Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.
Webshells have been popular for a long time. We already covered this topic across multiple diaries[1][2]. I spent some time to track them[3] and slighly paid less attention to them but today I found another one. It seems to be a new player (pushed on Github two months ago).
Attackers no longer need to sift through massive credential dumps. They can pay others to do it for them. Flare explores how an emerging underground market searches stolen credential databases for specific companies, domains, and accounts. […]
Mit RoguePlanet hat ein anonymer Sicherheitsforscher einen Exploit veröffentlicht, der lokalen Angreifern auf Windows 10 und Windows 11 über eine Race Condition im Defender-Echtzeitscanner SYSTEM-Rechte verschafft. Betroffen sind auch vollständig aktualisierte Systeme mit den aktuellen Juni-Updates. Ein Patch von Microsoft liegt noch nicht vor.