Cyber Security Notes – Settembre 2021

L’intento è di raccogliere e rendere pubblicamente accessibile in modo permanente: ricerche, analisi, report, notizie e avvertimenti di sicurezza informatica di interesse internazionale.

Settembre 2021

2021-09-25
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-25an-introduction-to-scan-everything-.pdf
2021-09-25blog.malwarebytes.com-101-how-tos-2021-09-how-to-clear-your-cache-.pdf
2021-09-25devsecops-its-more-than-security-8ab2b73fdc34.pdf
2021-09-25nosql-injection-8732c2140576.pdf
2021-09-25Gurock-Testrail-7.2.0.3014-Improper-Access-Control.html.pdf
2021-09-25network-security-report-ddos-attacks-increasing-as-record-setting-year-is-anticipated-.pdf
2021-09-25how-to-protect-your-on-premises-databases-from-security-vulnerabilities-.pdf
2021-09-25what-is-phishing-as-a-service-and-how-to-protect-your-organization.html.pdf
2021-09-25resetting-expired-passwords-remotely-.pdf
2021-09-25healthcare-data-new-prize-hackers-.pdf
2021-09-25peeking-into-cve-2021-40444-ms-office-zero-day-vulnerability-exploited-in-the-wild-.pdf
2021-09-25taxonomy-of-ddos-attack-.pdf
2021-09-25i-Water-Basilisk-Uses-New-HCrypt-Variant-to-Flood-Victims-with-RAT-Payloads.html.pdf
2021-09-25telcos-must-get-a-grip-on-the-smishing-threat-.pdf
2021-09-24
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-24fbi-warns-of-continued-ransomware-attacks-targeting-on-the-food-and-agriculture-sector.pdf
2021-09-24reports-2021-09-mshtml-attack-targets-russian-state-rocket-centre-and-interior-ministry-.pdf
2021-09-24sans-isc-excel-recipe-some-vba-code-with-a-touch-of-excel4-macro-.pdf
2021-09-24reverse%2520engineering-2021-09-05-BlackMatterRansomware-.pdf
2021-09-24malware-campaign-abuses-fertile-ground-of-microsoft-log.pdf
2021-09-24tldrsec.com-blog-tldr-sec-102-.pdf
2021-09-24www.exploit-db.com-exploits-50320.pdf
2021-09-24hcrootkit-sutersu-linux-rootkit-analysis-.pdf
2021-09-24mcafee-enterprise-atr-detecting-credential-stealing-attacks-through-active-in-network-defense-.pdf
2021-09-24rootshell-discover-a-denial-of-service-flaw-in-netlib-securitys-encryptionizer-platform-.pdf
2021-09-23
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-23Can-We-Leverage-Predictive-Uncertainty-to-Detect-Dataset-Shift-and-Adversarial-Examples-in-Android-Malware-Detection.pdf
2021-09-23Making-the-Most-of-Parallel-Composition-in-Differential-Privacy.pdf
2021-09-23what-is-cryptocurrency.html.pdf
2021-09-23how-we-tracked-attack.html.pdf
2021-09-23the-best-12-password-cracking-procedures-utilized-by-programmers-part-1-8d5a3f9c6462.pdf
2021-09-23pastebin.com-wCNA6UAB.pdf
2021-09-23aws-cve-2021-38112-aws-workspaces-rce-.pdf
2021-09-23how-i-hacked-world-wide-tiktok-users-24e794d310d2.pdf
2021-09-23what-is-p2p-the-best-peer-to-peer-network-vpn-.pdf
2021-09-23lockbit-2-0-ransomware-becomes-lockfile-ransomware-with-a-never-before-seen-encryption-method-.pdf
2021-09-23www.exploit-db.com-exploits-50312.pdf
2021-09-23www.exploit-db.com-exploits-50314.pdf
2021-09-23www.exploit-db.com-exploits-50316.pdf
2021-09-23ps2exe-module-to-compile-powershell.html.pdf
2021-09-23other-blogs-mcafee-labs-malicious-powerpoint-documents-on-the-rise-.pdf
2021-09-23the-passwordless-future-is-here-for-your-microsoft-account-.pdf
