All posts in Uncategorized

■■■□□ $7,000 Critical Vulnerability: IDOR to BAC to Account Takeover. https://medium.com/meetcyber/how-i-discovered-a-7-000-critical-vulnerability-idor-to-bac-to-account-takeover-0c195eae2ed2 https://t.me/cKure/15042

LockBit Ransomware Developer Arrested in Israel. Dual Russian-Israeli national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit’s RaaS activities, dating back to the ransomware gang’s origins. https://www.darkreading.com/cyberattacks-data-breaches/lockbit-ransomware-developer-arrested-israel. https://t.me/cKure/15040

■■■■□ Pegasus spyware maker NSO Group is liable for attacks on 1,400 WhatsApp users. https://www.theverge.com/2024/12/20/24326342/meta-whatsapp-nso-group-pegasus-spyware-hack-liable https://t.me/cKure/15039

■■■■□ Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild. Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild https://t.me/cKure/15038

■■■□□ BADBOX malware hits 30,000 Android devices – make sure you update now. https://www.techradar.com/pro/security/badbox-malware-hits-30-000-android-devices https://t.me/cKure/15037

■■■■□ Exploiting McDonald’s APIs to hijack deliveries and order food for a penny. https://eaton-works.com/2024/12/19/mcdelivery-india-hack/ https://t.me/cKure/15036

■■■□□ Hackers Exploiting Microsoft Teams to Gain Remote Access to User’s System. https://cybersecuritynews.com/microsoft-teams-to-gain-remote-access/ https://t.me/cKure/15035

■■■■■ Curl Vulnerability Let Attackers Access Sensitive Information. https://cybersecuritynews.com/curl-vulnerability-attackers-sensitive-information/ https://t.me/cKure/15034

■■■□□ Hackers can jailbreaking digital license plates make others pay their tolls and tickets! https://www.wired.com/story/digital-license-plate-jailbreak-hack/ https://t.me/cKure/15033

■■■□□ Kali Linux has released version 2024.4, introducing 14 new tools, deprecating certain features, and implementing various improvements. New Tools: bloodyad: Active Directory privilege escalation framework. certi: Tool for requesting certificates from Active Directory Certificate Services (ADCS) and discovering templates. chainsaw: Utility for rapidly searching and analyzing Windows forensic artifacts. findomain: Fast and comprehensive domain…