ATTACK DATABÁZE 2026(4) 2025(44) 2024(30) 2023(20) 2022(8) 2021(7) 2020(30) Other(215) DATABAZE CATEGORY
DATE |
NAME |
INFO |
CATEGORY |
SUBCATEGORIES |
| 28.3.26 | Ghost SPN Attack | The Ghost SPN Attack: Catching Stealthy Kerberoasting Before It's Too Late Using Trellix NDR | ATTACK | ATTACK |
| 30.1.26 | LLM Jacking | LLM jacking is an attack technique that cybercriminals use to manipulate and exploit an enterprise’s cloud-based LLMs (large language models). LLM jacking involves stealing and selling cloud account credentials to enable malicious access to an enterprise’s LLMs while the victim unknowingly covers the consumption costs. | ATTACK | AI |
| 28.1.26 | TOAD Attack | When Zoom Phishes You: Unmasking a Novel TOAD Attack Hidden in Legitimate Infrastructure | ATTACK | ATTACK |
| 20.1.26 | Semantic Attack | Weaponizing Calendar Invites: A Semantic Attack on Google Gemini | ATTACK |
AI |
|
25.12.25 |
GhostPairing Attacks: from phone number to full access in WhatsApp |
|||
| 14.12.25 | ConsentFix attack | ConsentFix: Analysing a browser-native ClickFix-style attack that hijacks OAuth consent grants | ATTACK | WEB |
| 6.12.25 | HashJack Attack | HashJack Attack Targets AI Browsers and Agentic AI Systems | ATTACK | AI |
| 25.11.25 | "JackFix" attack | Fake adult websites pop realistic Windows Update screen to deliver stealers via ClickFix | ATTACK | ATTACK |
| 29.10.25 | AI-targeted Cloaking Attack | OpenAI’s new browser Atlas falls for AI-targeted Cloaking Attack | ATTACK | AI |
| 29.10.25 | TEE.fail | Trusted execution environments (TEEs) aim to offer strong privacy and integrity guarantees even in the presence of root level attackers capable of arbitrarily modifying the system’s software. | RAM | |
| 16.10.25 | RMPocalypse | How a Catch-22 Breaks AMD SEV-SNP (ACM CCS 2025) | ATTACK | CPU |
| 16.10.25 | Pixnapping Attack | Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites. | ATTACK | Android |
|
11.10.25 |
Mousejacking | What Are Mousejacking Attacks, and How to Defend Against Them | ATTACK | |
|
11.10.25 |
Cloud Jacking | With the widespread adoption of cloud infrastructure, cybercriminals have evolved their tactics to exploit new opportunities for access. One growing threat is cloud jacking, or cloud account hijacking, where an attacker takes control of a cloud account. | ATTACK | ATTACK |
| 31.8.25 |
Design Patterns
for Securing LLM Agents against Prompt Injections |
Large Language Models (LLMs) are becoming integral components of complex software systems, where they serve as intelligent agents that can interpret natural language instructions, make plans, and execute actions through external tools and APIs | ATTACK | AI |
| 27.8.25 | Sni5Gect | A 5G Sniffer and Downlink Injector on steroids... And yes, Wireshark supported!!! Supports DCI Sniffing, MAC-NR Downlink/Uplink message sniffing and MAC-NR Downlink message injection | 5G | |
| 21.8.25 | SYNful Knock | SYNful Knock: Detecting and Mitigating Cisco IOS Software Attacks | ATTACK | DDoS |
| 19.8.25 |
Preventing Domain Resurrection Attacks |
PyPI now checks for
expired domains to prevent domain resurrection attacks, a type of supply-chain
attack where someone buys an expired domain and uses it to take over
PyPI accounts through password resets. |
ATTACK | |
| 17.8.25 | GPUHammer | GPUHammer: Rowhammer Attacks on GPU Memories are Practical | ATTACK | GPU |
| 16.7.25 | Hyper-Volumetric DDoS Attacks | Hyper-volumetric DDoS attacks skyrocket: Cloudflare’s 2025 Q2 DDoS threat report | ATTACK | |
| 12.7.25 | GPUHammer | GPUHammer: Rowhammer Attacks on GPU Memories are Practical# | ATTACK | GPU |
| 11.7.25 | PerfektBlue | PerfektBlue is the industry-wide critical over-the-air attack chain affecting millions of devices in automotive and other industries. | ATTACK | bluetooth |
| 10.7.25 | AMD Transient Scheduler Attacks | AMD discovered several transient scheduler attacks related to the execution timing of instructions under specific microarchitectural conditions while investigating a Microsoft® report titled “Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks”. | ATTACK | CPU |
| 5.7.25 | FileFix (Part 2) | Last week I released the FileFix attack blog post which is an alternative to the traditional ClickFix attack. This blog post explores another variation to the original FileFix attack. | ATTACK | |
| 24.6.25 | Context Poisoning Jailbreak | Echo Chamber: A Context-Poisoning Jailbreak That Bypasses LLM Guardrails | ATTACK | AI |
| 13.6.25 | TokenBreak Attack | Manipulating tokens to get past the security guard | ATTACK | ATTACK |
| 8.6.25 | AS-REP Roasting Attack Explained | In the MITRE ATT&CK Framework, the AS-REP Roasting attack is categorized as T1558.004 under the 'Steal or Forge Kerberos Tickets' attack technique. | ATTACK | ATTACK |
| 22.5.25 | Kerberoasting | Kerberoasting is a cyberattack that targets the Kerberos authentication protocol with the intent to steal AD credentials. | ATTACK | Windows |
| 16.5.24 | Spectre-v2 Attacks UPDATE | On the Limitations of Domain Isolation Against Spectre-v2 Attacks | CPU | |
| 1.5.24 | MCP Prompt Injection | MCP Prompt Injection: Not Just For Evil | ATTACK | AI |
| 30.4.25 | SLAAC Snooping | NDP messages are unsecured, which makes SLAAC susceptible to attacks that involve the spoofing (or forging) of link-layer addresses. You must configure SLAAC snooping to validate IPv6 clients using SLAAC before allowing them to access the network. | ATTACK | IPv6 |
| 30.4.25 | Context Compliance Attack | (CCA), a jailbreak technique that involves the adversary injecting a "simple assistant response into the conversation history" about a potentially sensitive topic that expresses readiness to provide additional information | ATTACK | AI |
| 30.4.25 | Policy Puppetry Attack | a prompt injection technique that crafts malicious instructions to look like a policy file, such as XML, INI, or JSON, and then passes it as input to the large language model (LLMs) to bypass safety alignments and extract the system prompt | ATTACK | AI |
| 30.4.25 | Memory INJection Attack | (MINJA), which involves injecting malicious records into a memory bank by interacting with an LLM agent via queries and output observations and leads the agent to perform an undesirable action | AI | |
| 27.4.25 | Password Spraying | The basics of a password spraying attack involve a threat actor using a single common password against multiple accounts on the same application. This avoids the account lockouts that typically occur when an attacker uses a brute force attack on a single account by trying many passwords. | ATTACK | Password |
| 25.4.25 | Cookie-Bite attack | Cookie-Bite: How Your Digital Crumbs Let Threat Actors Bypass MFA and Maintain Access to Cloud Environments | ATTACK | COOKIES |
| 23.4.25 | XRP supply chain attack | XRP supply chain attack: Official NPM package infected with crypto stealing backdoor | Crypto | |
| 22.4.25 | DKIM Replay Phishing Attack | Google Spoofed Via DKIM Replay Attack: A Technical Breakdown | ATTACK | PHISHING |
| 16.4.25 |
Multi-Stage Phishing Attack Exploits Gamma |
Attackers exploit Gamma in a multi-stage phishing attack using Cloudflare Turnstile and AiTM tactics to evade detection and steal Microsoft credentials. | ATTACK | AI |
|
21.3.25 |
Trusted relationship attacks | Trusted relationship attacks: trust, but verify |
ATTACK |
|
|
19.3.25 |
Rules File Backdoor | New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents | ATTACK | AI |
|
16.3.25 |
VPN brute-force attacks | Inside BRUTED: Black Basta (RaaS) Members Used Automated Brute Forcing Framework to Target Edge Network Devices | VPN | |
| 7.3.25 |
JavaScript Backdoors Enabling Persistent Attacker Access |
Thousands of websites hit by four backdoors in 3rd party JavaScript attack | ATTACK | JavaScript |
| 15.2.25 | whoAMI Attack | whoAMI: A cloud image name confusion attack | ATTACK | Cloud |
| 5.2.25 | Memcached DDoS attack | Memcached can speed up websites, but a memcached server can also be exploited to perform a DDoS attack. | ATTACK | DDoS |
|
1.1.25 |
DoubleClickjacking | is a new variation on this classic theme: instead of relying on a single click, it takes advantage of a double-click sequence. | ATTACK | Web |
|
25.11.24 |
The Dark Side of Domain-Specific Languages: Uncovering New Attack Techniques in OPA and Terraform |
ATTACK |
||
|
14.11.24 |
DNS Predators Hijack Domains to Supply their Attack Infrastructure |
DNS |
||
2.8.24 | Sitting Ducks | Researchers at Infoblox and Eclypsium have discovered that a powerful attack vector in the domain name system (DNS) is being widely exploited across many DNS providers. | Domain | |
| 13.7.24 | Blast-RADIUS Attack | Blast-RADIUS, an authentication bypass in the widely used RADIUS/UDP protocol, enables threat actors to breach networks and devices in man-in-the-middle MD5 collision attacks. | PROTOCOL | |
