exploit Archives - Unit 42

A pictorial representation of the JsonWebToken vulnerability.

10,510

people reacted

[2023-01-31 12:00 JST 更新] JWTのシークレットポイズニングに関する問題

By Artur Oleyarsh
January 10, 2023 at 12:33 AM

1

2 min. read

A pictorial representation of many storage containers stacked together

1,882

people reacted

サーバーレス関数Azure Functionsの探索: Hyper-Vは最終防衛ライン

By Daniel Prizmant and Aviv Sasson
December 15, 2022 at 6:00 AM

0

3 min. read

Cloud vulnerabilities conceptual image, covering topics such as OpenLiteSpeed vulnerabilities

2,122

people reacted

Unit 42がOpenLiteSpeed Web サーバーに3つの脆弱性を発見

By Artur Avetisyan
November 10, 2022 at 6:00 AM

0

< 1 min. read

A conceptual image representing a vulnerability, such as the Apache log4j remote code execution vulnerability discussed here, CVE-2021-44228.

29,093

people reacted

[2022-03-31 10:00 PDT更新] 脅威に関する情報: Apache Log4jに新たな脆弱性(CVE-2021-44228) 実際の悪用も確認

By Tao Yan, Qi Deng, Haozhe Zhang, Yu Fu and Josh Grunzweig
December 10, 2021 at 10:05 PM

12

5 min. read

A conceptual image representing alerts on vulnerabilities and exploits, such as the monitoring that revealed exploit attempts that traced to malicious use of the Interactsh tool.

12,574

people reacted

オープンソースサービスInteractshに悪意のある利用の増加が観測される

By Yue Guan, Jin Chen, Leo Olson, Wayne Xin and Daiping Liu
October 14, 2021 at 6:00 AM

2

3 min. read

4,429

people reacted

ネットワークセキュリティ動向: 2021年5月～7月

By Yue Guan and Lei Xu
September 19, 2021 at 7:45 PM

0

3 min. read

A conceptual image representing an adversary. The new attack surface discussed here is an example of what can be possible for an adversary able to perform remote attacks.

3,077

people reacted

パロアルトネットワークス、Microsoft IISとSQL Serverを標的とする新たな攻撃手法の研究結果をBlack Hat Asia 2021で発表

By Tao Yan, Qi Deng, Bo Qu and Zhibin Zhang
August 2, 2021 at 3:17 AM

0

3 min. read

A conceptual image representing the concept of malware, such as that covered in this case study of Emotet Command and Control traffic.

3,285

people reacted

Emotetのコマンド&コントロールのケーススタディ

By Chris Navarrete and Yanhui Jia
April 13, 2021 at 12:42 AM

1

3 min. read

Cryptojacking is conceptually illustrated here. The category includes PGMiner, a new cryptocurrency mining botnet delivered via PostgreSQL.

3,938

people reacted

PGMiner: PostgreSQLを介して配信される新しい暗号通貨マイニングボットネット

By Xiao Zhang, Yang Ji, Jim Fitzgerald, Yue Chen and Claud Xiao
December 11, 2020 at 12:46 AM

1

3 min. read

This conceptual image illustrates the idea of malware, such as the njRAT spreading through active Pastebin command and control tunnel that is discussed in this blog.

3,920

people reacted

稼働中のPastebinによるコマンド&コントロールトンネルを介しnjRATが拡散

By Yanhui Jia, Chris Navarrete and Haozhe Zhang
December 9, 2020 at 6:00 AM

0

3 min. read

This conceptual image illustrates trends in cybersecurity

5,622

people reacted

エクスプロイトの開発状況: 80％のエクスプロイトはCVEより先に公開されている

By Jay Chen
August 26, 2020 at 6:00 AM

0

2 min. read

1,919

people reacted

Muhstik ボットネットが最新のWebLogic脆弱性を暗号通貨マイニング、DDoS攻撃に悪用

By Cong Zheng and Yanhui Jia
April 30, 2019 at 2:15 PM

0

< 1 min. read

1,488

people reacted

‘DealersChoice’はSofacyのFlash Playerエクスプロイトプラットフォーム

By Robert Falcone and Bryan Lee
October 17, 2016 at 11:00 PM

0

3 min. read