88 matches found
November 8, 2022—KB5020019 (Monthly Rollup)
None None...
November 8, 2022—KB5020005 (Security-only update)
None None...
Evilgophish - Evilginx2 + Gophish
Combination of evilginx2 and GoPhish. Credits Before I begin, I would like to say that I am in no way bashing Kuba Gretzky and his work. I thank him personally for releasing evilginx2 to the public. In fact, without his work this work would not exist. I must also thank Jordan Wright for...
LV Ransomware Exploited ProxyShell to target Jordan
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary LV ransomware as a service has been active since late 2020 The most recent infiltration entailed the compromise of the corporate environment of a Jordan based entity, leveraging the double extortion...
[SECURITY] [DLA 3161-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-3161-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 26, 2022 https://wiki.debian.org/LTS -...
LV Ransomware Exploits ProxyShell in Attack on a Jordan-based Company
Our blog entry provides a look at an attack involving the LV ransomware on a Jordan-based company from an intrusion analysis standpoint...
October 18, 2022—KB5020440 (OS Build 10240.19509) Out-of-band
None None...
October 17, 2022—KB5020436 (OS Build 20348.1131) Out-of-band
None None...
October 11, 2022—KB5018419 (OS Build 17763.3532) - EXPIRED
None None...
October 11, 2022—KB5018421 (OS Build 20348.1129)
None None...
October 11, 2022—KB5018474 (Monthly Rollup)
None None...
October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED
None None...
October 11, 2022—KB5018457 (Monthly Rollup)
None None...
jordan-makler.de Cross Site Scripting vulnerability OBB-2690632
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
InnoSetup 代码问题漏洞
InnoSetup is a free installer for Windows programs provided by Jordan Russell and Martijn Laan of jrsoftware. A security vulnerability exists in InnoSetup that originates from an uncontrolled search path in the application's installer...
Weekly Threat Digest: 9-15 May 2022
For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 650 3 1 14 10 13 The second week of May 2022 witnessed the discovery of 650 vulnerabilities out of which 3 gained...
APT34 targets Jordan Government using new Saitama backdoor
On April 26th, we identified a suspicious email that targeted a government official from Jordans foreign ministry. The email contained a malicious Excel document that drops a new backdoor named Saitama. Following our investigation, we were able to attribute this attack to the known Iranian Actor...
February 8, 2022—KB5010359 (OS Build 14393.4946) - EXPIRED
None None...