■■■□□ United States opens joint Security Operations Center in NYC. The “first-in-nation” cyber command center will provide municipal and local governments with threat intelligence and resources to defend themselves against cyberattacks. https://www.darkreading.com/threat-intelligence/new-york-opens-joint-security-operations-center-in-nyc https://t.me/cKure/10787
All posts by cK-bot
February 24, 2022 at 08:11PM
■■□□□ mil.ru is returning HTTP ‘418 I’m a teapot’ error code. https://t.me/cKure/10786
February 24, 2022 at 08:08PM
■□□□□ The Russian military website (mil.ru) is down. https://t.me/cKure/10785
February 24, 2022 at 08:05PM
■■■■■ CISA Alerts on Actively Exploited Flaws in Zabbix; an open-source Network Monitoring Platform. ︎CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability. ︎CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability. https://www.cisa.gov/uscert/ncas/current-activity/2022/02/22/cisa-adds-two-known-exploited-vulnerabilities-catalog https://thehackernews.com/2022/02/cisa-alerts-on-actively-exploited-flaws.html https://t.me/cKure/10784
February 24, 2022 at 06:22PM
■■■■□ Zero-day XSS vulnerability in Horde webmail client can be triggered by file preview function. https://portswigger.net/daily-swig/zero-day-xss-vulnerability-in-horde-webmail-client-can-be-triggered-by-file-preview-function https://t.me/cKure/10783
February 24, 2022 at 06:18PM
■□□□□ Cyber attacks on Ukraine by Russia : DDoS, new data wiper, cloned websites, and Cyclops Blink. https://www.helpnetsecurity.com/2022/02/24/cyber-attacks-ukraine/ https://t.me/cKure/10782
February 24, 2022 at 06:15PM
■□□□□ Interesting thread! KNOXSS API for XSS. https://twitter.com/KN0X55/status/1496850019730788361 https://t.me/cKure/10781
February 24, 2022 at 05:09PM
■■□□□ Logic Flaw Leading to RCE in Dynamicweb 9.5.0 – 9.12.7. https://blog.assetnote.io/2022/02/20/logicflaw-dynamicweb-rce/ https://t.me/cKure/10780
February 24, 2022 at 04:27PM
■■■■□ Tool: linWinPwn: Automates a number of Active Directory Enumeration and and Vulnerability checks. https://github.com/lefayjey/linWinPwn https://t.me/cKure/10779
February 24, 2022 at 04:12PM
■■■■■ Israel : Samsung shipped an estimated 100 million smartphones with botched encryption, including models ranging from the 2017 Galaxy S8 on up to last year’s Galaxy S21. Researchers at Tel Aviv University found what they called “severe” cryptographic design flaws that could have let attackers siphon the devices’ hardware-based cryptographic keys: keys that unlock…