litebox

LiteBox एक सुरक्षा-केंद्रित लाइब्रेरी OS !NOTE यह परियोजना वर्तमान में सक्रिय रूप से विकसित और सुधार रही है। हालांकि हम एक स्थिर रिलीज़ की दिशा में काम कर रहे हैं, कुछ API और इंटरफ़ेस बदल सकते हैं क्योंकि डिज़ाइन परिपक्व होता रहता है। आप अन्वेषण और प्रयोग करने के लिए स्वागत हैं, लेकिन यदि आपको...

grapheneX

grapheneX En informatique, le durcissement hardening est généralement le processus de sécurisation d’un système en réduisant sa surface de vulnérabilité, qui est d’autant plus grande que le système exécute davantage de fonctions ; en principe, un système mono‑fonction est plus sûr qu’un système...

OWASP-Subtractive-Hardening-Top-10

OWASP Subtractive Security Top 10 Project Overview The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths. Unlike traditional security guidance that focuses...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

mininode

मिनीनोड Mininode एक CLI टूल है जो सोर्स कोड के स्थैतिक विश्लेषण का उपयोग करके Node.js अनुप्रयोगों के आक्रमण सतह को कम करता है। यह कमी के दो तरीकों का समर्थन करता है 1 मोटा coarse, 2 बारीक fine। Mininode मुख्य फ़ाइल से शुरू करके एप्लिकेशन की निर्भरता ग्राफ उपयोग किए गए मॉड्यूल और फ़ंक्शन बनाता है,...

metabadger

Metabadger AWS EC2 पर SSRF हमलों को रोकें, अधिक सुरक्षित Instance Metadata Service v2 IMDSv2 में स्वचालित अपग्रेड के माध्यम से। Metabadger उद्देश्य और कार्यक्षमता AWS Instance Metadata Service के अपने वर्तमान उपयोग का निदान और मूल्यांकन करें, साथ ही यह समझें कि सेवा कैसे काम करती है v1 के हमले के...

universal-android-debloater-next-generation

Universal Android Debloater Next Generation !warning إخلاء مسؤولية : استخدمه على مسؤوليتك الخاصة. لسنا مسؤولين عن أي شيء قد يحدث لأجهزتك. هذا فرع مستقل fork من مشروع UAD. يهدف هذا إلى تحسين الخصوصية والكفاءة الطاقة، السرعة، الذاكرة عن طريق إزالة تطبيقات النظام غير الضرورية وغير المعروفة. يمكن أن...

From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities

In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. References 4. Learn more Microsoft Defender Experts identified an active cryptojacking campaign in which malicious download sites are surfaced not only through traditional search engine poisoning, but also through A...

[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR

Every day, security teams face the same problem—too many risks, too many alerts, and not enough time. You fix one issue, and three more show up. It feels like you're always one step behind. But what if there was a smarter way to stay ahead—without adding more work or stress? Join The Hacker News...

CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers

The U.S. Cybersecurity and Infrastructure Security Agency CISA and National Security Agency NSA, along with international partners from Australia and Canada, have released guidance to harden on-premise Microsoft Exchange Server instances from potential exploitation. "By restricting administrative...

EUVD-2023-41988

Malicious code in bioql PyPI...

Simple Steps for Attack Surface Reduction

Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In this piece, Yuriy Tsibere explores how default policies like deny-by-default, MFA enforcement, and application Ringfencin...

⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero-Click iPhone Attacks

Behind every security alert is a bigger story. Sometimes it’s a system being tested. Sometimes it’s trust being lost in quiet ways—through delays, odd behavior, or subtle gaps in control. This week, we’re looking beyond the surface to spot what really matters. Whether it’s poor design, hidden...

CVE-2021-32756

ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful exploitation will allow an attacker to...

Do Not Use auditctl to Set auditd Rules

auditd service rules can be configured using either rule files in the /etc/audit/rules.d/ directory applied after server restart or the auditctl command for immediate effect. The permission of the /etc/audit/rules.d/ directory is 750, while that of the auditctl command is 755. Therefore,...

Security Updates for Windows Defender (September 2023)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23080.2005. It is, therefore, affected by an attack surface reduction vulnerability due to security features bypass. A remote attacker can trick a victim to open a specially...

CVE-2023-38163

Windows Defender Attack Surface Reduction Security Feature Bypass...

CVE-2023-38163

Windows Defender Attack Surface Reduction Security Feature Bypass...

CVE-2023-38163 Windows Defender Attack Surface Reduction Security Feature Bypass

...

Windows Defender Attack Surface Reduction Security Feature Bypass

...