All posts in Uncategorized

■■□□□ United Kingdom unmasks LockBit ransomware affiliate as high-ranking hacker in Russia state-backed cybercrime gang. https://techcrunch.com/2024/10/01/uk-unmasks-lockbit-ransomware-affiliate-evil-corp-cybercrime-gang/ https://t.me/cKure/14766

■■■■□ Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery – Introducing CSPT2CSRF. https://blog.doyensec.com/2024/07/02/cspt2csrf.html https://t.me/cKure/14765

■■■■■ The CUPS POC analysis CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177. https://www.elastic.co/security-labs/cups-overflow https://t.me/cKure/14764

■■■■□ Pentesting RFID. https://book.hacktricks.xyz/todo/radio-hacking/pentesting-rfid https://t.me/cKure/14763

■■■■□ New Wave of Malware: ChromeLoader and AI-Generated Code. https://securityexpress.info/new-wave-of-malware-chromeloader-and-ai-generated-code/ https://t.me/cKure/14762

■□□□□ Meta pays the price for storing hundreds of millions of passwords in plaintext. https://arstechnica.com/security/2024/09/meta-slapped-with-101-million-fine-for-storing-passwords-in-plaintext/ https://t.me/cKure/14761

■■□□□ Tosint: Open-source Telegram OSINT tool. https://www.helpnetsecurity.com/2024/09/27/tosint-open-source-telegram-osint-tool/ https://t.me/cKure/14760

■■□□□ Critical Nvidia bug allows container escape, complete host takeover. https://www.theregister.com/2024/09/26/critical_nvidia_bug_container_escape/ https://t.me/cKure/14759

■■■■□ Privacy: Tails OS merges with Tor Project for better privacy, security. The Tor Project and Tails OS are merging operations to better collaborate for a free internet by protecting users from surveillance and censorship. https://www.bleepingcomputer.com/news/software/tails-os-merges-with-tor-project-for-better-privacy-security/ https://t.me/cKure/14758

■■■■□ Privilege Escalation in Google Cloud Platform – Part 1 (IAM). https://rhinosecuritylabs.com/gcp/privilege-escalation-google-cloud-platform-part-1/ https://t.me/cKure/14757