/Hive Five #167 · Apr 1, 2024
The internet is ours
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Sophisticate backdoor in XZ Utils allows RCE (CVE-2024-3094): everything you need to know to detect, mitigate, and more.
Read : pick 1 -
Salma on the ridiculousness of pleasing the algorithm: "The internet is ours
It's time to take back control."
Read : Salma on the ridiculousness of pleasing the algorithm: "The internet is ours -
d3f4ult casually shares a wild piece of lore about themselves
He also has the receipts to back it up, including a Darknet Diaries episode.
Read : d3f4ult casually shares a wild piece of lore about themselves -
Principal Threat Researcher Tom shares his favorite tools that most are not taking advantage of: Aeon Timeline, Validin, Stairwell, Synapse Enterprise, and GaboRE — I've never heard of any of these, which I find fascinating. He also has an in-depth write-up on how he uses Aeon.
Read : pick 4 -
Mind Blowing Reverse Shell Demo with DNS data bouncing exfiltration using unconventional methods of exploiting the PowerShell Gallery.
Watch : pick 5