#javascript malware

[therealistjuggernaut]

AXIOS SUPPLY CHAIN BREACH — MALICIOUS NPM RELEASE DELIVERS REMOTE ACCESS TROJAN ACROSS GLOBAL DEV PIPELINES

Threat Summary Category: Cybersecurity Threat IntelligenceFeatures: Supply Chain Compromise, Postinstall Malware Execution, Multi-Stage Payl

[thesecuritysleuth]

Sunday Round Up - 29 July 2018

amzn_assoc_ad_type = "banner"; amzn_assoc_marketplace = "amazon"; amzn_assoc_region = "US"; amzn_assoc_placement = "assoc_banner_placement_default"; amzn_assoc_campaigns = "amzn_vicc_cloudcam_1017"; amzn_assoc_banner_type = "category"; amzn_assoc_isresponsive = "true"; amzn_assoc_banner_id = "1J0CHGJT75D586M66602"; amzn_assoc_tracking_id = "kraljevicn1-20"; amzn_assoc_linkid = "c122cc4768b349b4aab7d3099b74ea1c";

Sunday Round up for this week!

Articles:

Reversing JS Malware From marveloptics.com

RidRelay – SMB Relay Attack For Username Enumeration

Watch a Hacker Install a Firmware Backdoor on a Laptop in Less Than 5 Minutes

Vulnhub Machines Walkthrough Series — Mr. Robot

A Guide to Managing Cloud Security

If you found some other interesting stuff this week feel free to leave a link to it in the comments section. Otherwise feel free to check out the last roundup here.

These round ups are brought to you by PassVult.

[geekmusthave]

Just when you thought it was good to go outside, Equifax once more.

Just when you thought it was good to go outside, Equifax once more.

On Oct.12, security researcher Randy Abrams first publicly posted that he had found a new Equifax risk that was exploiting users. The immediate concern was that Equifax had potentially been breached, yet again.

As it turns out, the vulnerability was not the result of a new breach at Equifax, but rather the result of third party JavaScript code used for website performance tracking. The same…

View On WordPress