Macro-less Code Exec in MSWord
2017-10-12
In our context DDE works by executing an application, that will provide the data (data provider). In a previous post1 We discussed using DDE in MSExcel to gain command execution,Read More →
ASD revealed hacker stole 30GB of sensitive data on Australia’s military capabilities
2017-10-12
The Australia’s foreign intelligence Agency ASD has revealed military sensitive information has been stolen by hackers who breached a Department of Defence contractor. The Australia’s foreign intelligence agency, the Australian Signals DirectorateRead More →
Accenture left a huge trove of highly sensitive data on exposed servers
2017-10-10
The four exposed servers had no password, but contained the “keys to the kingdom.” Technology and cloud giant Accenture has confirmed it inadvertently left a massive store of private dataRead More →
Iran-linked OilRig hacked group use a new Trojan in Middle East Attacks
2017-10-10
The Iran-Linked cyberespionage group OilRig has been using a new Trojan in attacks aimed at targets in the Middle East. Experts from Palo Alto Networks spotted a new campaign launched byRead More →
One of the Internet’s Gatekeepers Is Eyeing Sneaky Cryptocurrency Miners
2017-10-09
Websites are hijacking computers to mine digital coins. Cloudflare, an internet security company founded in 2010, has quickly become an integral part of how many websites operate. As one ofRead More →
Wi-Fi packet sniffing / monitoring on Windows using Raspberry Pi – inspired by Wimonitor
2017-10-09
Wimonitor is a wonderful product from Hacker Arsenal that saves pentesters the hassle of having to configure VMs, carry compatible wireless cards that support monitor mode etc. and comes with aRead More →
Forrester, one of the most influential research and advisory firms was hacked
2017-10-09
Forrester Research announced today that Forrester.com experienced a security breach this week, attackers were ultimately detected and shut out of the system Forrester, one of the most influential research andRead More →
Disqus confirms 2012 hack of its comments tool
2017-10-07
The company is sending out password reset emails to users whose passwords were exposed. Disqus has confirmed its web commenting system was hacked. The company, which builds and provides aRead More →
Simple Registry Hacks Bypass Windows Digital Signature, Opening Gates For Malicious Code
2017-10-07
Windows Digital Signature check is a mechanism included in Microsoft Windows to make sure that the software or driver you’re trying to install is signed by a trusted entity, andRead More →
Zapad drills – Russia may have tested cyber weapons on Latvia
2017-10-06
According to intelligence experts the recent Zapad drills conducted by Russia simulated an attack on all Baltic countries, it included the use of cyber weapons. Baltic and NATO officials claim RussiaRead More →
