RM Information Security

04/12/2024

iDRAC to Domain Admin

Hello all!

20/11/2024

Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments

Hackers exploit NFC technology and mobile payments, enabling global fraud through Google Pay and Apple Pay.

17/04/2024

Great write up - CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated atta...

17/04/2024

Palo Alto Networks GlobalProtect exploit public and widely exploited CVE-2024-3400 - SANS Internet Storm Center

Internet Storm Center Diary 2024-04-17, Author: Johannes Ullrich

11/04/2024

Intel CEO predicts AI will deliver a one-person Unicorn

And possibly replace entire business units too

04/01/2024

Google to start third-party cookie cull for 30M Chrome users

One of the ad APIs that will fill the void – Protected Audience – may actually improve privacy

30/11/2023

Google patches security bugs in Chrome, exploit out there

Plus: 3 critical CVEs in Zyxel NAS devices

11/10/2023

Microsoft Patch Tuesday Haunted by Zero-Days, Wormable Bug https://buff.ly/48Z3ASS

11/10/2023

How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack | Google Cloud Blog

Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it

31/08/2023

MalDoc in PDF - Detection bypass by embedding a malicious Word file into a PDF file – - JPCERT/CC Eyes

JPCERT/CC has confirmed that a new technique was used in an attack that occurred in July, which bypasses detection by embedding a malicious Word file into a PDF file. This blog article calls the technique “MalDoc in PDF” hereafter and...