9.7.24 | RADIUS | RADIUS is almost thirty years old, and uses cryptography based on MD5. Given that MD5 has been broken for over a decade, what are the implications for RADIUS? Why is RADIUS still using MD5? | Protocol | |
| 2.7.24 |
High-Precision Branch Target Injection Attacks Exploiting the Indirect Branch Predictor |
introduces novel high-precision Branch Target Injection (BTI) attacks, leveraging the intricate structures of the Indirect Branch Predictor (IBP) and the Branch Target Buffer (BTB) in high-end Intel CPUs (Raptor Lake and Alder Lake). | CPU | |
| 17.6.24 | ARM 'TIKTAG' attack | TIKTAG: Breaking ARM’s Memory Tagging Extension with Speculative Executi | ARM CPU | |
23.5.24 | Positive Technologies detects a series of attacks via Microsoft Exchange Server |
Exchange |
||
17.5.24 | SSID Confusion Attack | This vulnerability exploits a design flaw in the WiFi standard, allowing attackers to trick WiFi clients on any operating system into connecting to a untrusted network. | WIFI | |
10.5.24 | ServerIP Attack | Tricking the VPN client into using the wrong server IP | VPN | |
10.5.24 | LocalNet Attack | On Windows, Linux, macOS and Android we are not vulnerable to the LocalNet attack. We never leak traffic to public IPs outside the VPN tunnel. However, on iOS we are affected by this attack vector. | VPN | |
10.5.24 | LLMjacking | LLMjacking: Stolen Cloud Credentials Used in New AI Attack | Cloud | |
9.5.24 | DHCP Starvation Attack | In DHCP starvation attacks, an attacker floods the DHCP server with DHCP requests to consume all available IP addresses that the DHCP server can allocate. After these IP addresses are allocated, the server cannot allocate any more addresses and this situation leads to a Denial of Service (DoS) attack as new clients cannot gain network access. | DHCP | |
8.5.24 | Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor |
CPU |
||
| 24.4.24 | Dependency Confusion | Dependency confusion (also known as dependency repository hijacking, substitution attack, or repo jacking for short) is a software supply chain attack that substitutes malicious third-party code for a legitimate internal software dependency. There are various approaches to creating this kind of attack vector, including: | Attack | |
10.4.24 |
We present InSpectre Gadget, an in-depth Spectre gadget inspector that uses symbolic execution to accurately reason about exploitability of usable gadgets. Our tool performs generic constraint analysis and models knowledge of advanced exploitation techniques to accurately reason over gadget exploitability in an automated way. |
CPU |
||
| 4.4.24 |
VU#421644: HTTP/2 CONTINUATION frames can be utilized for DoS attacks |
HTTP allows messages to include named fields in both header and trailer sections. These header and trailer fields are serialised as field blocks in HTTP/2, so that they can be transmitted in multiple fragments to the target implementation | Alert | |
| 4.4.24 | HTTP/2 ‘Rapid Reset’ DDoS attack | A number of Google services and Cloud customers have been targeted with a novel HTTP/2-based DDoS attack which peaked in August. These attacks were significantly larger than any previously-reported Layer 7 attacks, with the largest attack surpassing 398 million requests per second. | HTTP | |
| 4.4.24 | HTTP/2 CONTINUATION Flood | tl;dr: Deep technical analysis of the CONTINUATION Flood: a class of vulnerabilities within numerous HTTP/2 protocol implementations. In many cases, it poses a more severe threat compared to the Rapid Reset: a single machine (and in certain instances, a mere single TCP connection or a handful of frames) has the potential to disrupt server availability, with consequences ranging from server crashes to substantial performance degradation. | HTTP | |
| 27.3.24 | ZENHAMMER: Rowhammer Attacks | on AMD Zen-based Platforms | CPU | |
| 23.3.24 | GoFetch Attack | GoFetch is a microarchitectural side-channel attack that can extract secret keys from constant-time cryptographic implementations via data memory-dependent prefetchers (DMPs). | side-channel attack | |
| 22.3.24 | Loop DoS | Loop DoS: New Denial-of-Service Attack targets Application-Layer Protocols | Application-Layer Protocols | |
| 8.3.24 | CRLF Injection | The term CRLF refers to Carriage Return (ASCII 13, \r) Line Feed (ASCII 10, \n). They’re used to note the termination of a line, however, dealt with differently in today’s popular Operating Systems. For example: in Windows both a CR and LF are required to note the end of a line, whereas in Linux/UNIX a LF is only required. In the HTTP protocol, the CR-LF sequence is always used to terminate a line. | OS | |
| 5.3.24 | PASS-THE-HASH ATTACK | Pass the hash (PtH) is a type of cybersecurity attack in which an adversary steals a “hashed” user credential and uses it to create a new user session on the same network. Unlike other credential theft attacks, a pass the hash attack does not require the attacker to know or crack the password to gain access to the system. Rather, it uses a stored version of the password to initiate a new session. | PtH | |
| 4.3.24 | ComPromptMized | ComPromptMized: Unleashing Zero-click Worms that Target GenAI-Powered Applications | AI | |
| 2.3.24 | GOLDEN TICKET | A Golden Ticket attack is a malicious cybersecurity attack in which a threat actor attempts to gain almost unlimited access to an organization’s domain (devices, files, domain controllers, etc.) by accessing user data stored in Microsoft Active Directory (AD). | Attack | |
| 2.3.24 | Golden SAML | Golden SAML, an attack technique that exploits the SAML single sign-on protocol, was used as a post-breach exploit, compounding the devastating SolarWinds attack of 2020—one of the largest breaches of the 21st century. | Attack | |
3.2.24 | NTLM relay attacks A dangerous game of hot potato |
Attack |
||
29.1.24 |
Android, Java apps susceptible to novel MavenGate software supply chain attack technique |
Supply chain |
||
20.1.24 |
Adversaries may use a single or small list of commonly used passwords against many different accounts to attempt to acquire valid account credentials. |
Brute Force |
||
12.1.24 |
Apache Applications Targeted by Stealthy Attacker |
Apache |
||
1.1.24 |
Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation |
SSH |
||
10.12.23 |
An in-domain transient execution attack allows a sandboxed adversary to access a secret within the same domain by circumventing software-based access controls. |
CPU |
||
10.12.23 |
A cross-domain transient execution attack5 requires the adversary to find a disclosure gadget in the victim’s domain which, when executed transiently, can transiently access6 and transmit a secret over a covert channel. |
CPU |
||
10.12.23 |
In a domain-bypass transient execution attack, the adversary executes transient instructions that circumvent hardware-based access controls, allowing access to a secret outside of the adversary’s domain. |
CPU |
||
10.12.23 |
A transient execution attack exploits the microarchitectural side effects of transient instructions, thus allowing a malicious adversary to access information that would ordinarily be prohibited by architectural access control mechanisms. |
CPU |
||
8.12.23 |
SLAM: SPECTRE BASED ON LINEAR ADDRESS MASKING |
CPU |
||
5.12.23 |
BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses |
Bluethoot |
||
4.12.23 |
LogoFAIL: Security Implications of Image Parsing During System Boot |
BIOS |
||
28.11.23 |
A prompt injection attack is a type of cyberattack where a hacker enters a text prompt into a large language model (LLM) or chatbot, which is designed to enable the user to perform unauthorized actions. |
AI |
||
28.11.23 |
The Marvin Attack is a return of a 25 year old vulnerability that allows performing RSA decryption and signing operations as an attacker with the ability to observe only the time of the decryption operation performed with the private key. |
Crypto |
||
25.11.23 |
The web shell, a dynamic-link library (DLL) named "hrserv.dll," exhibits "sophisticated features such as custom encoding methods for client communication and in-memory execution |
WebShell |
||
15.11.23 |
CacheWarp: Software-based Fault Injection using Selective State Res |
Attack |
||
27.10.23 |
Layer 3 DDoS attacks target layer 3 (L3) in the OSI model. Like all DDoS attacks, the goal of a layer 3 attack is to slow down or crash a program, service, computer, or network, or to fill up capacity so that no one else can receive service. L3 DDoS attacks typically accomplish this by targeting network equipment and infrastructure. |
Attack |
||
27.10.23 |
HTTP/2 Rapid Reset: deconstructing the record-breaking attack |
Attack |
||
11.10.23 |
HTTP/2 Rapid Reset: deconstructing the record-breaking attack |
Attack |
||
4.7.23 |
