NetWire Controllers Are Dropping COVID-19-Themed Decoy Files

With the outbreak of the COVID-19 pandemic around the world, trending hashtags related to the epidemic are flooding social media, attracting attention of a number of international hacker organizations, which jump at the chance to conduct social engineering based on decoy messages. Recently, NSFCOUS found that NetWire controllers began to...

Firmware Analysis: Extraction of ASP Files in the GoAhead Architecture

GoAhead is an open-source web architecture that is widely used in embedded systems thanks to its high performance and high availability. Traditional servers built on the GoAhead architecture usually see a large number of dynamic pages written in the Active Server Pages (ASP) scripting language and functions written in C/C++...

A Look Into WS-Discovery Reflection Attacks for 2020 Q1

Executive Summary Web Services Dynamic Discovery (WSD) is a multicast discovery protocol to locate services on a local area network (LAN). However, due to device vendors' design flaw in the implementation, when a normal IP address sends a service discovery packet, devices will also respond to the request. If exposed...

Information Security in the Workplace- Business Chat Groups-v

With the advancement of IT-based transformation and the rapid development of IT, various network technologies have seen more extensive and profound applications, along with which come a multitude of cyber security issues. Come to find out what information security issues you should beware of in the workplace. (mais…)