Aggregator

Debugging D-Link: Emulating firmware and hacking hardware

Grey Noise
2 years 5 months ago
GreyNoise researchers explain the process of gaining a foothold in firmware or a physical device for vulnerability research and achieving a debuggable interface. While existing Proof-Of-Concept code for (yet another) D-Link vulnerability CVE-2022-1262 is utilized within this document, as well as strong hints at suspect areas of code, don’t expect to find any new ready-to-fire exploits buried in the contents below.

BlackMamba ChatGPT ポリモーフィック マルウェア｜スケアウェアか、それともサイバーセキュリティへの警鐘か?

SentinelOne Blog
2 years 5 months ago

The rise of publicly-accessible Al models like ChatGPT has produced some interesting attempts to create malware. How seriously should defenders take them?

The post BlackMamba ChatGPT ポリモーフィック マルウェア｜スケアウェアか、それともサイバーセキュリティへの警鐘か? appeared first on SentinelOne JP.

SentinelOne

Microsoft Outlook Elevation of Privilege Vulnerability

X-Force Exchange - Collection Feed
2 years 5 months ago
Summary Microsoft has released a patch for a zero-day vulnerability that has purportedly been used by bad actor groups linked to Russian Military Intelligence to compromise multiple European organizations over the past year. Threat Type Vulnerability Overview In the most recent Microsoft monthly security fix rollout, a critical elevation of privilege vulnerability was patched. According to multiple reliable sources, this vulnerability has been used multiple times by Russian bad actor groups with ties to Ru

Managed ad