Weekly Update 441
Processing data breaches (especially big ones), can be extremely laborious. And, of course, everyone commenting on them is an expert, so there's a heap...
Gootloader inside out – Sophos News
...
That hidden element had links (selected with green) and the matching targeted search terms (selected with brown):
This hidden element will not be visible to...
Hackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
A cross-site scripting (XSS) vulnerability in a virtual tour framework has been weaponized by malicious actors to inject malicious scripts across hundreds of websites...
Sophos named a Gartner® Peer Insights™ Customers’ Choice for Managed Detection and Response (MDR) Services for the 2nd time – Sophos News
For most organizations, the complexity and cost of recruiting, training, and retaining a highly skilled team of security operations analysts is a significant challenge....
Fake GitHub projects distribute stealers in GitVenom campaign
In our modern world, it’s difficult to underestimate the impact that open-source code has on software development. Over the years, the global community has...
Tool update: sigs.py – added check mode
Over the years, I've written a number of scripts to make my life easier. One of those tools was sigs.py (which was a rewrite...
