🎯 NTLM Attacks

Windows Authentication, Pass-the-Hash, Credential Dumping, Domain Security

Securing OAuth: Best Practices for Safer Authorization Flows
dev.to·19h·
Discuss: DEV
📦Container Security
Hackers are stealing Microsoft 365 accounts by abusing link-wrapping services
techradar.com·13h
🎫Kerberos Attacks
Wake-on-LAN Using Cloud Functions
mihai.fm·16h·
Discuss: Hacker News
🔌Offline-first Apps
Rtpengine: RTP Inject and RTP Bleed vulnerabilities despite proper configuration (CVSS v4.0 Score: 9.3 / Critical)
seclists.org·2d
💣ZIP Vulnerabilities
Windows Authentication Monitoring
infosecwriteups.com·1d
🔍NTLM Archaeology
Federated Credential Management (FedCM)
ciamweekly.substack.com·17h·
Discuss: Substack
🔒Privacy Archives
Akira Ramps Up Assault on SonicWall Firewalls, Suggesting Zero-Day
darkreading.com·16h
🔓Hacking
Bouncing on trampolines to run eBPF programs
bootlin.com·19m
🔍eBPF
Those Titles the AI Bot Thought I Had Written
bsdly.blogspot.com·33m·
Discuss: bsdly.blogspot.com
🧪Archive Fuzzing
Legacy May Kill, (Sun, Aug 3rd)
isc.sans.edu·1d
🌐DNS Security
6 Ways to prevent a man-in-the-middle (MitM) attack
fingerprint.com·4d
🌐DNS Security
Beneath the Belly of the Latest BlueNoroff Attack: A DNS Investigation
circleid.com·7h
🌐DNS Security
Autonomous Penetration Testing: Solving Capture-the-Flag Challenges with LLMs
arxiv.org·3h
⚡Proof Automation
SEP-XXXX: Server-Side Authorization Management with Client Session Binding
github.com·14h·
Discuss: Hacker News
⚡gRPC
Nation-state group CL-STA-0969 targeted Southeast Asian telecoms in 2024
securityaffairs.com·1d
🛣️BGP Hijacking
SIEVE — a better algorithm than LRU?
blog.apnic.net·2h
💨Cache Analysis
One Third of the Web Will Stop Working in 4 Days
lowendbox.com·1d·
Discuss: Hacker News
🔓Hacking
PQCSA: A Gentle Introduction to Code Based PKE
esat.kuleuven.be·20h
⚗️Algebraic Coding
Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem
sentinelone.com·21h
🦠Malware Analysis
AI Clouds Are Flying Blind: The Illusion of Runtime Protection
thenewstack.io·12h
🔍eBPF