2021-09-23i-cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html.pdf
2021-09-22
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-222021-09-tinyturla.html.pdf
2021-09-22decoded.avast.io-anhho-blustealer-.pdf
2021-09-22it-highlights-latest-vulnerabilities-and-exploits-38374-Church-Management-System-1.0-SQL-Injection—Code-Execution.html.pdf
2021-09-22it-highlights-latest-vulnerabilities-and-exploits-38375-Backdoor.Win32.Minilash.10.b-Denial-Of-Service.html.pdf
2021-09-22it-highlights-latest-vulnerabilities-and-exploits-38376-OpenCats-0.9.4-XML-Injection.html.pdf
2021-09-22vulnerable-and-outdated-components-a5d96017049c.pdf
2021-09-22ssd-disclosure.com-ssd-advisory-macos-finder-rce-.pdf
2021-09-22threat-research-vaccine-passports-for-sale-on-the-dark-web.html.pdf
2021-09-22defeating-macos-malware-anti-analysis-tricks-with-radare2-.pdf
2021-09-22trendmicro.com-en_us-research-21-i-cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html.pdf
2021-09-21
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-210xboku.com-2021-08-19-Bof-WhereAmI.html.pdf
2021-09-21artificial-intelligence-the-magic-potion-to-bolster-cybersecurity.pdf
2021-09-21yeswerhackers-exploitation-file-upload-attacks-part-1-.pdf
2021-09-21alerts-apple-security-advisory-40.pdf
2021-09-21how-we-use-vmray-to-support-expel-for-phishing-.pdf
2021-09-21subnetting-a-networking-concept-161a82aff954%3Fsource%3Drss—-7b722bfd1b8d—4.pdf
2021-09-21npm-rce.pdf
2021-09-21github-recon-its-really-deep-6553d6dfbb1f.pdf
2021-09-21support.apple.com-fi-fi-HT212814.pdf
2021-09-21execute-unmanaged-code-via-c-pinvoke-.pdf
2021-09-21sharing-sensitive-data-.pdf
2021-09-21www.exploit-db.com-exploits-50308.pdf
2021-09-21www.exploit-db.com-exploits-50310.pdf
2021-09-21www.exploit-db.com-exploits-50311.pdf
2021-09-21enterprise-mcafee-enterprise-defender-blog-mshtml-cve-2021-40444-.pdf
2021-09-20
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-200dayappsecBeginnerGuide.html.pdf
2021-09-20Cyber-Report-1-REMCOS-and-Agent-Tesla-loaded-into-memory-with-Rezer0-loader.pdf
2021-09-20an-introduction-to-webrtc-simulcast-6c5f1f6402eb.pdf
2021-09-20alteryx-study-improving-analytics-maturity-key-for-bridging-gaps-between-australian-enterprises-business-priorities-and-performance-.pdf
2021-09-20august-2021-patch-watch-digest.html.pdf
2021-09-20experts-make-out-a-list-of-vulnerabilities-abused-by-ransomware-groups-.pdf
2021-09-20ultimate-guide-to-pass-ejpt-in-the-first-attempt-by-mayur-parmar-75effc877394.pdf
2021-09-20what-are-the-cybersecurity-framework-examples-.pdf
2021-09-20the-adoption-of-multi-cloud-drives-the-need-for-better-data-protection-and-management-of-encryption-keys-and-policy-controls-.pdf
2021-09-20exploits-50304.pdf
2021-09-20exploits-50305.pdf
2021-09-20mcafee-labs-rdp-security-explained-.pdf
2021-09-20ciso-churn-why-its-happening-and-how-to-stop-it-.pdf
2021-09-19
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-19profiling-your-workers-with-wrangler-.pdf
2021-09-19fbi-and-cisa-warn-of-apt-groups-exploiting-adselfservice-plus-.pdf
2021-09-19record-aws-api-calls-to-improve-iam-policies-.pdf
2021-09-19esg-in-2021-so-far-an-update-.pdf
2021-09-19ways-to-find-out-if-your-smartphone-has-malware-.pdf
