Tags → #stories

Vulnerabilities
Investigation Reveals SSTI Vulnerabilities in FreeMarker Engine
Nov 22, 2024 Sayaan Alam, a member of the Synack Red Team, has investigated Server-Side Template Injection vulnerabilities in the FreeMarker template engine, revealing potential security risks associated with user input rendering in Java applications.
Threats
Lateral Movement Techniques in macOS: An Overview
Nov 22, 2024 The article provides an overview of lateral movement techniques in macOS, detailing methods such as SSH key theft, Apple Remote Desktop, and Remote Apple Events, while emphasizing the importance of security measures to protect against these cyber threats.
Tools
New Detection System for Advanced Persistent Threats Introduced
Nov 22, 2024 Researchers have introduced a new detection system named Winemaking, designed to improve the identification of Advanced Persistent Threats (APTs) by addressing limitations in traditional intrusion detection methods.
Threats
NodeStealer Malware Resurfaces with Enhanced Capabilities
Nov 22, 2024 NodeStealer, a Python-based infostealer that has evolved since its initial identification in 2023, poses a significant cybersecurity threat by targeting Facebook accounts and extracting sensitive financial information.
Threats
North Korea Identifies New Cyber Threat Group Moonstone Sleet
Nov 22, 2024 Moonstone Sleet, a newly identified North Korean APT group, is associated with targeted cyberattacks that blend espionage and financial motivations, employing advanced techniques such as spear-phishing and custom malware.
Tools
Novel Security Mechanism ACRIC Addresses Legacy System Vulnerabilities
Nov 22, 2024 The introduction of the Authenticated Cyclic Redundancy Integrity Check (ACRIC) aims to enhance security in legacy systems by providing a protocol-agnostic solution that maintains backward compatibility and minimizes transmission overhead.
Vulnerabilities
Research Identifies Vulnerabilities in AES-like Hashing Methods
Nov 22, 2024 A recent study has revealed vulnerabilities in AES-like hashing methods to chosen-prefix collision attacks, highlighting the need for reassessment of their security in cryptographic systems.
Tools
Research Paper on Multi-Group Homomorphic Encryption Published
Nov 22, 2024 A recent research paper explores advancements in multi-group homomorphic encryption, introducing practical proof systems that enhance the efficiency and security of cryptographic protocols.
Vulnerabilities
Researcher Proposes Watermarking Method for Deep Neural Networks
Nov 22, 2024 Ikuya Morikawa from Fujitsu Limited has published a paper proposing a new defense mechanism called bounding-box watermarking to protect deep neural networks from model extraction attacks.
Vulnerabilities
Study Examines Limitations of Post-Compromise Security in Messaging Systems
Nov 22, 2024 A study reveals that popular secure communication systems, including Signal and WhatsApp, cannot achieve full Post-Compromise Security due to their reliance on state recovery methods and inherent usability challenges.