SysAdmin 24x7

Kernel Attack Fully Compromises Windows Machines https://www.cbronline.com/news/kernel-attack-fully-compromises/amp

Snapchat source code leaked on GitHub – but no one knows why https://nakedsecurity.sophos.com/2018/08/08/snapchat-source-code-leaked-on-github/amp/

Malware Analysis Report (AR18-221A) MAR-10135536-17 – North Korean Trojan: KEYMARBLE https://www.us-cert.gov/ncas/analysis-reports/AR18-221A

Vulnerabilidades en servidores de ISC BIND Fecha de publicación: 09/08/2018 Importancia: 4 - Alta Recursos afectados:  Las versiones afectadas de BIND son: 9.7.0 a 9.8.8, 9.9.0 a 9.9.13, 9.10.0 a 9.10.8, 9.11.0 a 9.11.4, 9.12.0 a 9.12.2, 9.13.0 a 9.13.2 https://www.certsi.es/alerta-temprana/avisos-seguridad/vulnerabilidades-servidores-isc-bind

Vulnerability Note VU#962459 Linux Kernel TCP implementation vulnerable to Denial of Service https://www.kb.cert.org/vuls/id/962459

Top 10 de herramientas free para threat hunting https://www.hackplayers.com/2018/08/top-10-herramientas-free-para-threat-hunting.html

Oleada de ataques de 'cryptojacking' afecta a más de 200.000 routers MikroTik http://unaaldia.hispasec.com/2018/08/oleada-de-ataques-de-cryptojacking.html

HP plugs critical RCE flaws in InkJet printers https://www.helpnetsecurity.com/2018/08/06/hp-inkjet-printer-vulnerabilities/

maltrail v0.10.350 released: Malicious traffic detection system https://securityonline.info/maltrail-malicious-traffic-detection-system/

LogonTracer Investigate malicious logon by visualizing and analyzing Windows active directory event logs. https://github.com/JPCERTCC/LogonTracer

Linux/ARM - Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (116 Bytes) https://www.exploit-db.com/exploits/45119/

Exploitable or Not Exploitable? Using REVEN to Examine a NULL Pointer Dereference. https://blog.talosintelligence.com/2018/08/exploitable-or-not-exploitable-using.html

Vulnerabilidades de terceros en el core de Drupal Fecha de publicación: 02/08/2018 Importancia: 3 - Media Recursos afectados:  Todas las versiones de Drupal 8.x anteriores a 8.5.6 Descripción:  El equipo de seguridad de Drupal ha publicado una actualización para Drupal 8.x que corrige varias vulnerabilidades en librerías de terceros incluidas en Drupal Core. Solución:  Actualizar a Drupal core 8.5.6 Las versiones anteriores a 8.5.x están fuera de ciclo de vida y no recibirán actualizaciones. https://www.certsi.es/alerta-temprana/avisos-seguridad/vulnerabilidades-terceros-el-core-drupal

EUD Security Guidance: Ubuntu 18.04 LTS https://www.ncsc.gov.uk/guidance/eud-security-guidance-ubuntu-1804-lts

OWASP OWTF is a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST so that pentesters will have more time to https://github.com/owtf/owtf

Attacking the ARM's TrustZone https://blog.quarkslab.com/attacking-the-arms-trustzone.html

Al-Khaser v0.75 al-khaser is a PoC "malware" application with good intentions that aims to stress your anti-malware system. It performs a bunch of common malware tricks with the goal of seeing if you stay under the radar. https://github.com/LordNoteworthy/al-khaser

Multiple vulnerabilities in OCS Inventory 2.4.1 (RCE, SQLI & XXE) https://www.tarlogic.com/en/blog/vulnerabilities-in-ocs-inventory-2-4-1/

How we scaled nginx and saved the world 54 years every day Enviado por @Krakakanok https://blog.cloudflare.com/how-we-scaled-nginx-and-saved-the-world-54-years-every-day/