drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

DumpsterFire

DumpsterFire 툴셋 DumpsterFire 툴셋 - "상자 속의 보안 사고!" 2020/05/27 업데이트: 2020년 여름 동안 모든 Github 프로젝트를 Python3로 마이그레이션할 예정입니다. DumpsterFire 툴셋은 모듈식, 메뉴 기반, 플랫폼 간 도구로, 반복 가능하고 시간 지연이 있는 분산 보안 이벤트를 구축할 수 있습니다. 블루팀 훈련 및 센서/알림 매핑을 위한 사용자 정의 이벤트 체인을 쉽게 생성할 수 있습니다. 레드팀은 작업을 지원하고 확장하기 위해 가짜 사고, 방해 공작 및 유인책을 만들 수...

Crescendo

목차 1. 시작하기 2. 요구 사항 3. 구성 요소 4. 테스트 및 개발 5. 서명 6. 빌드 7. 이슈/버그/기능 8. 문제 해결 9. 할 일 시작하기 Apple은 Crescendo를 실행하기 위해 활성화해야 하는 몇 가지 새로운 보안 메커니즘을 도입했습니다. 1. 앱을 /Applications 디렉토리로 이동했는지 확인하세요. 그렇지 않으면 시스템 확장 프로그램이 로드되지 않습니다. 2. 처음 실행 시 "시작" 버튼을 클릭한 후 시스템 확장 프로그램 승인을 요청하는 메시지가 표시됩니다. 참고: 시스템 환경설정에서 허용 버튼...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

audit-kernel

리눅스 커널 감사 하위 시스템 https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel Linux Audit 하위 시스템은 보안 관련 이벤트를 캡처하고 기록하는 데 사용되는 안전한 로깅 프레임워크를 제공합니다. 이 하위 시스템은 시스템 활동을 기반으로 감사 레코드를 생성하는 커널 구성 요소, 이러한 레코드를 로컬 파일 또는 원격 집계 서버에 기록하는 사용자 공간 데몬, 그리고 감사 로그 검...

org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...

GHSA-G72G-R7M4-9X4G NocoDB: OAuth Tokens Persist Through Security Events

Summary OAuth access and refresh tokens were not revoked when the user changed, reset, or recovered their password, leaving an attacker-issued OAuth grant valid after the user believed they had locked the attacker out. Details revokeAllOAuthTokensByUser in the users service was an empty stub bein...

CVE-2026-26366

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116077365893464051 2026-02-16 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mewqmppu3d2s 2026-02-16 22:57:18+00:00| seen|...

CVE-1999-0575

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

UBUNTU-CVE-2025-40238

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When we do mlx5edetachnetdev we eventually disable blocking events notifier, among those events are IPsec MPV events from IB to core. So before disabling those blocking events, make sur...

EventHunter: Dynamic Clustering and Ranking of Security Events from Hacker Forum Discussions

Hacker forums provide critical early warning signals for emerging cybersecurity threats, but extracting actionable intelligence from their unstructured and noisy content remains a significant challenge. This paper presents an unsupervised framework that automatically detects, clusters, and...

CVE-2025-2171

creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19213 2025-06-23 15:31:00+00:00| published-proof-of-concept| Telegram/S7RPzkaVu9rMwdZrCAlLyJw5bBMvrbhCFuoMTi2UNDrM6ko 2025-06-24 07:20:07+00:00| seen|...

CVE-2025-5262

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17631 2025-05-27 14:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq5tzngqwq2s 2025-05-28 16:03:10+00:00| seen|...

A Collaborative Intrusion Detection System Using Snort IDS Nodes

Intrusion Detection Systems IDSs are integral to safeguarding networks by detecting and responding to threats from malicious traffic or compromised devices. However, standalone IDS deployments often fall short when addressing the increasing complexity and scale of modern cyberattacks. This paper...

CVE-2025-36625

creationtimestamp| type| source ---|---|--- 2025-04-18 19:56:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360724984751686 2025-04-18 19:59:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12534 2025-04-18 20:33:46+00:00| seen|...

CVE-2025-3106

creationtimestamp| type| source ---|---|--- 2025-04-18 09:58:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12412 2025-04-18 11:16:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ilsuwtjj2 2025-04-18 16:34:34+00:00| seen|...

CVE-2025-32445

creationtimestamp| type| source ---|---|--- 2025-04-13 19:24:37+00:00| published-proof-of-concept| https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq 2025-04-15 20:06:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114343777087123748 2025-04-15...

CVE-2025-2619

creationtimestamp| type| source ---|---|--- 2025-03-22 14:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114206633004296817 2025-03-22 15:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lky2s4glxd2n 2025-03-22 16:00:37+00:00| seen|...

RHSA-2023:7857

creationtimestamp| type| source ---|---|--- 2025-03-15 03:48:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7651 2025-04-03 03:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10160...

CVE-2025-29891

creationtimestamp| type| source ---|---|--- 2025-03-12 15:58:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150283427551221 2025-03-12 16:03:09+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/114150301427230872 2025-03-12 16:07:40+00:00| seen|...