This week: a deserialization flaw in popular Minecraft mods enables remote code execution on servers and clients, Russian APT Blue Charlie swaps to 94 new phishing domains after its infrastructure was exposed, Google’s AI-powered fuzzing adds up to 31% more code coverage to open source security testing, and a new macOS infostealer disguised as a […]
Blog
T-Mobile Hacked, PayPal Credential Stuffing, and Hook Android Banking Malware | HN 11
T-Mobile disclosed that hackers stole addresses, phone numbers, and birthdates from 37 million customers, PayPal notified ~35,000 users that a credential stuffing attack exposed Social Security numbers and tax IDs, and a new Android banking malware called Hook emerged with full device takeover capability — allowing attackers to see your screen, control your device, steal […]
License Plates Hacked, Canada Reclassifies Tether, JsonWebToken Vulnerability, & SugarCRM Zero-Day | HN 10
Security researchers gained admin access to Reviver’s backend and could track the GPS location of every digital license plate in California, Canada’s regulators reclassified stablecoins as securities forcing Tether off Crypto.com, a critical RCE vulnerability in the JsonWebToken library threatens over 22,000 projects, and a SugarCRM zero-day allowed attackers to take full server control — […]
Linux How To Guide for Files and Directories
Linux How To: Delete File and Linux How To: Delete a Directory along side making a file and directory is a quick reference into file and directory management. Although this is not meant to be an exhaustive list of file and directory management it’s a quick intro for someone just starting their Linux journey.
Freakout Botnet Attacks DVRs, Ricochet Anti-Cheat Concerns, MyKings Botnet, & Twitch Hacked | HN 09
Twitch was breached and a 125 GB torrent posted to 4chan exposed the platform’s entire source code, creator payouts going back to 2019, internal red team tools, and source code for an unreleased Amazon Steam competitor called Vapor — while the Freakout botnet was hijacking surveillance DVRs for Monero mining and the MyKings botnet had […]
Golang Setup for VS Code on Windows
Getting Go’s compiler and VS Code’s extension talking to each other on Windows is where most people get stuck before they’ve written a line of code. This walks you through the exact install and PATH steps so you’re not fighting your environment before you even start.