All posts by cK-bot

■■■■□ Red-Kube – Red Team K8S Adversary Emulation Based On Kubectl. https://github.com/lightspin-tech/red-kube https://t.me/cKure/7979

■■□□□ Avaddon Ransomware group hacked France-based Acer Finance and AXA Asia. https://securityaffairs.co/wordpress/117991/cyber-crime/avaddon-ransomware-acer-finance-axa.html https://t.me/cKure/7977

■■■■■ Dent: A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft’s WDAPT sensors. https://github.com/optiv/Dent https://t.me/cKure/7976

■■■□□ Two flaws could allow bypassing AMD SEV protection system. https://www.sec.in.tum.de/i20/student-work/code-execution-attacks-against-encrypted-virtual-machines https://securityaffairs.co/wordpress/117981/security/amd-sev-attacks.html https://t.me/cKure/7975

■■□□□ Branches of insurance giant AXA based in Thailand, Malaysia, Hong Kong, and the Philippines have been struck by a ransomware cyber attack. As seen by BleepingComputer yesterday, the Avaddon ransomware group claimed on their leak site that they had stolen over 3 TB of sensitive data from AXA’s Asian operations. https://t.me/cKure/7974

■■■■□ Exploit to SYSTEM for CVE-2021-21551 https://github.com/waldo-irc/CVE-2021-21551 https://t.me/cKure/7973

■■□□□ Summary on Darkside. https://www.trendmicro.com/en_us/research/21/e/what-we-know-about-darkside-ransomware-and-the-us-pipeline-attac.html https://t.me/cKure/7972

■■■■□ CVE-2021-28482: Exchange PoC https://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC https://t.me/cKure/7971

■■■■■ CIMplant – C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems. https://github.com/FortyNorthSecurity/CIMplant https://t.me/cKure/7970

■■■□□ Apple AirTag hacked again – free internet with no mobile data plan! https://nakedsecurity.sophos.com/2021/05/14/apple-airtags-hacked-again-free-internet-with-no-mobile-data-plan/ https://t.me/cKure/7969