DDoSia is a Distributed Denial of Service (DDoS) attack toolkit, developed and used by the pro Russia hacktivist nationalist group NoName057(16).. |
|||
27.6.23 | "The Great Seal Bug", a.k.a., "the Thing," was the first covert listening device that utilized passive techniques to transmit an audio signal for the purpose of speech eavesdropping. |
|||
24.6.23 | Repo Jacking: Exploiting the Dependency Supply Chain |
|||
22.6.23 | nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover |
|||
25.3.23 |
Capturing RDP NetNTLMv2 Hashes: Attack details and a Technical How-To Guide |
|||
11.3.23 |
An AiTM attack typically involves a threat actor attempting to steal and intercept a target’s password and session cookies by deploying a proxy server between the user and the website. |
|||
16.6.22 | Hertzbleed is a new family of side-channel attacks: frequency side channels. In the worst case, these attacks can allow an attacker to extract cryptographic keys from remote servers that were previously believed to be secure. |
Attack |
||
11.6.22 |
PACMAN: Attacking ARM Pointer Authentication with Speculative Execution |
We demonstrate multiple proof-of-concept attacks of PACMAN on the Apple M1 SoC, the first desktop processor that supports ARM Pointer Authentication. We reverse engineer the TLB hierarchy on the Apple M1 SoC and expand micro-architectural side-channel attacks to Apple processors. |
Attack |
|
31.5.22 |
Microsoft has now revealed the CVE identifier for this vulnerability is CVE-2022-30190, including a Security Update and article with guidance... but no patch looks to be available as of yet. |
Attack |
||
20.5.22 |
An attacker can falsely indicate the proximity of Bluetooth LE (BLE) devices to one another through the use of a relay attack. This may enable unauthorized access to devices in BLE-based proximity authentication systems. |
Bluetooth Attack |
||
4.5.22 |
A Chinese-aligned cyberespionage group has been observed striking the telecommunication sector in Central Asia with versions of malware such as ShadowPad and PlugX. |
Attack Exploit |
||
30.4.22 |
Earlier this month, Cloudflare’s systems automatically detected and mitigated a 15.3 million request-per-second (rps) DDoS attack — one of the largest HTTPS DDoS attacks on record. |
HTTPS DDoS |
||
2.3.22 |
UDP |
|||
2.3.22 |
ATTACK | DDoS |
||
27.6.21 |
Stripping away the encryption offered by HTTPS, called SSL Strip, is a serious cyber threat to many corporations since their employees are constantly on the move and require access to Internet on-the-go even through open non-secure Wi-Fi hotspots. Once attackers gain access to a network, they can act as a Man-in-the-Middle (MITM) to intercept connections over the network. |
SSL Attack |
||
27.6.21 |
In the last few years, major improvements have been made to the security of Wi-Fi. Most notably this includes the discovery and prevention of key reinstallation in WPA2, and the standardization of WPA3 which, among other things, prevents offline dictionary attacks. |
Wifi Attack |
||
6.3.21 |
A SIM swap scam (also known as port-out scam, SIM splitting, Smishing and simjacking, SIM swapping) is a type of account takeover fraud that generally targets a weakness in two-factor authentication and two-step verification in which the second factor or step is a text message (SMS) or call placed to a mobile telephone. |
SIM SPAM |
||
22.2.21 |
Telephony denial of service (TDoS) is a type of denial of service (DoS) attack in which the attackers launch high volume of calls and keeping those calls active for as long as possible against the target network, preventing legitimate calls to come in. |
VoIP DoS |
||
20.2.21 |
Sneaky attackers are flipping backslashes in phishing email URLs to evade protections, researchers said. Researchers from GreatHorn report they have observed a nearly 6,000-percent jump in attacks using “malformed URL prefixes” to evade protections and deliver phishing emails that look legit |
Phishing |
||
20.2.21 |
EMV is the international protocol standard for smartcard payment and is used in over 9 billion cards worldwide. Despite the standard’s advertised security, various issues have been previously uncovered, deriving from logical flaws that are hard to spot in EMV’s lengthy and complex specification, running over 2,000 pages. |
Credit Card |
||
20.2.21 |
Card Brand Mixup Attack: |
Most EMV transactions require online authorization by the card issuer. Namely, the merchant’s payment terminal sends an authorization request to the card issuer over a payment network, typically operated by the company that brands the card such as Visa or Mastercard. |
Credit Card |
|
|
13.12.20 |
PDF documents and PDF generators are ubiquitous on the web, and so are injection vulnerabilities. Did you know that controlling a measly HTTP hyperlink can provide a foothold into the inner workings of a PDF. |
XSS |
||
|
17.11.20 |
Hardware-based fault injection attacks such as voltage and clock glitching have been thoroughly studied on embedded devices. Typical targets for such attacks include smartcards and low-power microcontrollers used in IoT devices |
Hardware |
||
|
13.11.20 |
In this paper, we report a series of flaws in the software stack that leads to a strong revival of DNS cache poisoning — a classic attack which is mitigated in practice with simple and effective randomization-based defenses such as randomized source port. |
DNS |
||
|
2.11.20 |
NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim's NAT/firewall (arbitrary firewall pinhole control), just by the victim visiting a website. |
TCP/UDP |
||
13.9.20 |
There was an easily exploitable uncontrolled memory resource consumption denial-of-service vulnerability that existed in the peer-to-peer network code of three implementations of Bitcoin and several alternative chains. |
CryptoCurrency |
||
10.9.20 |
Bluetooth 4.0 through 5.0 versions are affected by the vulnerability dubbed BLURtooth which allows hackers to defeat Bluetooth encryption. |
Bluetooth |
||
10.9.20 |
A group of researchers has detailed a new timing vulnerability in Transport Layer Security (TLS) protocol that could potentially allow an attacker to break the encryption and read sensitive communication under specific conditions. |
SSL/TLS |
||
3.9.20 |
CHARGEN Reflection attacks take advantage of the Character Generation Protocol, originally designed for troubleshooting, which allows sending a random number of characters. |
DDoS |
||
3.9.20 |
A CLDAP Reflection Attack exploits the Connectionless Lightweight Directory Access Protocol (CLDAP), which is an efficient alternative to LDAP queries over UDP. |
DDoS |
||
1.9.20 |
BloodHound is a popular open-source tool for enumerating and visualizing the domain Active Directory and is used by red teams and attackers as a post-exploitation tool. The enumeration allows a graph of domain devices, users actively signed into devices, and resources along with all their permissions. |
Active Directory |
||
13.8.20 |
'PowerFall' Attacks |
Windows and IE Zero-Day Vulnerabilities Chained in 'PowerFall' Attacks. An attack launched in May 2020 against a South Korean company involved an exploit that chained zero-day vulnerabilities in Windows and Internet Explorer, Kaspersky reported on Wednesday. |
Vulnerebility |
|
13.8.20 |
Voice over LTE (VoLTE) is a packet-based telephony service seamlessly integrated into the Long Term Evolution (LTE) standard and deployed by most telecommunication providers in practice |
4G (LTE) |
||
9.8.20 |
In advanced phishing attacks today, phishing emails may contain homogyph characters. homoglyph is a text character with shapes that are near identical or similar to each other. |
Phishing |
||
6.8.20 |
HTTP request smuggling is an interesting vulnerability type that has gained popularity over the last year. This vulnerability could allow an attacker to leverage specific features of the HTTP/1.1 protocol in order to bypass security protections, conduct phishing attacks, as well as obtain sensitive information from requests other than their own. |
HTTP |
||
6.8.20 |
HTTP Request Smuggling Attack |
Variant 1: "Header SP/CR junk: |
HTTP |
|
6.8.20 |
HTTP Request Smuggling Attack |
Variant 2 – "Wait for It" |
HTTP |
|
6.8.20 |
HTTP Request Smuggling Attack |
Variant 3 – HTTP/1.2 to bypass mod_security-like defense |
HTTP |
|
|
6.8.20 |
HTTP Request Smuggling Attack |
Variant 4 – a plain solution |
HTTP |
|
|
6.8.20 |
HTTP Request Smuggling Attack |
Variant 5 – "CR header" |
HTTP |
|
31 .7.20 |
Timing attacks are usually used to attack weak computing devices such as smartcards. We show that timing attacks apply to general software systems. Specifically, we devise a timing attack against OpenSSL. |
Crypto |
||
23 .7.20 |
