pwas-for-eu-users/

CoinCenter: Broad, Ambiguous, or Delegated: Constitutional Infirmities of the Bank Secrecy Act

https://www.coincenter.org/broad-ambiguous-or-delegated-constitutional-infirmities-of-the-bank-secrecy-act/

The Invisible Cost Of War In The Age Of Quantitative Easing

https://bitcoinmagazine.com/culture/how-the-fed-hides-costs-of-war

Windows 11 is adding a 'Share' button to the Start menu and Taskbar

https://www.bleepingcomputer.com/news/microsoft/windows-11-is-adding-a-share-button-to-the-start-menu-and-taskbar/

Australia Threatens to Force Companies to Break Encryption

https://www.schneier.com/blog/archives/2024/09/australia-threatens-to-force-companies-to-break-encryption.html

Take a Selfie Using a NY Surveillance Camera

https://www.schneier.com/blog/archives/2024/08/take-a-selfie-using-a-ny-surveillance-camera.html

US Federal Court Rules Against Geofence Warrants

https://www.schneier.com/blog/archives/2024/08/us-federal-court-rules-against-geofence-warrants.html

The Present and Future of TV Surveillance

https://www.schneier.com/blog/archives/2024/08/the-present-and-future-of-tv-surveillance.html

Tor needs 200 new WebTunnel bridges to fight censorship

https://www.bleepingcomputer.com/news/security/tor-needs-200-new-webtunnel-bridges-to-fight-censorship/

EFF: The U.K. Government Is Very Close To Eroding Encryption Worldwide

https://www.eff.org/deeplinks/2023/07/uk-government-very-close-eroding-encryption-worldwide

Meta plans retention 'hooks' for Threads as more than half of users leave app

https://www.reuters.com/business/media-telecom/meta-plans-retention-hooks-threads-more-than-half-users-leave-app-2023-07-28/?taid=64c3b01ee6cfe30001c4540f&utm_campaign=trueAnthem:+Trending+Content&utm

Learn about NOSTR - Earn Zaps! ⚡️

https://nostr-resources.com/#get-started

As 'Threads' Continues To Face-Plant, House Judiciary Demands Answers Over Censorship

https://www.zerohedge.com/technology/threads-continues-face-plant-house-judiciary-demands-answers-over-censorship

Aircrack Cheat Sheet

https://raw.githubusercontent.com/Ignitetechnologies/Mindmap/main/aircrack/Aircrack-ng%20%20UHD.png

How a Load Balancer Works

https://pbs.twimg.com/media/F5-ByLvXkAASw3j?format=jpg&name=4096x4096

Process Injection

https://4.bp.blogspot.com/-ixv5E0LMZCw/WWi5yRjL-_I/AAAAAAAAAnk/WO99S4Yrd8w6lfg6tITwUV02CGDFYAORACLcBGAs/s1600/Process%2BInjection%25281%2529.png

Argument Map on Restricting Encryption

https://www.argumentenfabriek.nl/wp-content/uploads/2021/11/EN-Argumentenkaart-inperking-encryptie.pdf

OSCP Enumeration Cheat Sheet

https://pbs.twimg.com/media/F2HWy_LWgAI5hT1?format=jpg&name=4096x4096

Google Chrome's new post-quantum cryptography may break TLS connections

https://www.bleepingcomputer.com/news/security/google-chromes-new-post-quantum-cryptography-may-break-tls-connections/

Companies, countries battle to develop quantum computers | 60 Minutes

https://youtu.be/K4ssT6Dzmnw

An Efficient Quantum Factoring Algorithm

https://arxiv.org/abs/2308.06572

You Can’t Rush Post-Quantum-Computing Cryptography Standards

https://www.schneier.com/blog/archives/2023/08/you-cant-rush-post-quantum-computing-standards.html?utm_source=dlvr.it&utm_medium=twitter

Supercomputer makes calculations in blink of an eye that take rivals 47 years

https://www.telegraph.co.uk/business/2023/07/02/google-quantum-computer-breakthrough-instant-calculations/

The Human Rights Foundation Announces 20 Btc Bounty Challenge For Bitcoin Development

https://bitcoinmagazine.com/business/human-rights-foundation-announces-20-btc-bounty-challenge-for-bitcoin-development

Open-Sourcing the Design Guide: 2 BTC to port the Bitcoin UI Kit from Figma to an open-source Penpot project.

https://hrfbounties.org/

Serverless Payjoin: 2 BTC to deploy a production-ready version 2 payjoin protocol which may send and receive Payjoin transactions without requiring a sender or recipient to operate a public server.

https://hrfbounties.org/

E2EE Group Chats: 2 BTC for the creation of end to end encrypted group chats powered by any popular Nostr client that does not leak metadata

https://hrfbounties.org/

Silent payments: 2 BTC for a mobile wallet which can send and receive Silent Payments in a private manner without requiring the user to run a full node

https://hrfbounties.org/

SHA-1 gets SHAttered

https://evervault.com/blog/sha-1-gets-shattered

Dancing Offbit: The Story of a Single Character Typo that Broke a ChaCha-Based PRNG

https://research.nccgroup.com/2023/08/22/dancing-offbit-the-story-of-a-single-character-typo-that-broke-a-chacha-based-prng/

Building Intuition for Lattice-Based Signatures – Part 2: Fiat-Shamir with Aborts

https://research.nccgroup.com/2023/08/17/building-intuition-for-lattice-based-signatures-part-2-fiat-shamir-with-aborts/

Demystifying Multivariate Cryptography

https://research.nccgroup.com/2023/08/18/demystifying-multivariate-cryptography/

Vulnerability allows an attacker to extract a full private key from a wallet implementing Lindell17 2PC protocol, by extracting a single bit in every signature attempt (256 in total)

https://www.fireblocks.com/blog/lindell17-abort-vulnerability-technical-report/

US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’

https://www.securityweek.com/us-senator-wyden-accuses-microsoft-of-cybersecurity-negligence/

The 10 Humorous But Immutable Laws of Cloud Security

https://www.digitaloperatives.com/2023/07/18/the-10-humorous-but-immutable-laws-of-cloud-security/