Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics

Gcore Radar is a quarterly report prepared by Gcore that provides insights into the current state of the DDoS protection market and cybersecurity trends. This report offers you an understanding of the evolving threat landscape and highlights the measures required to protect against attacks...

Bejtlich Skills and Interest Radar from July 2005

This is unusual. I found this "skills and interest radar" diagram I created in July 2005. It looks like my attempt to capture and prioritize technical interests. At the time I was about to start consulting on my own, IIRC. Copyright 2003-2020 Richard Bejtlich and TaoSecurity...

Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1006 Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What SOCs Need to Know About Water Dybbuk, A BEC Actor Using Open-Source Toolkits

We analyze a BEC campaign targeting large companies around the world that was leveraging open-source tools to stay under the radar...

Microsoft fixes driver blocklist placing users at risk from BYOVD attacks

There may be an all-new acronym for you to try and remember, as a result of Microsoft fixing a lingering issue. This issue is called Bring Your Own Vulnerable Driver BYOVD, and BYOVD has been popping up in various forms for the last few months. These attacks may have been less impactful if a...

Malicious code in tracker-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c53ce9c5aa038b64c2d5946bfb1750ad383a7642db3b922bb03aee63e8f307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6621 Malicious code in tracker-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c53ce9c5aa038b64c2d5946bfb1750ad383a7642db3b922bb03aee63e8f307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tracker-radar-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6622 Malicious code in tracker-radar-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3049 Malicious code in firebase-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcbd61fff9e54ea05b865ebe0b71ea002f1c613bdb99d9a78557dab8fa94691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firebase-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcbd61fff9e54ea05b865ebe0b71ea002f1c613bdb99d9a78557dab8fa94691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x-road-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81945cd23cfc6cea9cafc4f34272c267be424f5c5c28100a9d40e2f098cad58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7259 Malicious code in x-road-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81945cd23cfc6cea9cafc4f34272c267be424f5c5c28100a9d40e2f098cad58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

gamesradar.com Cross Site Scripting vulnerability OBB-2639507

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Using Radar to Read Body Language

Yet another method of surveillance: Radar can detect you moving closer to a computer and entering its personal space. This might mean the computer can then choose to perform certain actions, like booting up the screen without requiring you to press a button. This kind of interaction already exist...

CVE-2021-37412

The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar...

CVE-2021-37412

The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar...

PT-2021-21638 · Atlassian · Confluence

Name of the Vulnerable Software and Affected Versions: TechRadar app version 1.1 for Confluence Server Description: The issue allows for XSS via the Title field of a Radar. This means an attacker could inject malicious scripts into the Title field, potentially leading to the execution of...

TechRadar app 跨站脚本漏洞

TechRadar app is a mobile software app. for displaying tech news, reviews and videos. The TechRadar app has a security vulnerability that stems from the application used for the Confluence server allowing XSS through the title field of the radar...