All posts by cK-bot

■■■■■ 5 RCEs in npm for $15,000+. ︎CVE-2021-32804 ($10,000) ︎CVE-2021-32803 ($2,000) ︎CVE-2021-37701 ($2,500) ︎CVE-2021-37712 (found internally – $1,000 token payout) ︎CVE-2021-37713 (found internally)︎CVE-2021-39134 (TBD) https://robertchen.cc/blog/2021/09/20/npm-rce https://t.me/cKure/9424

■□□□□ Bonaci Group, a new leak gang, has opened a site on the DarkWeb. Most of the victims’ lists are law firms. Source: https://t.co/c37xstjarE https://t.me/cKure/9423

■□□□□ Hacked sites push TeamViewer using fake expired certificate alert. https://www.bleepingcomputer.com/news/security/hacked-sites-push-teamviewer-using-fake-expired-certificate-alert/ https://t.me/cKure/9422

■■■■■ Cyber-Attack by India 🇮🇳 on Pakistan 🇵🇰 and China 🇨🇳 as Windows Zero-Day(s) made by United States 🇺🇸 company used in spy campaign. India apparently leaked the Zeroday details and were used by rogue hacking units of South Korea 🇰🇷 (non-state sponsored). https://www.forbes.com/sites/thomasbrewster/2021/09/17/exodus-american-tech-helped-india-spy-on-china/ https://t.me/cKure/9420

■□□□□ AT&T lost $200M in seven years to illegal phone unlocking scheme. https://www.bleepingcomputer.com/news/security/atandt-lost-200m-in-seven-years-to-illegal-phone-unlocking-scheme/ https://t.me/cKure/9419

■■□□□ Epik Data-Leak comprised of 15,003,961 breached accounts. https://t.me/cKure/9418

India used our software to spy on Pakistan, China, says US Intel company | Free Press Kashmir https://freepresskashmir.news/2021/09/19/india-used-our-software-to-spy-on-pakistan-china-says-us-intel-company/ https://t.me/cKure/9417

■□□□□ Two XOR-encryption, one structure reordering and one ROT shifting bypassed. https://katyscode.wordpress.com/2021/01/15/reverse-engineering-adventures-league-of-legends-wild-rift-il2cpp https://t.me/cKure/9415

■□□□□ : TikTok China just limited kids to 40 minutes’ use each day. https://go.theregister.com/feed/www.theregister.com/2021/09/20/douyin_youth_mode_time_limits/ https://t.me/cKure/9414

■■■□□ Data-Leak from United States as US farmer cooperative hit by $5.9M BlackMatter ransomware attack. https://www.bleepingcomputer.com/news/security/us-farmer-cooperative-hit-by-59m-blackmatter-ransomware-attack/ https://t.me/cKure/9413