A new attack that searches for unsecured databases and deletes the data without explanation has been found by researchers. This attack, dubbed “Meow,” due to the fact that the attacker renames databases, tables and indices by appending “-meow” to the end of the original names, was verified by BleepingComputer with the use of the Shodan search engine. |
Database |
||
5.7.20 |
Spies Can Listen to Your Conversations by Watching a Light Bulb in the Room.You might not believe it, but it's possible to spy on secret conversations happening in a room from a nearby remote location just by observing a light bulb hanging in there—visible from a window—and measuring the amount of light it emits. |
Hacking |
||
5.7.20 |
Modern Intel and AMD processors are susceptible to a new form of side-channel attack that makes flush-based cache attacks resilient to system noise, newly published research shared with The Hacker News has revealed. |
CPU |
||
5.7.20 |
Cybersecurity researchers have discovered two distinct attacks that could be exploited against modern Intel processors to leak sensitive information from the CPU's trusted execution environments (TEE). |
CPU |
||
|
23.5.20 |
The NXNSAttack is a new vulnerability that exploits the way DNS recursive resolvers operate when receiving NS referral response that contains nameservers but without their corresponding IP addresses (i.e., missing glue-records). |
DNS Attack |
||
|
7.3.20 | The internationalized domain name (IDN) homograph attack is a way a malicious party may deceive computer users about what remote system they are communicating with, by exploiting the fact that many different characters look alike (i.e., they are homographs, hence the term for the attack, although technically homoglyph is the more accurate term for different characters that look alike). |
Communication |
||
|
3.3.20 |
Interactive Hidden Attack on VoiceAssistants Using Ultrasonic Guided Waves |
|||
|
25.2.20 |
In mobile networks, mutual authentication ensures that the smartphone and the network can verify their identities. In LTE, mutual authentication is established on the control plane with a provably secure authentication and key agreement protocol. However, missing integrity protection of the user plane still allows an adversary to manipulate and redirect IP packets. |
4G |
||
29 .1.20 |
If your computer is running any modern Intel CPU built before October 2018, it's likely vulnerable to a newly discovered hardware issue that could allow attackers to leak sensitive data from the OS kernel, co-resident virtual machines, and even from Intel's secured SGX enclave. |
CPU |
||
|
9.1.20 | We have computed the very first chosen-prefix collision for SHA-1. In a nutshell, this means a complete and practical break of the SHA-1 hash function, with dangerous practical implications if you are still using this hash function. To put it in another way: all attacks that are practical on MD5 are now also practical on SHA-1. Check our paper here for more details. |
Crypto |
||
24.12.19 | Pokud vás dokáže útočník využívající útok MITM (Man-In-The-Middle, člověk uprostřed) podvést, abyste navštívili jeho podvrženou stránku, a vyzve vás k zadání vašich přihlašovacích údajů 2FA, je to v podstatě konec. |
2FA |
||
24.12.19 | Podobně jako u útoků MITM, pokud dokáže hacker dostat svůj škodlivý software do vašeho počítače, může upravit software, který se používá ve vašem procesu 2FA, a to buď k odcizení tajemství chráněných tokenem 2FA, nebo k použití již schválené autentizace pro přístup k něčemu v zákulisí. |
2FA |
||
24.12.19 | Specializovaný útok typu „člověk v koncovém bodu“ může mít podobu kompromitace softwaru souvisejícího se zařízením 2FA. Například k použití čipové karty v zařízení je potřebný software pro čipové karty, který čipovou kartu obsluhuje a rozumí jí. |
2FA |
||
24.12.19 | Mnoho hardwarových a softwarových tokenů 2FA generuje jednorázový kód, který je pro daného uživatele a zařízení jedinečný. |
2FA |
||
24.12.19 | Mnoho služeb včetně populárních webových stránek, které umožňují používat 2FA, ji nevyžadují, což ale samotný účel zavedení 2FA sabotuje. |
2FA |
||
24.12.19 | Existuje malé špinavé tajemství, které před vámi chtějí dodavatelé čipových karet tajit – každé zařízení/software 2FA jsou svázané s identitou uživatele/zařízení. Tato identita musí být v rámci autentizačního systému jedinečná. |
2FA |
||
24.12.19 | Vaše atributy biometrické totožnosti (např. otisky prstů nebo sken sítnice) lze ukrást a opakovaně používat. Přitom je velmi těžké bránit útočníkovi, aby je používal. |
2FA |
||
24.12.19 | Dnes jsou populární sdílená integrovaná autentizační schémata, jako je například oAuth, která umožňují uživateli přihlásit se jednou a znovu použít toto pověření (často v pozadí) k přihlášení k dalším službám a webovým stránkám. |
2FA |
||
24.12.19 | Jak stále více webových stránek umožňuje nebo vyžaduje 2FA, hackeři se naučili, jak to vyřešit pomocí sociálního inženýrství. |
2FA |
||
24.12.19 | Ztráta 2FA tokenů a jejich získání hackery není nic nového. Pokud web nebo služba používající přihlášení 2FA nepoužívá kontrolu špatných pokusů o přihlášení, mohou se útočníci pokoušet uhádnout PIN kód pro 2FA opakovaným zkoušením, dokud se netrefí. |
2FA |
||
24.12.19 | Je realističtější předpokládat, že je více webů a softwaru s přihlašováním 2FA, které obsahují chyby umožňující obejít 2FA, než webů, jež jsou zcela bezpečné. Zde je příklad (www.zdnet.com/article/uber-security-flaw-two-factor-login-bypass/), ale existují stovky dalších příkladů implementací 2FA s chybami. |
2FA |
||
11.12.19 | Modern processors are being pushed to perform faster than ever before - and with this comes increases in heat and power consumption. To manage this, many chip manufacturers allow frequency and voltage to be adjusted as and when needed. But more than that, they offer the user the opportunity to modify the frequency and voltage through priviledged software interfaces. |
CPU |
||
20.11.19 | iTLB multihit is an erratum where some processors may incur a machine check error, possibly resulting in an unrecoverable CPU lockup, when an instruction fetch hits multiple entries in the instruction TLB. This can occur when the page size is changed along with either the physical address or cache type. A malicious guest running on a virtualized system can exploit this erratum to perform a denial of service attack. |
CPU |
||
20.11.19 | Starting with the second-generation Intel® Core™ Processors and Intel® Xeon® E3-1200 Series Processors (formerly codenamed Sandy Bridge) and later processor families, the Intel® microarchitecture introduces a microarchitectural structure called the Decoded ICache (also called the Decoded Streaming Buffer or DSB). |
CPU |
||
13.11.19 | Trusted Platform Module (TPM) serves as a root of trust for the operating system. TPM is supposed to protect our security keys from malicious adversaries like malware and rootkits. |
CPU |
||
13.11.19 | A new speculative vulnerability called ZombieLoad 2, or TSX Asynchronous Abort, has been disclosed today that targets the Transactional Synchronization Extensions (TSX) feature in Intel processors. |
CPU |
||
13.11.19 | The RIDL and Fallout speculative execution attacks allow attackers to leak private data across arbitrary security boundaries on a victim system, for instance compromising data held in the cloud or leaking your data to malicious websites. |
CPU |
||
25.10.19 | Cache-Poisoned Denial-of-Service (CPDoS) is a new class of web cache poisoning attacks aimed at disabling web resources and websites. |
DDoS Attack |
||
12.9.19 | Following extensive research, AdaptiveMobile Security has uncovered a new and previously undetected vulnerability. This vulnerability is currently being exploited and is being used for targeted surveillance of mobile phone users. |
SIM Attack |
||
11.9.19 | NetCAT shows that network-based cache side-channel attacks are a realistic threat. Cache attacks have been traditionally used to leak sensitive data on a local setting (e.g., from an attacker-controlled virtual machine to a victim virtual machine that share the CPU cache on a cloud platform). |
CPU |
||
15.8.19 |
A vulnerability tracked as CVE-2019-9506 and referred as Key Negotiation of Bluetooth (KNOB) attack could allow attackers to spy on encrypted connections. |
Bluetooth |
||
7.8.19 | The SWAPGS Attack, as they call it, circumvents the protective measures that have been put in-place in response to earlier attacks such as Spectre and Meltdown. Still, there is plenty of good news: Microsoft has already released Windows patches for the flaw that makes the attack possible and, even though feasible, the researchers don’t expect the attack to be exploited for widespread, non-targeted attacks. |
CPU |
||
16.7.19 |
Below, I will describe two ‘app-in-the-middle’ attacks, where a malicious app is installed in the personal profile and acts as an agent to steal information from (and even control) the Work profile and hand it off to an attacker’s Command & Control server. |
