|
You are here |
www.deepinstinct.com | ||
| | | | |
www.cybereason.com
|
|
| | | | | Cybereason GSOC observed distribution of the Bumblebee Loader and post-exploitation activities including privilege escalation, reconnaissance and credential theft. Bumblebee operators use the Cobalt Strike framework throughout the attack and abuse credentials for privilege escalation to access Active Directory, as well as abusing a domain administrator account to move laterally, create local user accounts and exfiltrate data... | |
| | | | |
adsecurity.org
|
|
| | | | | [AI summary] The article discusses techniques for extracting credentials from Windows systems, focusing on dumping LSASS memory and Active Directory databases to compromise security. | |
| | | | |
thehackernews.com
|
|
| | | | | Beware! Kinsing cryptojacking attacks are targeting Kubernetes clusters through misconfigured PostgreSQL. | |
| | | | |
srcincite.io
|
|
| | | When I was researching exploit primitives for the SQL Injection vulnerabilities discovered in Cisco DCNM, I came across a generic technique to exploit SQL In... | ||