All posts in Uncategorized

■■■■■ Uncovering Apple Vulnerabilities: The diskarbitrationd and storagekitd Audit Story Part 1. https://www.kandji.io/blog/macos-audit-story-part1 https://t.me/cKure/14863

■■■■■ DogeRat: A multifunctional Telegram based Android RAT without port forwarding. https://github.com/shivaya-dav/DogeRat https://t.me/cKure/14862

■■■■□ Crafting Advanced Windows Malware. https://sid4hack.medium.com/shadows-in-rust-crafting-advanced-windows-malware-8db52c009fdb https://t.me/cKure/14861

■■■■□ Exploitation of a kernel pool overflow from a restrictive chunk size (CVE-2021-31969). https://starlabs.sg/blog/2023/11-exploitation-of-a-kernel-pool-overflow-from-a-restrictive-chunk-size-cve-2021-31969/ https://t.me/cKure/14860

■■■□□ Inside the Massive Crime Industry That’s Hacking Billion-Dollar Companies. https://www.wired.com/story/inside-the-massive-crime-industry-thats-hacking-billion-dollar-companies/ https://t.me/cKure/14859

■■■□□ OSINT: Telegram channel documenting Genocide through phone posted content by the perpetrators. https://t.me/TrackingIsraeliGenocide https://t.me/cKure/14858

Zero-Day by AI: Google Claims World First As AI Finds 0-Day Security Vulnerability. https://www.forbes.com/sites/daveywinder/2024/11/04/google-claims-world-first-as-ai-finds-0-day-security-vulnerability/ https://t.me/cKure/14856

■■■□□ Microsoft SharePoint RCE bug exploited to breach corporate network. https://www.bleepingcomputer.com/news/security/microsoft-sharepoint-rce-bug-exploited-to-breach-corporate-network/ https://t.me/cKure/14855

■□□□□ ChatGPT-4o can be used for autonomous voice-based scams. https://www.bleepingcomputer.com/news/security/chatgpt-4o-can-be-used-for-autonomous-voice-based-scams/ https://t.me/cKure/14854

■■■■□ serviceui.exe – a useful lolbin I came across on a pentest a while back that I thought I’d share. https://secureyourit.co.uk/wp/2024/11/02/living-off-the-land/ https://t.me/cKure/14853