Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. Dubbed "Operation Highland, ...

In June 2011, the official vsftpd download server (hosted on SourceForge) was compromised. An attacker replaced the legitimate vsftpd 2.3.4 source code with a backdoored version. Any server that ...

Technical Writer documenting Sim Racing and Cybersecurity. Using a Flipper Zero, a short 12-line DuckyScript text file, and a remote listener on my Ubuntu server I was able to gain a shell on my fully ...

The Rapid7-powered Metasploit Framework is the world’s leading penetration testing framework. The Project is a collaboration between the open-source community and Rapid7 to provide a tool for ...

In an ongoing Kubernetes cryptomining campaign, attackers target OpenMetadata workloads using critical remote code execution and authentication vulnerabilities. OpenMetadata is an open-source metadata ...

Attackers are constantly seeking new vulnerabilities to compromise Kubernetes environments. Microsoft recently uncovered an attack that exploits new critical vulnerabilities in OpenMetadata to gain ...

description: Detects execution of netcat with the "-e" flag followed by common shells. This could be a sign of a potential reverse shell setup.