Using Legitimate GitHub URLs for Malware

Interesting social-engineering attack vector: McAfee released a report on a new LUA malware loader distributed through what appeared to be a legitimate Microsoft GitHub repository for the “C++ Library Manager for Windows, Linux, and MacOS,” known as vcpkg. The attacker…

The Role of Cybersecurity Training in Compliance

Learn about the role of cybersecurity training in compliance. Discover how OffSec’s training can contribute to a strong compliance posture. The post The Role of Cybersecurity Training in Compliance appeared first on OffSec. This article has been indexed from OffSec…

CVEs Targeting Remote Access Technologies

In this first quarter of 2024, threat actors have been particularly busy in exploiting vulnerabilities (0-days but also old unpatched flaws) targeting traditional remote access technologies. In this blog post I summarized the main CVEs exploited so far in 2024.…