All posts by cK-bot

■■■■■ Cisco fixed an Authenticated Heap Overflow Vulnerability (CVE-2022-20737) in Cisco ASA found by ‘PT Swarm’ researcher Nikita Abramov. The vulnerability allows an attacker to cause a DoS or to obtain portions of process memory from the device. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-vpn-heap-zLX3FdX https://t.me/cKure/11329

■■■■■ CVE-2022-21972: Windows Server VPN Remote Kernel Use After Free Vulnerability https://labs.nettitude.com/blog/cve-2022-21972-windows-server-vpn-remote-kernel-use-after-free-vulnerability/ https://t.me/cKure/11328

■□□□□ The United Kingdom , Australian , Canadian , New Zealand , and United States cybersecurity authorities expect malicious cyber actors — including state-sponsored advanced persistent threat (APT) groups — to step up their targeting of MSPs in their efforts to exploit provider-customer network trust relationships. https://www.cisa.gov/uscert/ncas/alerts/aa22-131a Canada https://t.me/cKure/11327

■■■□□ Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925). https://www.helpnetsecurity.com/2022/05/10/cve-2022-26925/ https://t.me/cKure/11326

An advanced threat actor has leaked data of multiple institutions, organizations, nation-states and civilians in varying forms (PII, documents, credentials and similar). The data collage is huge and we (t.me/ckure) have received the copy. Some leaks were previously public. However, some are either new or were previously unreported. https://t.me/cKure/11325

■■□□□ Cyber-War against Russia This morning the online Russian TV schedule page was hacked. The name of every programme was changed to “On your hands is the blood of thousands of Ukrainians and their hundreds of murdered children. TV and the authorities are lying. No to war.” https://twitter.com/francis_scarr/status/1523554493144584192 https://t.me/cKure/11323

■■■□□ Cyber-War / Cyber-Attack: Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages. https://www.hackread.com/russian-tv-schedules-hacked-victory-day-anti-war/ https://t.me/cKure/11322

■■□□□ Costa Rica Declares State of Emergency Under Sustained Conti Cyberattacks. https://www.darkreading.com/attacks-breaches/costa-rica-declares-state-of-emergency-under-sustained-conti-cyberattacks https://t.me/cKure/11321

■□□□□ Industry pushes back against India’s data security breach reporting requirements. https://go.theregister.com/feed/www.theregister.com/2022/05/10/india_infosec_rules_criticised/ https://t.me/cKure/11320

■■■□□ Lincoln College to close after 157 years due ransomware attack. https://t.me/cKure/11319