Teenage members of Lapsus$ ransomware gang convicted

A wave of video game developer compromises has come to a court-based conclusion for those responsible, with several convictions the end result. Arion Kurtaj, and a second teen who cannot be named due to their age, are finding themselves to be in quite a lot of trouble after repeated and sustained...

Two LAPSUS$ Hackers Convicted in London Court for High-Profile Tech Firm Hacks

Two U.K. teenagers have been convicted by a jury in London for being part of the notorious LAPSUS$ aka Slippy Spider transnational gang and for orchestrating a series of brazen, high-profile hacks against major tech firms and demanding a ransom in exchange for not leaking the stolen information...

Navigating Legacy Infrastructure: A CISO's Actionable Strategy for Success

Every company has some level of tech debt. Unless you're a brand new start-up, you most likely have a patchwork of solutions that have been implemented throughout the years, often under various leadership teams with different priorities and goals. As those technologies age, they can leave your...

FAST TECH CMS 1.0 Cross Site Request Forgery

==================================================================================================================================== | Title : FAST TECH CMS v1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 73.0.132-bit | | Vendor...

FAST TECH CMS 1.0 SQL Injection

==================================================================================================================================== | Title : FAST TECH CMS v1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 73.0.132-bit | ...

Arbitrary File Read Vulnerability in DPtech SSL VPN of Hangzhou Dipu Technology Co.

Ltd. is a high-tech enterprise integrating R&D, production and sales in the field of network, security and application delivery. Ltd. DPtech SSL VPN suffers from an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

Credit Lite 1.5.4 SQL Injection Vulnerability

Exploit Title: Credit Lite 1.5.4 - SQL Injection Exploit Author: CraCkEr Vendor: Hobby-Tech Vendor Homepage: https://codecanyon.net/item/credit-lite-micro-credit-solutions/39554392 Software Link: https://credit-lite.appshat.xyz/ Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-4407...

WoofLocker Toolkit Hides Malicious Codes in Images to Run Tech Support Scams

Cybersecurity researchers have detailed an updated version of an advanced fingerprinting and redirection toolkit called WoofLocker that's engineered to conduct tech support scams. The sophisticated traffic redirection scheme was first documented by Malwarebytes in January 2020, leveraging...

Catching up with WoofLocker, the most elaborate traffic redirection scheme to tech support scams

Back in January 2020, we blogged about a tech support scam campaign dubbed WoofLocker that was by far using the most complex traffic redirection scheme we had ever seen. In fact, the threat actor had started deploying infrastructure in earnest as early as 2017, about 3 years prior to our...

This Week in Spring - August 15th, 2023

SpringOne, the first in-person SpringOne since the pandemic! - is next week!! I'm so excited I could spit. And I did spit. And then, I asked ChatGPT for some help writing a poem, and it did not disappoint! T'was a week before SpringOne, in Las Vegas so grand, Where devs from all corners would soo...

CVE-2023-23577

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-23577

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-23577

CVE-2023-23577 affects ITE Tech consumer infrared drivers for Intel NUC, with an uncontrolled search path element in versions before 5.5.2.1 that may let an authenticated local user escalate privileges. Intel’s advisory INTEL-SA-00829 confirms the issue and recommends updating to driver version 5...

CVE-2023-23577

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-23577

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-19056 · Ite Tech · Ite Tech Consumer Infrared Driver

Name of the Vulnerable Software and Affected Versions: ITE Tech consumer infrared drivers versions prior to 5.5.2.1 for IntelR NUC Description: The issue is related to an uncontrolled search path element in some ITE Tech consumer infrared drivers for IntelR NUC, which may allow an authenticated...

CVE-2023-23577: Uncontrolled Search Path Element

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® NUC CID Advisory

Summary: A potential security vulnerability in some ITE Tech consumer infrared drivers CID for some Intel® NUCs may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-23577 Description: Uncontrolled...

n00b’s guide to DEF CON. Surviving the Matrix of the underground

Ah, DEF CON. The worlds largest hacker convention. A beacon for the diverse spectrum of cyber security enthusiasts. From code-cracking challenges to the infamous Wall of Sheep, the event is a hive of activities and opportunities. But before we dive into the world of hackerdom, lets get one thing...