Open Source Archives - AZGAD WEBSITE SECURITY BLOG

Wednesday, January 22, 2025

Latest:

2021-01-09 Becky Bracken

Malicious Software Infrastructure Easier to Get and Deploy Than Ever

Researchers at Recorded Future report a rise in cracked Cobalt Strike and other open-source adversarial tools with easy-to-use interfaces.

advanced persistent threat apt C2 Cobalt Strike command and control server Malware Metasploit Open Source PupyRAT Web Security

2021-01-09 Becky Bracken

Malicious Software Infrastructure Easier to Get and Deploy Than Ever

Researchers at Recorded Future report a rise in cracked Cobalt Strike and other open-source adversarial tools with easy-to-use interfaces.

Amnesia:33 embedded systems flaws Internet of Things IoT Open Source operational technology OT patch Podcasts Routers Security Vulnerabilities tcp/ip TCP/IP Stack Vulnerabilities

2020-12-08 Lindsey O'Donnell

‘Amnesia:33’ TCP/IP Flaws Affect Millions of IoT Devices

A new set of vulnerabilities has been discovered affecting millions of routers and IoT and OT devices from more than 150 vendors, new research warns.

Bishop Fox CVE-2020-28937 CVE-2020-28938 CVE-2020-28939 Electronic Medical Records information disclosure medical records management Open Source openclinic patient data theft personal health information PHI Security Vulnerabilities unpatched Vulnerabilities

2020-12-01 Tara Seals

Electronic Medical Records Cracked Open by OpenClinic Bugs

Four security vulnerabilities in an open-source medical records management platform allow remote code execution, patient data theft and more.

bug hunter contact tracing contact tracing app Corona Warn App COVID-19 CWA Data Privacy Germany github java bean validation Open Source rce flaw remote code execution security vulnerability Vulnerabilities Web Security

2020-11-20 Becky Bracken

German COVID-19 Contact-Tracing Vulnerability Allowed RCE

Bug hunters at GitHub Security Labs help shore up German contact tracing app security, crediting open source collaboration.

APT40 Azure Azure active directory Chinese state sponsored hacker cloud attack Cloud Security COVID-19 pandemic Gadolinium github hacker Hacks Microsoft OneDrive Open Source PowerShell powershell empire toolkit spear phishing attack Web Security

2020-09-25 Lindsey O'Donnell

Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks

An APT group has started heavily relying on cloud services like Azure Active Directory and OneDrive, as well as open-source tools, to obfuscate its attacks.

90 days Bug Bounty coordinated disclosure Facebook Open Source public disclosure third party code VDP Vulnerabilities vulnerability disclosure policy Web Security

2020-09-04 Tara Seals

Facebook Debuts Third-Party Vulnerability Disclosure Policy

If the social-media behemoth finds a bug in another platform’s code, the project has 90 days to remediate before Facebook goes public.

Breach data breach Have I Been Pwned Open Source Troy Hunt

2020-08-07 Tara Seals

Have I Been Pwned Set to Go Open-Source

Fully opening the door to allow people to contribute to – and notably, tinker with – the code for the data-breach information service will be an entirely next-level effort, according to founder Troy Hunt.