All posts in Uncategorized

■□□□□ Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities. https://www.securityweek.com/microsoft-patches-60-windows-vulns-warns-of-active-zero-day-exploitation/ https://t.me/cKure/14061

■■■■□ PoC exploit released for RCE zero-day in D-Link EXO AX4800 routers. https://www.bleepingcomputer.com/news/security/poc-exploit-released-for-rce-zero-day-in-d-link-exo-ax4800-routers/ https://t.me/cKure/14060

■■■■□ BreachForums Telegram channel is now under control of the FBI. https://t.me/OfficialBaphomet/26 https://t.me/cKure/14059

■■□□□ Low-tech tactics still top the IT security risk chart. https://www.csoonline.com/article/2098369/low-tech-tactics-still-top-the-risk-chart-for-organizations.html https://t.me/cKure/14058

■■■□□ PingRAT: PingRAT secretly passes C2 traffic through firewalls using ICMP payloads. https://github.com/umutcamliyurt/PingRAT https://t.me/cKure/14057

■■■■□ CVE-2023-46012 in Linksys EA7500 Routers Allows Remote Takeover, No Patch, Poc Released. https://github.com/dest-3/CVE-2023-46012 https://t.me/cKure/14056

Zero-Day: WiFi Flaw Leaves All Devices Vulnerable to ‘SSID Confusion’ Attacks. https://www.top10vpn.com/assets/2024/05/Top10VPN-x-Vanhoef-SSID-Confusion.pdf https://t.me/cKure/14054

■■□□□ Schneider Electric APC Easy UPS RCE – Java RMI Applevel Deser for JEP>=290 https://3sjay.github.io/2024/05/10/schneiderups-rmi-deser.html https://t.me/cKure/14053

■■■□□ Mirai Variant CVE-2023-1389. https://blog.permafrostsec.com/posts/mirai-variant-cve-2023-1389/ https://t.me/cKure/14050

■■■□□ EXPMON detected “zero-day” PDF sample attempting to exploit Foxit Reader’s bad design of security warning dialogs. https://justhaifei1.blogspot.com/2024/04/expmon-detected-zero-day-pdf-sample.html https://t.me/cKure/14048