September 15, 2021 at 09:46AM

■■■□□ Reproduction of CVE-2021-38647 (unauthed root RCE in the OMI agent) using the details in the technical blog post. uid=0(root) gid=0(root) groups=0(root) https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution https://t.me/cKure/9325

September 14, 2021 at 11:57PM

■■■□□ Privacy: Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns. Kape Technologies is an Israeli cybersecurity firm that has bought ExpressVPN for $936 million. However, its users are now flipping out. https://www.hackread.com/israeli-firm-kape-technologies-expressvpn-privacy/ https://t.me/cKure/9321

September 14, 2021 at 08:31PM

A consortium of journalists gained access to a leak of more than 50,000 phone numbers entered into a system used for targeting by Pegasus, a sophisticated spyware product made by the Israel sponsored company NSO Group. Governments around the world paid the company vast sums of money to gain access to Pegasus and let them…