SolarWinds' Orion monitoring platform may have been tampered with by attackers Security News & Discussion

---

• SolarWinds' Orion monitoring platform may have been tampered with by attackers
• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor
• Kerberoasting vs AS_REP roasting - a beginnerfriendly comparison
• Detect and Block Exploit Attempts for Kubernetes Vulnerability: CVE-2020-8554 Man in the Middle (MiTM) Attack Using Kubernetes Service Resources
• Coordinated disclosure of XML round-trip vulnerabilities in Go XML
• AWS CIS benchmark with cloudquery
• PGMiner: New Cryptocurrency Mining Botnet Delivered via PostgreSQL | Exploit | Malware | Palo Alto Networks Unit42
• Spy back on the apps spying on you (iOS TLS Proxy)
• Hack The Box: OpenKeyS - Write-up by Khaotic
• Time to update your TerraMaster NAS - Unauth RCE and Multiple Vulnerabilities Disclosed
• Different types of injection methods/detections explained - [ CreateRemoteThread, Process Hollowing, APC Injection, Thread Hijacking]
• What are x509 certificates? RFC? ASN.1? DER?

SolarWinds' Orion monitoring platform may have been tampered with by attackers Posted: 13 Dec 2020 06:12 PM PST submitted by /u/in_the_cage [link] [comments]

Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor Posted: 13 Dec 2020 10:31 PM PST submitted by /u/digicat [link] [comments]

Kerberoasting vs AS_REP roasting - a beginnerfriendly comparison Posted: 14 Dec 2020 08:26 AM PST submitted by /u/The-Luemmel [link] [comments]

Detect and Block Exploit Attempts for Kubernetes Vulnerability: CVE-2020-8554 Man in the Middle (MiTM) Attack Using Kubernetes Service Resources Posted: 14 Dec 2020 07:59 AM PST submitted by /u/alcideio [link] [comments]

Coordinated disclosure of XML round-trip vulnerabilities in Go XML Posted: 14 Dec 2020 08:29 AM PST submitted by /u/Nicd [link] [comments]

AWS CIS benchmark with cloudquery Posted: 14 Dec 2020 06:33 AM PST submitted by /u/jekapats [link] [comments]

PGMiner: New Cryptocurrency Mining Botnet Delivered via PostgreSQL | Exploit | Malware | Palo Alto Networks Unit42 Posted: 13 Dec 2020 09:32 AM PST submitted by /u/feelfreeee [link] [comments]

Spy back on the apps spying on you (iOS TLS Proxy) Posted: 13 Dec 2020 02:02 AM PST submitted by /u/Diddern [link] [comments]

Hack The Box: OpenKeyS - Write-up by Khaotic Posted: 12 Dec 2020 07:00 AM PST submitted by /u/Khaoticdude [link] [comments]

Time to update your TerraMaster NAS - Unauth RCE and Multiple Vulnerabilities Disclosed Posted: 12 Dec 2020 03:54 AM PST submitted by /u/IHTeam [link] [comments]

Different types of injection methods/detections explained - [ CreateRemoteThread, Process Hollowing, APC Injection, Thread Hijacking] Posted: 11 Dec 2020 06:26 PM PST submitted by /u/YikersNoYiking [link] [comments]

What are x509 certificates? RFC? ASN.1? DER? Posted: 11 Dec 2020 04:54 PM PST submitted by /u/debman3 [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States