App Attack |
||
12.6.19 |
The Rowhammer bug is a reliability issue in DRAM cells that can enable an unprivileged adversary to flip the values of bits in neighboring rows on the memory module. Previous work has exploited this for various types of fault attacks across security boundaries, where the attacker flips inaccessible bits, often resulting in privilege escalation. It is widely assumed however, that bit flips within the adversary’s own private memory have no security implications, as the attacker can already modify its private memory via regular write operations. |
RAM Attack |
||
15.5.19 |
After Meltdown, Spectre, and Foreshadow, we discovered more critical vulnerabilities in modern processors. The ZombieLoad attack allows stealing sensitive data and keys while the computer accesses them. |
CPU Attack |
||
14.5.19 |
New attacks extract data from CPU buffers. Two attacks dubbed RIDL and Falloutexploit a set of four vulnerabilities collectively known as Microarchitectural Data Sampling (MDS) vulnerabilities - a name given by Intel. The flaws affect Intel CPUs released since 2008, the researchers say. |
CPU Attack |
||
14.5.19 |
Researchers from VUSec - the Systems and Network Security Group at Vrije University in Amsterdam, and from the Helmholtz Center for Information Security (CISPA) have developed the RIDL (short for Rogue In-Flight Data Load) attack. |
CPU Attack |
||
12.4.19 |
In this section we show how to perform password partition attacks, using the information obtained from our timing and cache attacks. This enables an adversary to recover the password of a target. 8.1 Partitioning a Dictionary In the first attack variant, our goal is to recover the password from a given dictionary. We accomplish this by repeatedly partitioning the dictionary into correct and incorrect password candidates. Practically, this is implemented by removing incorrect passwords from the dictionary during each partitioning step. |
WPA 3 Attack |
||
12.4.19 |
In this section we demonstrate that implementations of the hashto-curve algorithm of SAE may be vulnerable to cache-based sidechannel attacks. Similar to the timing attack against MODP groups, this will later on enable an adversary to recover a target’s password. 7.1 Background and Attack Goal The goal of our attack is to learn if the Quadratic Residue (QR) test in the first iteration of the hash-to-curve algorithm succeeded or not. |
WPA 3 Attack |
||
12.4.19 |
In this section we empirically show that the hash-to-group method that converts a password into a MODP element is vulnerable to timing attacks. The obtained info will later on be used in password partitioning attacks, allowing one to recover the victim’s password. 6.1 Background Up to this point, we assumed the SAE handshake is executed using elliptic curves. |
WPA 3 Attack |
||
12.4.19 |
To mitigate our downgrade to dictionary attack, a client should remember if a network supports WPA3-SAE. That is, after successfully connecting using SAE, the client should store that the network supports SAE. From this point onward, the client must never connect to this network using a weaker handshake. |
WPA 3 Attack |
||
12.4.19 |
The SAE handshake can be run using different elliptic curve or multiplicative groups mod p (i.e. ECP or MODP groups). The “Group Description” of gives an overview of supported groups. Additionally, the 802.11 standard allows station to prioritize groups in a user-configurable order |
WPA 3 Attack |
||
12.4.19 |
Our first attack is against WPA3-SAE transition mode. Recall from Section 2.2 that in this mode the AP is configured to accept connections using both WPA3-SAE and WPA2. This provides backward compatibility with older clients. Moreover, WPA2’s 4-way handshake detects downgrade attacks, meaning an attacker cannot trick a WPA3-capable client into successfully establishing a connection using WPA2. |
WPA 3 Attack |
||
9.4.19 |
The increase in the demand for innovative software has effectively reshaped the software development industry itself. Today, speed and agility are paramount and development teams are pushed to deliver highly advanced applications in record time — which means that writing every single line of code from the ground up is often not a sustainable practice. As the NIST puts it, “This ecosystem has evolved to provide a set of highly refined, cost-effective, reusable ICT solutions.” |
ICS Attack |
||
29.3.19 | Every commercial eNB has a maximum capacity of active user connections based on their hardware and software specifications. The purpose of the BTS resource depletion attack is to deplete this capacity of the active RRC Connections, thereby preventing other users from connecting to the target eNB. |
LTE Attack |
||
29.3.19 | Unlike the aforementioned attack that denies multiple users in an eNB, the Blind DoS attack denies a targeted UE by establishing RRC Connections spoofed as the victim UE. 1) Attack model: The attacker performs the attack within the area covered by the victim’s serving eNB. The attacker also knows the victim’s S-TMSI that can be obtained in three ways |
LTE Attack |
||
29.3.19 | During our experiments, we discovered that operational MMEs have several implementation flaws that cause them to unnecessarily de-register the victim UE without notification. The detailed attack scenario is as below. 1) Adversary model: An adversary should be able to send malicious NAS messages to the MME in which the victim UE is registered. Typically, an MME manages a number of eNBs which are distributed throughout large geographical regions. |
LTE Attack |
||
29.3.19 | 1) Adversary model: In this scenario, the adversary sends an SMS message to victim UE1 by spoofing the message sender using the phone number of victim UE2. To this end, the adversary knows the S-TMSI of UE2 to spoof the sender. The phone number of UE1, to which the actual SMS message is sent, is also known. In addition, we assume that the target LTE network provides the SMS through the NAS layer. 2) Attack procedure: ➀ The adversary starts by establishing a spoofed RRC Connection using the S-TMSI of UE2 |
LTE Attack |
||
29.3.19 | 1) Adversary model: The adversary is located sufficiently close to the victim UE to trigger handover from an existing eNB to the adversary’s rogue LTE network. To this end, the rogue LTE network transmits an LTE signal with higher transmission power than commercial eNBs. Additionally, the adversary would have to know the list of Tracking Areas (TAs) to masquerade the rogue LTE network as a commercial one. A valid TA Code (TAC) can easily be captured in two ways |
LTE Attack |
||
29.3.19 | In the case of a BTS resource depletion attack, it is impossible for an eNB to distinguish the adversary’s RRC Connection requests from benign RRC connection requests. A possible mitigation to this attack could be to reduce the inactivity timer value to allow an RRC Connection that is unresponsive to the Authentication request to expire. |
LTE Attack |
||
29.3.19 | As discussed in Section V, both the Remote de-register attack and SMS phishing attack are rooted from incorrect implementation of the operational MMEs. Thus, these MMEs should be carefully implemented by strictly following the 3GPP standard. The AKA bypass attack is also rooted in the UE handling the mandatory security procedure incorrectly. Therefore, the UE should not proceed with any control plane procedures before completing the mandatory security procedure successfully. |
LTE Attack |
||
29.3.19 | Many previous studies, employed a rogue BTS in a 2G/3G network. However, the Man in the Middle (MitM) attack in LTE networks received less attention . Rupprecht et al. showed that an LTE dongle could be used for eavesdropping and tampering if the dongle incorrectly allows null integrity to both the control and data plane. Hussain et al. demonstrated an Authentication relay attack to eavesdrop a victim UE’s data communication if the carrier uses null encryption to the data plane. |
LTE Attack |
||
29.3.19 | Previous studies introduced DoS attacks that exploit vulnerabilities in LTE control plane procedures. Shaik et al. presented DoS attacks using plain reject messages (NAS TAU reject, Service reject and Attach reject). Raza et al. demonstrated two types of DoS attacks that were able to detach a user from the network: the first uses a plain NAS Detach request message and the other uses Paging with the user’s IMSI. Both studies showed that certain unprotected plain messages may cause denial of service to users. |
LTE Attack |
||
9.3.19 | Password Spray Attack is quite the opposite of Brute Force Attack. In Brute Force attacks, hackers choose a vulnerable ID and enter passwords one after another hoping some password might let them in. Basically, Brute Force is many passwords applied to just one ID. |
