PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Have you been haunted by the Gh0st RAT today?

volexity.com | research | #vulnerability-research | #threat-intelligence | #scanning | #gh0st
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

If you run certain network monitoring and security appliances, you may have had a few small heart attacks today. Organizations all around the world are receiving alerts that they may […]
Published
Collected

Related coverage

research · volexity.com
A New Shellshock Worm on the Loose
In a blog post from September last year, we described some of the early Shellshock activity we were seeing in the wild. Since then we have continued to observe periodic […]
research · volexity.com
Drupal Vulnerability: Mass Scans & Targeted Exploitation
Yesterday (October 15, 2014), a critical SQL injection vulnerability in version 7 of the popular open source content management system (CMS) Drupal was disclosed by Stefan Horst and detailed in […]
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
vulnerability · volexity.com
Drupalgeddon 2: Profiting from Mass Exploitation
On March 28, 2018, a patch for a highly critical vulnerability, which facilitates remote code execution against the Drupal content management system was released. The vulnerability was identified by Jasper […]
research · volexity.com
Digital Crackdown: Large-Scale Surveillance and Exploitation of Uyghurs
Over the last several years, numerous reports have emerged regarding the shocking treatment of Uyghurs, a Muslim minority ethnic group that makes up a large part of the Xinjiang Uyghur […]
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
Back