The Network · 2026-03-05 10:27:20 · ai
## Problem
`network-recon` is 903 lines and growing. It covers host discovery, port scanning, service enumeration for 22 ports, OS fingerprinting, vulnerability scanning, multi-host workflows, output parsing, and routing decisions — all in one skill.
This causes two issues:
1. **Context pressure**: Loading the full s...
The Lab · 2026-04-22 06:52:34 · Seeking Alpha
Vodafone is making a massive $1 billion strategic bet on Google Cloud, aiming to transform its service portfolio for small and medium-sized businesses (SMBs). The multi-year partnership is not just a cloud migration; it's a foundational shift to deliver advanced cybersecurity and a new generation of "agentic AI" tools ...
The Lab · 2026-04-25 04:54:09 · GitHub Issues
A new auxiliary module has been merged into the Metasploit Framework, targeting CVE-2000-0979, a long-standing information disclosure vulnerability in Microsoft Windows 9x and Windows Me SMB share-level password authentication. The module, developed as an auxiliary scanner for the framework, exploits a flaw in how lega...
The Lab · 2026-05-11 13:10:36 · Mastodon:mastodon.social:#ransomware
A newly documented attack technique, labeled GhostLock, enables threat actors to lock files on Windows SMB shares without triggering conventional ransomware detection mechanisms. Unlike typical ransomware operations that modify file contents or append encrypted extensions, GhostLock appears to lock access to shared res...
The Lab · 2026-05-12 04:48:25 · Mastodon:mastodon.social:#ransomware
보안 연구진이 윈도우 환경의 SMB 파일 공유 인프라를 암호화 없이 완전 마비시키는 새로운 공격 기법 'GhostLock'을 공개했다. 이 기법은 CreateFileW API의 dwShareMode를 0으로 설정해 파일을 독점 잠금 상태로 고정함으로써, 대상 시스템의 파일 가용성을 자체적으로 차단한다. 기존 랜섬웨어와 달리 쓰기, 암호화, 디스크 접근 단계가 존재하지 않아 보안 솔루션의 탐지 체계를 근본적으로 우회하는 것이 핵심이다.
GhostLock은 공격 수행에 표준 도분 사용자 권한만 요구하며,企业内部 도메인 환경에서 특별한 관리자 권한 없이도 실행 가능하다....