All posts by cK-bot

■□□□□ Windows MSHTML zero-day actively exploited, mitigations required. https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/09/windows-mshtml-zero-day-actively-exploited-mitigations-required https://t.me/cKure/9259

■□□□□ Groove ransomware gang mentioned U.S. President Joe Biden. https://twitter.com/darktracer_int/status/1435955881129091075 https://t.me/cKure/9258

■■□□□ Yandex is under the largest DDoS attack in the history of Runet. https://securityaffairs.co/wordpress/122028/hacking/yandex-ddos-attack.html https://t.me/cKure/9257

■□□□□ 91% of IT teams have felt ‘forced’ to trade security for business operations. https://www.zdnet.com/article/91-of-it-teams-have-felt-forced-to-trade-security-for-business-operations https://t.me/cKure/9256

■□□□□ https://owasp.org/Top10/ https://t.me/cKure/9255

■■■■■ Threat Alert: Mirai/Gafgyt Fork with New DDoS Modules Discovered https://cujo.com/mirai-gafgyt-with-new-ddos-modules-discovered/ https://t.me/cKure/9253

■■■■■ CVE-2021-40444: Microsoft MSHTML Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444 https://t.me/cKure/9252

■■■■□ SSRF in PDF export with PhantomJs https://github.com/PetrusViet/CVE-2021-39115 https://t.me/cKure/9251

■■■□□ CVE-2021-39115 Template Injection in Email Templates leads to code execution on Jira Service Management Server https://github.com/PetrusViet/CVE-2021-39115 https://t.me/cKure/9250

■□□□□ Israel : A threat actor that goes online with the moniker ‘Sangkancil’ claims to have stolen the personal information of 7 million Israelis. https://securityaffairs.co/wordpress/121984/breaking-news/israelis-data-online.html https://t.me/cKure/9249