Collecting and processing security logs is one of the primary function of any SOC. Log sources vary widely, starting from security device logs, network components, applications, servers and many others. Continue reading →

A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers. - efchatz/pandora

Almost 11 million internet-exposed SSH servers are vulnerable to the Terrapin attack that threatens the integrity of some SSH connections.

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language). - Cyb3r-Monk/Threat-Hunting-and-Detection

I I've always been a fan of books or shows where someone follow clues and develops an overall picture to lead them to their end goal. I've a...

Cybernews researchers have discovered two BMW subdomains that were vulnerable to SAP redirect vulnerability.

Explore Deobfuscation with CyberChef as we decode VBScript used in the RedLine stealer infection chain. We’ll explore the various CyberChef operations e.g Subsection, From Base, Fork etc.

https://pixabay.com/photos/code-hacker-data-security-707069/

Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around the patch.

A critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable websites.

Artemis is an open-source security vulnerability scanner developed by CERT PL. It is built to look for website misconfigurations and vulnerabilities on a large number of sites. It automatically prepares reports that can be sent to the affected institutions.…

This short Wireshark tutorial explains decrypting HTTPS traffic, including when you can accomplish it and how to do it.