All posts by cK-bot

■■■□□ LinkedIn Leaks 93% of Users’ Data—Refuses Blame for Breach. https://securityboulevard.com/2021/07/linkedin-leaks-93-of-users-data-refuses-blame-for-breach/ https://t.me/cKure/8479

■□□□□ The Cybersecurity and Infrastructure Security Agency (CISA) has issued a notification regarding the critical PrintNightmare zero-day vulnerability and advises admins to disable the Windows Print Spooler service on servers not used for printing. https://t.me/cKure/8478

■■■■□ CVE-2021-1675 Windows RCE; video PoC: https://youtu.be/qU3vQ-B-FPY https://t.me/cKure/8476

■■■■□ CVE-2021-1675 Windows RCE; what we know so far. https://www.reddit.com/r/msp/comments/ob6y02/critical_vulnerability_printnightmare_exposes/ https://t.me/cKure/8475

■□□□□ Microsoft says the bugs could have allowed “attackers to roam untethered through an entire organization.” https://t.me/cKure/8474

■■■■■ EDR Query to detect CVE-2021-1675 https://mobile.twitter.com/_M_Shahnawaz/status/1410529617966997508 https://t.me/cKure/8473

■■□□□ Self-Stored XSS + Login CSRF https://hackerone.com/reports/1092678 https://t.me/cKure/8472

■■■■□ CVE-2021-1675: Windows RCE (untested) https://xss.is/threads/53479/ https://t.me/cKure/8471

■□□□□ Microsoft hooks up with MITRE to map Azure’s ATT&CK surface for ‘proactive security’ https://t.me/cKure/8470

■■■■□ A leaked tool used by the Babuk Locker operation to create custom ransomware executables is now being used by another threat actor in a very active campaign targeting victims worldwide. https://www.bleepingcomputer.com/news/security/leaked-babuk-locker-ransomware-builder-used-in-new-attacks/ https://t.me/cKure/8469