2021-09-19best-practices-to-be-maintained-as-a-digital-forensic-investigator-f81948154e78.pdf
2021-09-19cbor-cose-and-rsa-key-pairs-fa18ada152aa%3Fsource%3Drss—-c89fe7d2f2f0—4.pdf
2021-09-19how-i-hacked-a-hotel-just-using-my-phone-97f4d2de39ca.pdf
2021-09-19exploiting-the-entity-xme-xml-external-entity-injection-.pdf
2021-09-19reality-check-for-cloudflare-wasm-workers-and-rust.pdf
2021-09-19evading-av-with-shellter.pdf
2021-09-19malware-traffic-analysis.net-2021-09-17-index.html.pdf
2021-09-19numando-latam-banking-trojan-.pdf
2021-09-19insights-topics-digital-transformation-digital-trust-for-future.html.pdf
2021-09-19eastern-europe-cryptocurrency-geography-report-2021-preview.pdf
2021-09-19capture%2520the%2520flag.html.pdf
2021-09-19azure-cloud-adoption-framework-organize-cloud-security.pdf
2021-09-19dmarc-a-prerequisite-for-email-domain-security-.pdf
2021-09-19lockbit-2-0-interview-with-russian-osint-.pdf
2021-09-19rust-fast-port-scanner-.pdf
2021-09-19how-hackers-hack-your-passwords-cracking-techniques-used-for-stealing-login-credit-cards-details.html.pdf
2021-09-19hunting-for-malicious-powershell-using-script-block-logging.html.pdf
2021-09-19should-we-normalize-security-data-.pdf
2021-09-19yichenchai.github.io-blog-serv-u-part-1.pdf
2021-09-18
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-18whitepapers-third-party-risk-in-salesforce-named-credentials-.pdf
2021-09-18facebooks-own-research-reveals-the-harm-that-instagram-can-inflict-.pdf
2021-09-18reverse-shells-and-bind-shells-f2b7d95ffd30.pdf
2021-09-18all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice-cve-2021-33035-767fc7d6daf7.pdf
2021-09-18objective-see.com-blog-blog_0x67.html.pdf
2021-09-18yes-we-are-breaking-the-law-an-interview-with-the-operator-of-a-marketplace-for-stolen-data-.pdf
2021-09-18vulnerability-Qt-buffer-overflow-via-QOutlineMapper-convertPath-36446.pdf
2021-09-18a-new-threat-called-stalkerware-.pdf
2021-09-18exploits-50299.pdf
2021-09-18exploits-50301.pdf
2021-09-1887-indian-companies-victims-cyber-security-attacks-last-year-report-840795.pdf
2021-09-18mcafee-enterprise-atr-the-bug-report-september-2021-cve-2021-40444-.pdf
2021-09-17
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-170xdf.gitlab.io-2021-09-14-htb-validation.html.pdf
2021-09-17ACSC%20Annual%20Cyber%20Threat%20Report%20-%202020-2021.pdf
2021-09-17blog.morphisec.com-triple-extortion-ransomware-a-new-challenge-for-defenders.pdf
2021-09-17operation-layover-how-we-tracked-attack.html.pdf
2021-09-17what-you-need-to-know-about-the-bazarloader-malware-.pdf
2021-09-17cta-2021-0909.pdf
2021-09-17exploitation-of-the-cve-2021-40444-vulnerability-in-mshtml-104218.pdf
2021-09-17dangling-domains-.pdf
2021-09-17ics-advisories-icsa-21-259-02.pdf
2021-09-17threat-research-2021-09-elfant-in-the-room-capa-v3.html.pdf
2021-09-16
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-16paper.seebug.org-886-.pdf
2021-09-16research.checkpoint.com-2020-reverse-rdp-the-path-not-taken-.pdf
2021-09-16team-cymru.com-2021-ponemonstudy-.pdf
2021-09-16vigilance.fr-vulnerability-Linux-kernel-memory-leak-via-ccp-run-aes-gcm-cmd-36416.pdf
2021-09-15
2021-09-15the-ssid-stripping-vulnerability-when-you-dont-see-what-y.pdf
2021-09-15osint-framework-software-for-cyber-investigation-.pdf