Password |
||
4.3.19 | Direct Memory Access (DMA) attacks have been known for many years: DMA-enabled I/O peripherals have complete access to the state of a computer and can fully compromise it including reading and writing all of system memory. With the popularity of Thunderbolt 3 over USB Type-C and smart internal devices, opportunities for these attacks to be performed casually with only seconds of physical access to a computer have greatly broadened. In response, commodity hardware and operatingsystem (OS) vendors have incorporated support for Input-Ouptut Memory Management Units (IOMMUs), which impose memory protection on DMA, and are widely believed to protect against DMA attacks. |
Hardware |
||
25.2.19 | Short for "TRacking via Paging mEssage DistributiOn," TorPEDO is the most concerning attack that leverages paging protocol, allowing remote attackers to verify a victim device’s location, inject fabricated paging messages, and mount denial-of-service (DoS) attacks. |
Mobil/GSM |
||
25.2.19 | The PIERCER (Persistent Information ExposuRe by the CorE netwoRk) attack, which enables an attacker with the knowledge of the victim’s phone number, a sniffer, and a fake base station in the victim’s geographical cell to associate the victim device’s IMSI with its phone number. |
Mobil/GSM |
||
25.2.19 | In addition, the ToRPEDO attack also opens a door for two other new attacks—the PIERCER and IMSI-Cracking attacks, leading to the full recovery of the victim device's persistent identity (i.e., IMSI).Exist due to a design flaw, PIERCER (Persistent Information ExposuRe by the CorE netwoRk) attack enables an attacker to associate the victim device's unique IMSI with its phone number. |
Mobil/GSM |
||
14.1.19 | Similar to ARP spoofing and all other spoofing attacks. In here attacker pretend to be a valid DHCP server. What attacker does is he reply for the hosts DHCP request before real DHCP server does. In the reply attacker defines a IP address to the host and false default gateway(could be attacker’s IP address). |
Protocol |
||
14.1.19 | MAC address tables or CAM(Content Access Memory) tables are used on switches to track where to send traffic it received. When switch receives a frame it look its cam table for destination mac address. If mac address can be find in cam table packet will forward to the port(interface) assigned to that mac address. |
Protocol |
||
14.1.19 | These types of threats occur when customers move one of their workloads into a public cloud environment, such as Amazon Web Services or Microsoft Azure, and use Direct Connect (or any other VPN tunnel) to move between the public cloud into the private cloud. An attacker who breaches one of the environments can then move laterally, under the radar of security tools. |
Cloud |
||
14.1.19 | Malware injection attacks are done to take control of a user’s information in the cloud. For this purpose, hackers add an infected service implementation module to a SaaS or PaaS solution or a virtual machine instance to an IaaS solution. If the cloud system is successfully deceived, it will redirect the cloud user’s requests to the hacker’s module or instance, initiating the execution of malicious code. |
Cloud |
||
14.1.19 | We’ve discussed some of the most common cloud computing attack vectors malicious actors use to achieve their goals. |
Cloud |
||
14.1.19 | Insider attacks remain one of the top threats for various organizations, even if you don’t use cloud infrastructure. While most employees are trustworthy, it’s always a good idea to have a clear understanding of who has access to certain files and documents. |
Cloud |
||
13.1.19 | Unicode characters can look the same to the naked eye but actually, have a different web address. Some letters in the Roman alphabet, used by the majority of modern languages, are the same shape as letters in Greek, Cyrillic, and other alphabets, so it’s easy for an attacker to launch a domain name that replaces some ASCII characters with Unicode characters. |
Web |
||
4.12.18 | CORS or Cross -Origin Resource Sharing use in modern browsers to check the permission of remote access to web resources and services. |
Web |
||
22.10.18 | We’ve recently noticed a trend with a lot of New Zealand sites wanting to implement Single Sign-On (SSO) to combat the proliferation of passwords, including many government services. The most prevalent standard for doing this, providing interoperability between many vendors’ frameworks and multiple languages, is SAML 2.0. |
Authentication |
||
22.10.18 | This post will describe some findings, problems and inisghts regarding XML External Entity Attacks (XXEA) that we gathered during a large-scale security analysis of several SAML interfaces. |
Web |
||
22.10.18 | In this blog I’ll share some pointers that can be used when testing Single Sign-On (SSO) solutions that utilize SAML. The centralized nature of SSO provides a range of security benefits, but also makes SSO a high-profile target to attackers. The majority of SSO implementations I have seen in the past year pass SAML messages as part of the authentication process. |
Authentication |
||
21.10.18 | An SS7 attack is an exploit that takes advantage of a weakness in the design of SS7 (Signalling System 7) to enable data theft, eavesdropping, text interception and location tracking.While the SS7 network is fundamental to cellphones and its operators, the security of the design relied entirely on trust. The SS7 network operators counted on one another to play by the rules. Now, with operators opening the SS7 network to offer third-party access as a commercial offering, vulnerabilities are being exposed and attacked. |
Mobil/GSM |
||
15.10.18 | There are only a handful of rules that you need to know to counter any phishing attack that you may be exposed to on the Internet, right? Check the web address and make sure it is the right one. Also, make sure you don't follow any links on pages or in messages that you don't trust 100%. While that is sound advise, and will help you identify the bulk of phishing attacks, Chinese security researcher Xudong Zheng just demonstrated that things may not always be that easy. |
Phishing |
||
4.10.18 | In cryptography, a cold boot attack (or to a lesser extent, a platform reset attack) is a type of side channel attack in which an attacker with physical access to a computer is able to retrieve encryption keys from a running operating system after using a cold reboot to restart the machine.The attack relies on the data remanence property of DRAM and SRAM to retrieve memory contents that remain readable in the seconds to minutes after power has been removed. |
Hardware/ |
||
28.9.18 | o, somebody pointed this out to me the other day: http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt which talks about the probability of recovering some plain text from an ssh session. Having seen nothing at all from OpenSSH about this, my first reaction was "OH NO!" because it looked like they had released information without patches or a fix being available, then I looked a little closer at what was actually being talked about here. |
Communication |
||
27.9.18 | When a customer of an e-commerce site clicks “submit” or its equivalent after entering their details into a website’s payment form, malicious JavaScript code that has been injected there by the cyber criminals collects all entered information, such as payment card details and the user’s name and address. This information is then sent to the attacker’s servers. Attackers can then use this information to perform payment card fraud or sell these details to other criminals on the dark web. |
Web |
||
21.8.18 | Recently, our researchers came across a shortcoming in the design of Android’s use of storage resources. Careless use of External Storage by applications may open the door to an attack resulting in any number of undesired outcomes, such as silent installation of unrequested, potentially malicious, apps to the user’s phone, denial of service for legitimate apps, and even cause applications to crash, opening the door to possible code injection that would then run in the privileged context of the attacked application. |
Android |
||
21.8.18 | Fax, the brilliant technology that lifted mankind out the dark ages of mail delivery when only the postal service and carrier pigeons were used to deliver a physical message from a sender to a receiver. Technology wise, however, that was a long time ago. Today we are light years away from those dark days. In its place we have email, chat messengers, mobile communication channels, web-services, satellites using quantum messaging and more. |
Exploit |
||
