All posts tagged cyber

■■■■□ Enhancing COM Reverse Engineering in Binary Ninja 4.0. https://binary.ninja/2024/02/12/enhancing-com-reverse-engineering.html https://t.me/cKure/13513

■■■■■ IoT: SIM Hijacking! https://sensepost.com/blog/2022/sim-hijacking/ https://t.me/cKure/13512

■■■■□ PoC for a NTFS crash, in various Windows versions. https://github.com/mtivadar/windows10_ntfs_crash_dos https://t.me/cKure/13511

■■■■■ An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer. https://github.com/MalwareTech/EDR-Preloader https://t.me/cKure/13509

■■■■□ An Introduction to Bypassing User Mode EDR Hooks. https://malwaretech.com/2023/12/an-introduction-to-bypassing-user-mode-edr-hooks.html https://t.me/cKure/13508

■■■■■ Bypassing EDRs With EDR-Preloading. https://malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html https://t.me/cKure/13507

Reverse engineering FOSCAM encryption keys from extracted firmware using Ghidra. https://hacked.codes/2023/extracting-firmware-reverse-engineering-encryption-keys-foscam/ https://t.me/cKure/13506

■■■□□ Non-state Bahraini hackers target United States Fifth Fleet, obtain confidential documents. https://www.middleeastmonitor.com/20240212-bahrain-hackers-target-us-fifth-fleet-obtain-confidential-documents/ https://t.me/cKure/13504

■■□□□ Ivanti discloses fifth vulnerability, doesn’t credit researchers who found it Software company’s claim of there being no active exploits also being questioned icon. https://www.theregister.com/2024/02/09/ivanti_discloses_fifth_ics_vulnerability/ https://t.me/cKure/13503

● A strange behavior in a popular WAF has been detected by a researcher. https://t.me/cKure/13500