2021-09-15arbitrium-cross-platform-fully-undetectable-remote-access-trojan-to-c.pdf
2021-09-15intigriti-challenge-0921-by-bug-emir-pepijn-van-der-stap-.pdf
2021-09-15com-objects-p-1-the-hidden-backdoor-in-your-system-947ac4285e.pdf
2021-09-15busting-myths-the-truth-about-biometrics-.pdf
2021-09-15us-cert-cisa-gov-ics-advisories-icsa-21-257-09.pdf
2021-09-15zero-trust-network-access-helps-secure-north-count.pdf
2021-09-15kafka-cybersecurity-siem-soar-part-4-of-6-dig.pdf
2021-09-15new-study-shows-impact-of-corporate-corr.pdf
2021-09-14
2021-09-145000-google-idor-vulnerability-writeup-c7b45926abe9.pdf
2021-09-14securing-the-hybrid-cloud-with-azure-security-cen.pdf
2021-09-14easily-exploitable-critical-vulnerability-in-profilepress-.pdf
2021-09-14forcedentry-nso-group-imessage-zero-click-exploit-captured.pdf
2021-09-14how-security-changes-with-cloud-networ.pdf
2021-09-14hacking-cloudkit-how-i-accidentally-deleted-your-a.pdf
2021-09-14completing-the-journey-from-byod-to-a-hybrid-w.pdf
2021-09-14mcafee-labs-android-malware-distributed-in-mexi.pdf
2021-09-14hide-and-seek-new-zloader-infection-chain-comes-with-im.pdf
2021-09-13
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-13How%20to%20Encrypt%20Phone%20Calls.pdf
2021-09-13How%20to%20Encrypt%20an%20External%20Hard%20Drive.pdf
2021-09-13How%20to%20shut%20down%20a%20phishing%20operation%20in%2048hours.pdf
2021-09-13Millions%20of%20Microsoft%20web%20servers%20powered%20by%20vulnerable%20legacy%20software.pdf
2021-09-13The%205%20phases%20of%20a%20standard%20hack.pdf
2021-09-13VaxSurge%20Ransomware.pdf
2021-09-13ZoomEye%20Behavior%20Mapping%20For%20Office%20Word%0A0day%20(CVE-2021%E2%80%9340444)%20Original%20Attacker.pdf
2021-09-13anonleaks-net-2021-optinfoil-attila-hildmann-the-final-chapter-.pdf
2021-09-13javascript-based-phishing-.pdf
2021-09-13cyber-security-cisa-adds-single-factor-authentication-to-the.pdf
2021-09-13find-out-if-your-pc-supports-tpm-2-0-.pdf
2021-09-13go-read-this-ransomware-attacks-schools-stud.pdf
2021-09-13research-21-i-remote-code-execution-zero-day–cve-2021-.pdf
2021-09-12
Data / Date
(YYYYMMDD)		Documento / Paper
2021-09-12bot-mitigation-10-bot-mitigation-myths-debunked-.pdf
2021-09-12000063978-Security-Advisory-for-Multiple-Vulnerabilities-on-Some-.pdf
2021-09-12asterfiester-medium-com-3133-70-google-dialogflow-idor-vulnerability-7a72771678d.pdf
2021-09-12kerkour-com-blog-rust-execute-from-memory-.pdf
2021-09-12codex-should-we-save-our-passwords-in-a-browser-f4ed5cb162b2.pdf
2021-09-12objective-see-com-blog-blog_0x50-html.pdf
2021-09-12owasp-org-Top10-.pdf
2021-09-12antivirus-evasion-with-python-.pdf
2021-09-12us-cert-cisa-gov-ics-advisories-icsa-21-252-03.pdf
2021-09-12open-source-intelligence-osint-gathering-open-source-.pdf
2021-09-12comprehensive-guide-on-ffuf-.pdf
2021-09-12wireshark-for-pentesters-a-beginners-guide-.pdf
2021-09-12cybersecurity-skills-crisis-continues-for-fifth-year-perpetuated-by.pdf
2021-09-12macos-xpc-exploitation-sandbox-share-case-stud.pdf

News cybersecurity, malware, ransomware, and data security

Contacts

For any information/reporting, editorial, you may contact us by all the social channels listed and via e-mail to: info@spcnet.it

Secure channel for Whistlerblowers