A mysterious bug in the firmware of Google's Titan M chip (CVE-2019-9465) Security News & Discussion

---

• A mysterious bug in the firmware of Google's Titan M chip (CVE-2019-9465)
• CVE-2020-1938: Ghostcat aka Tomcat 9/8/7/6 in the default configuration (port 8009) leading to disclosure of configuration files and source code files of all webapps deployed and potentially code execution
• ADTimeline: Generates a timeline based on Active Directory replication metadata for objects considered of interest - suggested to use Splunk for analysis
• [OC] Multiple Exploits now out for CVE-2020-0688 - the Microsoft Exchange deserialization vuln
• Hyperion is a runtime encrypter for 32-bit and 64-bit portable executables. It is a reference implementation and bases on the paper "Hyperion: Implementation of a PE-Crypter". The current version (as of February 2020) is 2.2. Use this process to install and compile the zipped file.
• 11 New SpiderFoot 3.0 CLI tutorials

A mysterious bug in the firmware of Google's Titan M chip (CVE-2019-9465) Posted: 29 Feb 2020 08:56 AM PST submitted by /u/clearlyarbitrary [link] [comments]

CVE-2020-1938: Ghostcat aka Tomcat 9/8/7/6 in the default configuration (port 8009) leading to disclosure of configuration files and source code files of all webapps deployed and potentially code execution Posted: 29 Feb 2020 08:44 AM PST submitted by /u/digicat [link] [comments]

ADTimeline: Generates a timeline based on Active Directory replication metadata for objects considered of interest - suggested to use Splunk for analysis Posted: 29 Feb 2020 07:44 AM PST submitted by /u/digicat [link] [comments]

[OC] Multiple Exploits now out for CVE-2020-0688 - the Microsoft Exchange deserialization vuln Posted: 28 Feb 2020 10:42 PM PST submitted by /u/digicat [link] [comments]

Hyperion is a runtime encrypter for 32-bit and 64-bit portable executables. It is a reference implementation and bases on the paper "Hyperion: Implementation of a PE-Crypter". The current version (as of February 2020) is 2.2. Use this process to install and compile the zipped file. Posted: 29 Feb 2020 12:42 PM PST submitted by /u/goobyplx [link] [comments]

11 New SpiderFoot 3.0 CLI tutorials Posted: 29 Feb 2020 03:11 AM PST submitted by /u/smicallef [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States