15.8.18 | TLBleed is a new side channel attack that has been proven to work on Intel CPU’s with Hyperthreading (generally Simultaneous Multi-threading, or SMT, or HT on Intel) enabled. It relies on concurrent access to the TLB, and it being shared between threads. We find that the L1dtlb and the STLB (L2 TLB) is shared between threads on Intel CPU cores. |
CPU |
||
15.8.18 | Foreshadow is a vulnerability that affects modern microprocessors that was first discovered by two independent teams of researchers in January 18, but was first disclosed to the public on 14 August 18.The vulnerability is a speculative execution attack on Intel processors that may result in the loss of sensitive information stored in personal computers, or third party clouds.There are two versions: the first version (original/Foreshadow) (CVE-18-3615) targets data from SGX enclaves; and the second version (next-generation/Foreshadow-NG) (CVE-18-3620 and CVE-18-3646) targets Virtual Machines (VMs), hypervisors (VMM), operating system (OS) kernel memory, and System Management Mode (SMM) memory |
CPU |
||
15.8.18 | Meltdown is a hardware vulnerability affecting Intel x86 microprocessors, IBM POWER processors, and some ARM-based microprocessors. It allows a rogue process to read all memory, even when it is not authorized to do so. |
CPU |
||
15.8.18 | Spectre is a vulnerability that affects modern microprocessors that perform branch prediction.On most processors, the speculative execution resulting from a branch misprediction may leave observable side effects that may reveal private data to attackers. For example, if the pattern of memory accesses performed by such speculative execution depends on private data, the resulting state of the data cache constitutes a side channel through which an attacker may be able to extract information about the private data using a timing attack. |
CPU |
||
27.6.18 |
TLBleed is a cryptographic side-channel attack that uses machine learning to exploit a timing side-channel via the translation look-aside buffer (TLB) on modern microprocessors that use simultaneous multithreading. |
Cryptographic |
||
18.5.18 |
The BlackNurse attack is a form of denial of service attack based on ICMP flooding. The attack is special because a modest bandwidth of 20Mbit/s can be effective for disrupting a victim's network.The attack consists of sending Destination Unreachable packets to a destination. This works because these packets caused the destination to consume resources at a relatively high rate relative to the traffic. |
DoS |
||
18.5.18 |
Researchers finally revealed the Historical Email encryption based EFAIL attacks that can be exploited this brand new serious vulnerability that affected PGP & S/MIME end-to-end encryption technologies. Researchers already released an earlier warning about this highly critical security flaw in PGP & S/MIME keys and they advised to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email. |
|||
18.5.18 |
A fundamental assumption in software security is that memory contents do not change unless there is a legitimate deliberate modification. Classical fault attacks show that this assumption does not hold if the attacker has physical access. |
Hardware |
||
4.5.18 |
The researchers dubbed their attack “GLitch,” as it leverages WebGL, a JavaScript API for rendering interactive graphics in web browsers, to determine the physical memory layout of the DRAM memory before starting the targeted Rowhammer attack. |
Android |
||
21.4.18 |
This is a flood technique focused on SIP application protocol which involves illegitimate call requests. The idea here is to flood the Session Boarder Control (SBC) and / or SIP / VOIP PBX with too many requests to handle and thus making the service unavailable. |
VoIP |
||
21.4.18 |
In an HTTP Fragmentation Attack, an attacker establishes a valid connection with a server, and then proceeds to send all of his or her HTTP traffic to the server in small fragments as slowly as possible. |
HTTP |
||
21.4.18 |
Internet Control Message Protocol (ICMP) is a connectionless protocol used for IP operations, diagnostics, and errors. An ICMP Flood attack - the sending of an abnormally large number of ICMP packets of any type (especially network latency testing "ping" packets) - can overwhelm a target server that attempts to process every incoming ICMP request, and this can result in a denial-of-service condition for the target server. |
LAN Attack |
||
21.4.18 |
An HTTP flood is a HTTP DDoS attack method used by hackers to attack web servers and applications. It consists of seemingly legitimate session-based sets of HTTP GET or POST requests sent to a target web server. These requests are specifically designed to consume a significant amount of the server's resources, and therefore can result in a denial-of-service condition (without necessarily requiring a high rate of network traffic). |
HTTP |
||
20.4.18 |
PowerHammer: Exfiltrating Data from Air-Gapped Computers through Power Lines |
Hardware |
||
19.4.18 |
Symantec researchers have found a loophole in how iPhone users pair devices with Mac workstations and laptops. They say attackers can exploit this flaw —which they named Trustjacking— to take over devices without the phone owner's knowledge. |
iOS |
||
13.4.18 |
The BGP attack is a DDoS attack where attackers take control of a large amount of fast routers to overwhelm their victim. The idea behind it is to take advantage of the ability of routers to exchange router tables. The attackers let the controlled routers know that their target is a router asking for a routing table's exchange, which results in the sending of a big amount of incoming packets to the victim, therefore overwhelming it. |
TCP/IP |
||
13.4.18 |
Cookie poisoning is the act of manipulating or forging a cookie (a small piece of data created and stored in a user's browser that keeps track of important information regarding his or her session information for a particular site) for the purpose of bypassing security measures or sending false information to a server. An attacker using cookie poisoning can gain unauthorized access to a user's account on the particular site the cookie was created for, or potentially tricking a server into accepting a new version of the original intercepted cookie with modified values. |
Cookies |
||
13.4.18 |
Distributed Reflection Denial of Service attack. An attack is reflective when the attacker makes use of a potentially legitimate third party to send his or her attack traffic, ultimately hiding his or her own identity. |
DoS |
||
13.4.18 |
A Fragmented ACK attack is a variation of the ACK & PSH-ACK Flood that uses 1500-byte packets with the goal of hogging the target network’s bandwidth with only a moderate packet rate. If application level filters were applied on network equipment (routers and such), it will have to reassemble the packets, consuming much of its resources. If no filters were applied, these attack packets will be able to pass through many network security devices such as routers, ACLs, and firewalls undetected. These fragmented packets usually contain junk data, as the goal of the attacker is to simply consume all of the target network’s bandwidth. |
TCP/IP |
||
13.4.18 |
#RefRef is a Perl-based DoS attack tool developed by the Hacktivist group ‘Anonymous’ that uses a vulnerability in MySQL to perform an SQL injection involving the MySQL BENCHMARK() function. #RefRef abuses the BENCHMARK () function which allows for the repeated execution of an expression in order to exhaust a targeted server’s resources. |
DDoS |
||
13.4.18 |
Application misuse is a category of cyber or security attacks which envelopes the concept of availability-based outages at Layers 5-7 on the OSI model of internetworking. The idea here is to misuse a standard, RFC, business logic or known application vulnerabilities to establish lethargic or unavailable application-layer resources. |
Vulnerebility |
||
13.4.18 |
The TCP Window is a buffer that contains a copy of all the packets sent out by a device in case any of the packets are lost in transit (in which case they can be replaced using this buffer and resent minimizing packet loss). |
TCP/IP |
||
13.4.18 |
A SYN flood is a denial-of-service (DoS) attack that relies on abusing the standard way that a TCP connection is established. Typically, a client sends a SYN packet to an open port on a server asking for a TCP connection. The server then acknowledges the connection by sending SYN-ACK packet back to the client and populating the client’s information in its Transmission Control Block (TCB) table. |
TCP/IP |
||
13.4.18 |
A Fraggle Attack is a denial-of-service (DoS) attack that involves sending a large amount of spoofed UDP traffic to a router’s broadcast address within a network. It is very similar to a Smurf Attack, which uses spoofed ICMP traffic rather than UDP traffic to achieve the same goal. Given those routers (as of 1999) no longer forward packets directed at their broadcast addresses, most networks are now immune to Fraggle (and Smurf) attacks. |
