How Police Abuse Phone Data to Persecute LGBTQ People

In many parts of the world, law enforcement uses WhatsApp chats, text messages, and photos from confiscated phones as "evidence" against persecuted groups...

ModifiedElephant APT hackers plant incriminating evidence on victims devices

By Waqas ModifiedElephant APT group has been carrying out its malicious activities since 2012 and successfully evading detection for over… This is a post from HackRead.com Read the original post: ModifiedElephant APT hackers plant incriminating evidence on victims devices...

Hackers Planted Fake Digital Evidence on Devices of Indian Activists and Lawyers

A previously unknown hacking group has been linked to targeted attacks against human rights activists, human rights defenders, academics, and lawyers across India in an attempt to plant "incriminating digital evidence." Cybersecurity firm SentinelOne attributed the intrusions to a group it tracks...

GHSA-F3W5-V9XX-RP8P Signature verification failure in Tendermint

The root cause of this security vulnerability is in the Tendermint specification, and this advisory is a duplicate of https://github.com/tendermint/spec/security/advisories/GHSA-jqfc-687g-59pw. Impact Tendermint light clients running versions 0.34.0 to 0.34.8 are unable to detect and punish a new...

CVE-2021-40449

creationtimestamp| type| source ---|---|--- 2021-10-13 09:10:32+00:00| published-proof-of-concept| https://t.me/orderofsixangles/1628 2021-10-13 11:01:48+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus32/2021 2021-10-13 11:26:25+00:00| seen| https://t.me/reversedungeon/919...

LinuxCatScale - Incident Response Collection And Processing Scripts With Automated Reporting Scripts

Linux CatScale is a bash script that uses live of the land tools to collect extensive data from Linux based hosts. The data aims to help DFIR professionals triage and scope incidents. An Elk Stack instance also is configured to consume the output and assist the analysis process. Usage This script...

Amnesty Intl. accuses Indian cyber security firm of spyware attacks

By Waqas According to Amnesty International, it found evidence that attackers testing the spyware were using the IP address of Indian cyber security firm Innefu Labs. This is a post from HackRead.com Read the original post: Amnesty Intl. accuses Indian cyber security firm of spyware attacks...

[Security Nation] Rob Graham on Mike Lindell's Cyber Symposium

!\Security Nation\ Rob Graham on Mike Lindell's Cyber Symposiumhttps://blog.rapid7.com/content/images/2021/09/securitynationlogo-1.jpg In this episode of Security Nation, Jen and Tod chat with Rob Graham of Errata Security about his experience attending pillow magnate Mike Lindell's Cyber...

A guide to combatting human-operated ransomware: Part 1

This blog is part one of a two-part series focused on how Microsoft DART helps customers with human-operated ransomware. For more guidance on human-operated ransomware and how to defend against these extortion-based attacks, refer to our human-operated ransomware docs page. Microsoft’s Detection...

What to do when your business has been hacked

You might be here because the unthinkable has happened so let’s get straight into this, step by step: Immediate containment. Inform stakeholders. Inform law enforcement. Implement your disaster recovery plan. Analyze and future proof. Early warning signs may be unusual user-account behavior, slow...

CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics

A PowerShell script to collect memory and triage disk forensics for incident response investigations. The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection. Permission...

Risks of Evidentiary Software

Over at Lawfare, Susan Landau has an excellent essay on the risks posed by software used to collect evidence a Breathalyzer is probably the most obvious example. Bugs and vulnerabilities can lead to inaccurate evidence, but the proprietary nature of software makes it hard for defendants to examin...

Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform has information leakage vulnerability

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform there is an information leakage...

Unauthorized Access Vulnerability in Electronic Evidence Management Platform of Shenzhen Police Wing Intelligent Technology Co.

hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...

CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...

Police Wing Law Enforcement Recorder Electronic Evidence Management Software has Information Leakage Vulnerability

hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...

Security Vulnerabilities in Cellebrite

Moxie Marlinspike has an intriguing blog post about Cellebrite, a tool used by police and others to break into smartphones. Moxie got his hands on one of the devices, which seems to be a pair of Windows software packages and a whole lot of connecting cables. According to Moxie, the software is...

IcedID Circulates Via Web Forms, Google URLs

Website contact forms and Google URLs are being used to spread the IcedID trojan, according to researchers at Microsoft. Attackers are using “contact us” forms on websites to send emails targeting organizations with trumped-up legal threats, researchers said. The messages consistently mention a...

Denial of service vulnerability in c-aff4

c-aff4 is an open source format for storing digital evidence and data. A denial of service vulnerability exists in c-aff4. An attacker could exploit the vulnerability to cause a software crash...

ProtonVPN CEO Blasts Apple for 'Aiding Tyrants’ in Myanmar

In a blog post filled with a passionate defense of human rights and internet privacy, Andy Yen, the CEO of secure internet provider ProtonVPN, blasted Apple for blocking its latest update and accused the tech juggernaut of helping the global spread of authoritarianism by “giving in to tyrants.” Y...