All posts by cK-bot

■■■■■ This is one of the entries to the BGGP 2021 Polyglot File challenge. It uses a novel technique of directly embedding data within the compressed image data stream of a PNG. This means you can literally see the bytes of the embedded files! ● It literally took about a minute for me to understand.…

■■■■□ CVE-2021-37973: Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability. Use after free in Portals. Reported by Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero on 2021-09-21 (https://bugs.chromium.org/p/chromium/issues/detail?id=1251727) https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html https://thehackernews.com/2021/09/urgent-chrome-update-released-to-patch.html https://t.me/cKure/9491

■■□□□ CVE-2021-22005 PoC https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e https://t.me/cKure/9490

■■■□□ A New APT Hacker Group Spying On Hotels and Governments Worldwide. https://thehackernews.com/2021/09/a-new-apt-hacker-group-spying-on-hotels.html https://t.me/cKure/9489

■□□□□ Resetting Expired Passwords Remotely. https://www.n00py.io/2021/09/resetting-expired-passwords-remotely/ https://t.me/cKure/9488

■■■□□ Certify: Active Directory certificate abuse. https://github.com/GhostPack/Certify https://t.me/cKure/9487

■■■□□ CVE-2021-26084: Details on the recently exploited atlassian confluence OGNL injection bug. https://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug https://t.me/cKure/9486

■■□□□ Declassified: The cyberattack on the largest bank in Venezuela, Banco de Venezuela, was carried out from the United States. This was announced on September 22 by the Executive Vice President of the Republic of South America Delsi Rodriguez on the air of the Venezolana de Television channel. https://cyberthreatintelligence.com/news/venezuela-reveals-the-origin-of-the-cyberattack-on-the-countrys-largest-bank/ https://t.me/cKure/9485

● Something I might have watched for hours; ‘pipes’. https://1j01.github.io/pipes/ https://t.me/cKure/9484

■□□□□ Cyberincidents in airports | Kaspersky official blog. https://www.kaspersky.com/blog/protecting-airports/42150/ https://t.me/cKure/9483