DDoS |
||
13.4.18 |
DNS amplification attack is a sophisticated denial of service attack that takes advantage of DNS servers' behavior in order to amplify the attack. In order to launch a DNS amplification attack, the attacker performs two malicious tasks. First, the attacker spoofs the IP address of the DNS resolver and replaces it with the victim's IP address. This will cause all DNS replies from the DNS servers to be sent to the victim's servers. |
DNS |
||
13.4.18 |
A UDP flood attack is a network flood and still one of the most common floods today. The attacker sends UDP packets, typically large ones, to single destination or to random ports. In most cases the attackers spoof the SRC IP which is easy to do since the UDP protocol is "connectionless" and does not have any type of handshake mechanism or session. |
TCP/IP |
||
13.4.18 |
The Boy-in-the-Browser Attack is a variant of the MitB – Man-in-the-Browser attack involving malware that makes changes to a target machine's routing (often by changing an operating system's hosts file), and subsequently deleting itself. |
Web |
||
13.4.18 |
A counter-attack is a term taken from the military jargon used to describe large scale, usually strategic offensive operations by forces that had successfully halted an enemy’s offensive, while occupying defensive positions. |
TCP/IP |
||
13.4.18 |
Attack aimed at bringing a target down but doing so quietly. This is much different than high rate brute force attacks. These attacks often aim at leaving connections open on the target by creating a relatively low number of connections over a period of time and leaving those sessions open for as long as possible. |
TCP/IP |
||
13.4.18 |
Slowloris is a denial-of-service (DoS) tool developed by the grey hat hacker “RSnake” that causes DoS by using a very slow HTTP request. By sending HTTP headers to the target site in tiny chunks as slow as possible (waiting to send the next tiny chunk until just before the server would time out the request), the server is forced to continue to wait for the headers to arrive. |
DoS |
||
13.4.18 |
These attacks are essentially forceful and often involve flooding the target with an overwhelming flux of packets, whether over saturating its connection bandwidth or depleting the target's system resources. Bandwidth starvation typically assumes the attacker has access to more machines or higher bandwidth than the victim or that it utilizes an Amplification Attack. |
TCP/IP |
||
13.4.18 |
A Zero-Day (or Zero-Minute) Attack is a type of attack that uses a previously unknown vulnerability. Because the attack is occurring before “Day 1” of the vulnerability being publicly known, it is said that the attack occurred on “Day 0” - hence the name. |
Zero-Day |
||
13.4.18 |
Torshammer is a slow-rate HTTP POST (Layer 7) DoS tool created by phiral.net. The first public occurrence of this tool dates back to early 2011. |
Tor |
||
13.4.18 |
R.U.D.Y. attack (R-U-Dead-Yet?) is a slow-rate HTTP POST (Layer 7) denial-of-service tool created by Raviv Raz and named after the Children of Bodom album "Are You Dead Yet?" |
Web |
||
13.4.18 |
"Hacktivist", a portmanteau of "hack" and "activism", was a term coined in 1996 by Omega, a member of the hacking coalition "Cult of the Dead Crow" (cDc). The term can be loosely defined as, "the ethically ambiguous use of computers and computer networks in order to affect the normal operation of other systems, motivated by a desire to protest or promote political ends. |
Hacktivist |
||
8.4.18 |
Application layer attack on the Session Initiation Protocol- SIP in use in VoIP services, targeted at causing denial of service to SIP servers. A SIP malformed attack consists of sending any kind of non-standard messages (malformed SIP Invite for ex) with an intentionally invalid input, therefore making the system unstable. |
SIP |
||
4.4.18 |
Recently we talked a lot about attacks exploiting Java deserialization vulnerabilties in systems like Apache SOLR and WebLogic. Most of these attacks targeted Linux/Unix systems. But recently, I am seeing more attacks that target windows. |
Apache |
||
30.3.18 |
In cryptography, a cold boot attack (or to a lesser extent, a platform reset attack) is a type of side channel attack in which an attacker with physical access to a computer is able to retrieve encryption keys from a running operating system after using a cold reboot to restart the machine. |
Crypto |
||
30.3.18 |
The Lucky Thirteen attack is a cryptographic timing attack against implementations of the Transport Layer Security (TLS) protocol that use the CBC mode of operation, first reported in February 2013 by its developers Nadhem J. AlFardan and Kenny Paterson of the Information Security Group at Royal Holloway, University of London. |
Crypto |
||
30.3.18 |
In cryptography, electromagnetic attacks are side-channel attacks performed by measuring the electromagnetic radiation emitted from a device and performing signal analysis on it. |
Crypto |
||
30.3.18 |
A PLC can receive and transmit various types of electrical and electronic signals. |
Crypto |
||
30.3.18 |
Embedded SoCs usually employ hundreds of pins connected to the electrical circuit. Some of these pins have a single defined purpose. |
Crypto |
||
30.3.18 |
Pin Control Attack is a class of attack against embedded SoC's where attacker targets I/O configuration of the embedded systems and physically terminate its connection with the software or Operating System (OS) without software/OS notices about it or receive any failure regarding I/O failures. |
Crypto |
||
30.3.18 |
In cryptography, a timing attack is a side channel attack in which the attacker attempts to compromise a cryptosystem by analyzing the time taken to execute cryptographic algorithms. |
Crypto |
||
30.3.18 |
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (August 2012) (Learn how and when to remove this template message) |
Hardware |
||
28.3.18 |
Unlike macs many PCs are likely to be vulnerable to pre-boot Direct Memory Access (DMA) attacks against UEFI. If an attack is successful on a system configured with secure boot - then the chain of trust is broken and secure boot becomes insecure boot. |
Firmware |
||
27.3.18 |
We present BranchScope — a new side-channel attack where the attacker infers the direction of an arbitrary conditional |
CPU |
||
13.3.18 |
Authentication |
4G LTE |
||
13.3.18 |
Traceability Attack | 4G LTE |
||
13.3.18 |
Numb Attack | 4G LTE |
||
13.3.18 |
Authentication Relay Attack | 4G LTE |
||
13.3.18 |
Detach/Downgrade Attack | 4G LTE |
||
13.3.18 |
Paging Channel |
4G LTE |
||
13.3.18 |
Stealthy Kicking-off Attack | 4G LTE |
||
13.3.18 |
Panic Attack | 4G LTE |
||
13.3.18 |
Energy Depletion Attack | 4G LTE |
||
13.3.18 |
Linkability Attack | 4G LTE |
||
13.3.18 |
Bezdrátový |
|||
13.3.18 |
aIR-Jumper | Attack steals sensitive data from air-gapped PCs with the help of infrared-equipped CCTV cameras that are used for night vision. |
Bezdrátový |
|
13.3.18 |
USBee | Can be used to steal data from air-gapped computers using radio frequency transmissions from USB connectors. |
Bezdrátový |
|
13.3.18 |
DiskFiltration | Can steal data using sound signals emitted from the hard disk drive (HDD) of air-gapped computers. |
Bezdrátový |
|
13.3.18 |
BitWhisper | Relies on heat exchange between two computers to stealthily siphon passwords and security keys. |
Bezdrátový |
|
13.3.18 |
AirHopper | Turns a computer's video card into an FM transmitter to capture keystrokes. |
Bezdrátový |
|
13.3.18 |
Fansmitter | Technique uses noise emitted by a computer fan to transmit data. |
Bezdrátový |
|
13.3.18 |
Attack relies on cellular frequencies. |
Bezdrátový |
||
4.3.18 |
TCP/IP |
|||
4.3.18 |
RDDoS |
|||
4.3.18 |
||||
4.3.18 |
||||
4.3.18 |
||||
4.3.18 |
||||
24.10.17 | ||||
19.10.17 | ||||
17.10.17 | ||||
17.10.17 | ||||
17.10.17 | ||||
15.6.17 | ||||
15.6.17 | Distributed Guessing Attack |
|||
1.3.16 | ||||
9.6.15 | ||||
4.6.14 | Databáze |
|||
4.6.14 | Databáze |
|||
4.6.14 | Databáze |
|||
4.6.14 | ||||
4.6.14 | ||||
4.6.14 | ||||
4.6.14 | TCP/IP |
|||
4.3.14 | Triple Handshake útok |
|||
12.2.14 | TCP/IP |
|||
12.2.14 | DNS |
|||
12.2.14 | TCP/IP |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | Skenovací |
|||
31.1.14 | ||||
31.1.14 | TCP/IP |
|||
31.1.14 | TCP/IP |
|||
31.1.14 | TCP/IP |
|||
31.1.14 | DoS |
|||
31.1.14 | TCP/IP |
|||
31.1.14 | TCP/IP |
|||
31.1.14 | ||||
31.1.14 | ||||
31.1.14 | ||||
31.1.14 | TCP/IP |
|||
31.1.14 | ||||
31.1.14 | ||||
31.1.14 | ||||
31.1.14 | TCP/IP |
|||
31.1.14 | ||||
31.1.14 | TCP/IP |
|||
31.1.14 | ||||
31.1.14 | ||||
31.1.14 | ||||
31.1.14 | TCP/IP |
|||
31.1.14 | ||||
31.1.14 | TCP/IP |
|||
31.1.14 | TCP/IP |
|||
31.1.14 | DNS |
|||
31.1.14 | DNS |
|||
31.1.14 | ||||
31.1.14 | ||||