New USBCulprit Espionage Tool Steals Data From Air-Gapped Computers

A Chinese threat actor has developed new capabilities to target air-gapped systems in an attempt to exfiltrate sensitive data for espionage, according to a newly published research by Kaspersky yesterday. The APT, known as Cycldek, Goblin Panda, or Conimes, employs an extensive toolset for latera...

Defense Takeaways from Three Adversary Playbooks

In these days of advanced threats, the perimeter defense strategy – though still useful and necessary – is incomplete. IT security teams need as much information about existing threats as possible, so they know what to look for and how to position proactive countermeasures. Creating and using...

Goblin News - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Goblin News published at the 'play' market has multiple vulnerabilities...

Goblin Defenders 2 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Goblin Defenders 2 published at the 'play' market has multiple vulnerabilities...

Streaming Audio Player 0.9 (skin) Local Stack Overflow PoC (SEH)

Exploit for unknown platform in category dos / poc ================================================================ Streaming Audio Player 0.9 skin Local Stack Overflow PoC SEH ================================================================ Streaming Audio Player 0.9 txt Local Stack Overflow PoC...