July 31, 2021 at 03:28PM

■□□□□ UNCONFIRMED Israel : An actor claims to sell source code (size 150 MB) of the infamous Israeli Cyber-Weapon Pegasus created by ex government employed hackers under NSO Group (private company). The actor is apparently selling it for 1 BTC or 18 ETH (non negotiable) and is open to a middle man service. https://t.me/cKure/8777

July 31, 2021 at 11:15AM

■■■□□ United States’ DOJ: SolarWinds hackers breached emails from 27 US Attorneys’ offices. https://www.bleepingcomputer.com/news/security/doj-solarwinds-hackers-breached-emails-from-27-us-attorneys-offices/ https://t.me/cKure/8775

July 31, 2021 at 02:37AM

■□□□□ CVE-2021-22930: Node.js fixes severe HTTP2 bug that could let attackers crash apps. https://www.bleepingcomputer.com/news/security/nodejs-fixes-severe-http-bug-that-could-let-attackers-crash-apps/ https://t.me/cKure/8774

July 30, 2021 at 07:54PM

■■■■■ Israel : Reverse Engineers share a decompiled version of Pegasus malware, an Israeli Cyber-Weapon under Israel’s Defence Export Control Law of 2007. https://github.com/jonathandata1/pegasus_spyware https://t.me/cKure/8771

July 30, 2021 at 07:48PM

■□□□□ Google is emailing Android users to let them know that, starting late September, they will no longer be able to log in to their Google accounts on devices running Android 2.3.7 (Gingerbread) and lower.  https://t.me/cKure/8769

July 30, 2021 at 07:47PM

■■■□□ APT29: Experts Uncover Several C&C Servers Linked to WellMess Malware. https://www.riskiq.com/blog/external-threat-management/apt29-bear-tracks/ https://thehackernews.com/2021/07/experts-uncover-several-c-servers.html https://t.me/cKure/8768

July 30, 2021 at 07:45PM

■■■□□ PyPI packages caught stealing credit card numbers, Discord tokens. https://www.bleepingcomputer.com/news/security/pypi-packages-caught-stealing-credit-card-numbers-discord-tokens/ https://t.me/cKure/8767