All the latest news on Cybersecurity

DocGo Inc., a prominent healthcare and ambulance transportation service provider, has confirmed a cybersecurity incident that compromised the integrity of its systems. The breach, which specifically targeted the company’s U.S.-based ambulance transportation business, resulted in unauthorized access and acquisition of data, including protected health information from a limited number of healthcare records. This incident has […] The post DocGo Confirms Cyber Attack: Hackers Steal Patients Data appeared first on Cyber Security News.

Steal Patients

The UK Ministry of Defense disclosed a data breach at a third-party payroll system that exposed data of armed forces personnel and veterans. The UK Ministry of Defense disclosed a data breach impacting a third-party payroll system that exposed data of approximately 272,000 armed forces personnel and veterans. The Ministry of Defence revealed that a […]

Defense disclosed third-party payroll

Microsoft has announced the deployment of an air-gapped GPT-4 AI model specifically designed for the US Intelligence Community. This initiative represents a significant milestone in utilizing generative AI technologies in secure government environments. This ensures that top-secret data remains isolated from potential cyber threats. The newly introduced system operates entirely disconnected from the internet, a […] The post Microsoft Unveils Air-Gapped GPT-4 for U.S. Intelligence Agencies appeared first on Cyber Security News.

Unveils Air-Gapped

NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities, offering a range of functionalities from listing SMB shares to executing commands on MSSQL databases. Features Multi-threading Support: Utilize multiple threads to perform actions concurrently. SMB Shares Enumeration: List available SMB shares. SMB Shell Execution: Execute a shell via SMB. Secrets Dumping: Dump secrets from the target. MSSQL Database Enumeration: List available MSSQL databases. MSSQL Command Execution: Execute operating system commands via xp_cmdshell or start SQL Server Agent jobs. Prerequisites Before you begin, ensure you have met the following requirements: proxychains properly configured with ntlmrelayx SOCKS relay port Python 3.6+ Installation To install NTLM Relay Gat, follow these steps: Ensure that Python 3.6 or higher is installed on your system. Clone NTLM Relay Gat repository: git clone https://github.com/ad0nis/ntlm_relay_gat.gitcd ntlm_relay_gat Install dependencies, if you don't have them installed already: pip install -r requirements.txt NTLM Relay Gat is now installed and ready to use. Usage To use NTLM Relay Gat, make sure you've got relayed sessions in ntlmrelayx.py's socks command output and that you have proxychains configured to use ntlmrelayx.py's proxy, and then execute the script with the desired options. Here are some examples of how to run NTLM Relay Gat: # List available SMB shares using 10 threadspython ntlm_relay_gat.py --smb-shares -t 10# Execute a shell via SMBpython ntlm_relay_gat.py --smb-shell --shell-path /path/to/shell# Dump secrets from the targetpython ntlm_relay_gat.py --dump-secrets# List available MSSQL databasespython ntlm_relay_gat.py --mssql-dbs# Execute an operating system command via xp_cmdshellpython ntlm_relay_gat.py --mssql-exec --mssql-method 1 --mssql-command 'whoami' Disclaimer NTLM Relay Gat is intended for educational and ethical penetration testing purposes only. Usage of NTLM Relay Gat for attacking targets without prior mutual consent is illegal. The developers of NTLM Relay Gat assume no liability and are not responsible for any misuse or damage caused by this tool. License This project is licensed under the MIT License - see the LICENSE file for details.Download Ntlm_Relay_Gat

Gat Relay Gat

Akamai Technologies, Inc. is set to acquire Noname Security, a top API security vendor, for 0 million, signaling a major move to boost its API security capabilities. This acquisition marks a pivotal moment in the cybersecurity landscape, as Akamai aims to extend its protection across all API traffic locations, addressing the growing demand for comprehensive […] The post Akamai to Acquire API Security Startup Noname for 0 Million appeared first on Cyber Security News.

Acquire API Startup Noname

Kaisen Linux is a distribution dedicated for IT professional based on Debian GNU/Linux. Large tools are integrated for diagnostics, rescue system and networks, lab creation and many more!

AhnLab SEcurity intelligence Center (ASEC) has recently discovered circumstances of a CHM malware strain that steals user information being distributed to Korean users. The distributed CHM is a type that has been constantly distributed in various formats such as LNK, DOC, and OneNote from the past. A slight change to the operation process was observed in the recent samples. The overall execution flow is shown in Figure 1. The malware is a type that uses multiple scripts to ultimately send... The post CHM Malware Stealing User Information Being Distributed in Korea appeared first on ASEC BLOG.

Korean users Stealing User

AhnLab SEcurity intelligence Center (ASEC) has discovered evidence of a malware strain being distributed to web servers in South Korea, leading users to an illegal gambling site. After initially infiltrating a poorly managed Windows Internet Information Services (IIS) web server in Korea, the threat actor installed the Meterpreter backdoor, a port forwarding tool, and an IIS module malware tool. They then used ProcDump to exfiltrate account credentials from the server. IIS modules support expansion features of web servers such as... The post Case of Malware Distribution Linking to Illegal Gambling Website Targeting Korean Web Server appeared first on ASEC BLOG.

Distribution Linking Illegal Gambling

AhnLab SEcurity intelligence Center (ASEC) has recently identified RemcosRAT being distributed using the steganography technique. Attacks begin with a Word document using the template injection technique, after which an RTF that exploits a vulnerability in the equation editor (EQNEDT32.EXE) is downloaded and executed. The RTF file downloads a VBScript with the “.jpg” file extension from the C2 and another VBScript from “paste.ee”, a service similar to “Pastebin” where one can upload text for free. The downloaded VBScript is obfuscated with... The post RemcosRAT Distributed Using Steganography appeared first on ASEC BLOG.

RemcosRAT Distributed

Security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in information disclosure or incorrect validation of password hashes.

Mobile medical care firm DocGo confirmed it suffered a cyberattack after threat actors breached its systems and stole patient health data. [...]

data Mobile medical care Mobile medical patient health

The great challenge of our century is learning to consume less. Who has never killed an hour? Not casually or without thought, but carefully: a premeditated murder of minutes.

Amusing Stimuli Supernormal Supernormal Stimuli