All posts by cK-bot

■■■□□ Cyber-Attack by Russia : Microsoft says the group has attacked more than 140 service providers and compromised 14 of them between May and October of this year. SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat. https://t.me/cKure/9851

■□□□□ Microsoft has begun force installing the PC Health Check application on Windows 10 devices using a new KB5005463 update. https://t.me/cKure/9850

■■■□□ North Korea (DPRK) sponsored Lazarus hacking group has switched focus on new targets and was observed by Kaspersky security researchers expanding its supply chain attack capabilities. https://www.bleepingcomputer.com/news/security/north-korean-state-hackers-start-targeting-the-it-supply-chain/ https://t.me/cKure/9849

■■■■□ Researcher cracked 70% of WiFi networks sampled in Tel Aviv, Israel A researcher has managed to crack 70% of a 5,000 WiFi network sample in his hometown, Tel Aviv, to prove that home networks are severely unsecured and easy to hijack. https://www.bleepingcomputer.com/news/security/researcher-cracked-70-percent-of-wifi-networks-sampled-in-tel-aviv/ https://t.me/cKure/9848

■■■■■ Linux: UAF read in SELinux handler for PTRACE_TRACEME. https://bugs.chromium.org/p/project-zero/issues/detail?id=2229 https://t.me/cKure/9847

■■■■■ Beginner tutorial: This bug doesn’t exist on x86: Exploiting an ARM-only race condition. https://github.com/stong/how-to-exploit-a-double-free https://t.me/cKure/9846

■■■■■ Advanced request smuggling. https://portswigger.net/web-security/request-smuggling/advanced https://t.me/cKure/9844

■■□□□ Interesting thread: APT-C-23 disguised by packaging legitimate applications into spyware(SpyNote,Mobihok,WH-RAT,888RAT,Metasploit,EsecretRAT). The disguised objects were Threema, Al-Aqsa Radio, Al-Aqsa Mosque, Jerusalem Guide, PDF viewer. https://t.co/GD3ewJwkAF translate: https://t.co/QVWJF51VHk https://t.co/KXML2quj0t https://twitter.com/blackorbird/status/1452950205821702146 https://t.me/cKure/9843

Breaking from Iran as Nationwide Cyber-Attack shuts down “smart fuel network,” gas stations across the country rendering them dysfunctional as per state media. https://t.me/cKure/9842

■■■■■ Europol busts Darknet vendors: 150 ‘high value’ arrests. https://www.disclose.tv/europol-busts-darknet-vendors-150-high-value-arrests/ https://t.me/cKure/9840