Infosec.Pub

4,699 readers
110 users here now

To support infosec.pub, please consider donating through one of the following services:

Paypal: jerry@infosec.exchange

Ko-Fi: https://ko-fi.com/infosecexchange

Patreon: https://www.patreon.com/infosecexchange

founded 2 years ago
ADMINS
jerry
shellsharks
modbot
listing: all - local
576
5
raw-disk-parser: A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs (github.com)
submitted 4 weeks ago by digicat to c/blueteamsec
1 comments fedilink
577
2
sneaky_remap: A C and Go /proc/pid/maps cloak of invisibilty for shared object files (github.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
578
3
Analysis of APT-C-24 (Sidewinder) Recent LNK File Phishing Attacks (mp.weixin.qq.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
579
3
AI-Driven Deepfake Military ID Fraud Campaign by Kimsuky APT (www.genians.co.kr)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
580
9
'WhiteCobra' floods VSCode market with crypto-stealing extensions (www.bleepingcomputer.com)
submitted 4 weeks ago by lemmydev2 to c/pulse_of_truth
0 comments fedilink
 
 

A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the Visual Studio marketplace and the Open VSX registry. [...]

581
3
Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days (www.willsroot.io)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
582
4
N7000 (discuss.tchncs.de)
submitted 4 weeks ago by urheber@discuss.tchncs.de to c/androidfoss
0 comments fedilink
 
 

Galaxy Note N7000

Hi! Been looking for recovery/Kernel Files for over 3 hours, they're all dead. I tried the Internet Archive and started crying from frustration! PLEASE! HELP ME FIND THE FILES! I found a ROM download, resurrection remix (my favorite ROM) but NO kernels or recovery... All the links are dead!!! Thanks !!!

583
4
Sidewinder APT leverages Nepal protests to push mobile malware (strikeready.com)
submitted 4 weeks ago by campuscodi to c/blueteamsec
0 comments fedilink
584
4
Yurei the New Ransomware Group on the Scene (research.checkpoint.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
585
0
2025년 8월 APT 그룹 동향 보고서 - APT Group Trends Report for August 2025 (asec.ahnlab.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
586
1
2025년 8월 APT 공격 동향 보고서(국내) - APT Attack Trend Report for August 2025 (Domestic) (asec.ahnlab.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
587
3
Cyberspike Villager Cobalt Strike's AI-native Successor - "a Chinese-based pentesting framework that acts as an AI-powered framework in the style of Cobalt Strike" (www.straiker.ai)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
588
9
Insider threat of students leading to increasing number of cyber attacks in schools (ico.org.uk)
submitted 4 weeks ago by digicat to c/blueteamsec
1 comments fedilink
589
10
US Investment in Spyware Is Skyrocketing (www.wired.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
590
2
Ransomware Tool Matrix Update: Community Reports (blog.bushidotoken.net)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
591
6
Iran-linked hacker group doxes journalists and amplifies leaked information through AI chatbots (www.international.gc.ca)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
592
1
Cyber Criminal Groups UNC6040 and UNC63940 Compromising Salesforce Instances for Data Theft and Extortion (self.blueteamsec)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://www.ic3.gov/CSA/2025/250912.pdf

593
1
How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be (www.zetter-zeroday.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
594
1
Modular PIC C2 Agents (reprise) (rastamouse.me)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
595
3
Old But Gold, Dumping LSASS With Windows Error Reporting On Modern Windows 11 (www.zerosalarium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
596
1
Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak (gfw.report)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
597
12
Never steal a hacker’s girlfriend’s phone: How an expert exposed a global network of thieves (english.elpais.com)
submitted 1 month ago by TheDwZ@lemmy.world to c/cybersecurity
0 comments fedilink
598
1
Treasury Sanctions Southeast Asian Networks Targeting Americans with Cyber Scams (home.treasury.gov)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
599
1
CTO at NCSC Summary: week ending September 14th.. (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
600
8
CyberVolk Ransomware: Analysis of Double Encryption Structure and Disguised Decryption Logic (asec.ahnlab.com)
submitted 1 month ago by lemmydev2 to c/pulse_of_truth
0 comments fedilink
 
 

The CyberVolk ransomware, which first emerged in May 2024, has been launching attacks on public institutions and key infrastructures of various countries, posing a continuous threat. The ransomware is particularly notable for its pro-Russia nature, as it primarily targets anti-Russian countries, making it a geopolitically significant cyber threat. This post provides a technical analysis of […]

view more: ‹ prev next ›