Sys-Admin InfoSec

Последние публикации

• FortiBleed - Breach How 80,000+ Corporate= Firewalls Were Quietly Compromised If your organization uses a Fortinet firewall or VPN product and appears in this dataset, treat your network perimeter as already compromised…

  19.06.2026 639 просмотров

• Crypto Clipper uses Tor and worm-like propagation for persistence and control https://www.microsoft.com/en-us/security/blog/2026/06/17/crypto-clipper-uses-tor-worm-like-propagation-for-persistence-control/ P.S. it work…

  19.06.2026 773 просмотров

• Rokarolla : Android Banker with Complete Device Takeover Capabilities https://zimperium.com/blog/rokarolla-android-banker-with-complete-device-takeover-capabilities

  16.06.2026 1 120 просмотров

• HTTP/2 Bomb https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb

  03.06.2026 2 410 просмотров

• Bumblebee (from Perplexity) Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises. https://github.com/perple…

  26.05.2026 2 690 просмотров

• ⚡ DNS is not just about domains. It is about Trust. Recent supply chain incidents are a strong reminder that modern attacks often start through tools and workflows developers already trust: • npm packages and dependency…

  20.05.2026 2 490 просмотров

• NGINX ngx_http_rewrite_module Heap-Based Buffer Overflow (Queries and Signatures Only) An unauthenticated attacker can crash the NGINX worker process by sending crafted HTTP requests - CVE-2026-42945: https://docs.vulnc…

  18.05.2026 1 820 просмотров

• Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim

  13.05.2026 2 480 просмотров

• AppSecFest 2026 - В эту пятницу в Алматы, Farabi Hub Будут экспертные эксперты, тимлиды, специалисты, представители IT-индустрии, AppSec/DevSecOps-практики, инженеры по безопасности. + будет открытое CTF-соревнование от…

  13.05.2026 2 130 просмотров

• New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth apps ..The malware’s primary command-and-control channel has been migrated onto The Open Network (TON) using .adnl endpoints routed…

  12.05.2026 1 860 просмотров