All posts in Uncategorized

■■■□□ EXPMON detected “zero-day” PDF sample attempting to exploit Foxit Reader’s bad design of security warning dialogs. https://justhaifei1.blogspot.com/2024/04/expmon-detected-zero-day-pdf-sample.html https://t.me/cKure/14048

■■□□□ MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices. https://thehackernews.com/2024/05/mitre-unveils-emb3d-threat-modeling.html https://t.me/cKure/14047

The Zero-Day Market | Beginners https://youtu.be/TLPHmHPaCiQ https://t.me/cKure/14045

■■■■□ PoC for CVE-2024-27804 an Apple exploit. https://r00tkitsmm.github.io/fuzzing/2024/05/14/anotherappleavd.html https://t.me/cKure/14044

■■■□□ VMware fixes three zero-day bugs exploited at Pwn2Own 2024. https://www.bleepingcomputer.com/news/security/vmware-fixes-three-zero-day-bugs-exploited-at-pwn2own-2024/ https://t.me/cKure/14043

■■□□□ Telegram CEO calls out rival Signal, claiming it has ties to US government. https://www.theregister.com/2024/05/14/telegram_ceo_calls_out_rival/ https://t.me/cKure/14042

■■■■□ PyPi package backdoors Macs using the Sliver pen-testing suite. https://www.bleepingcomputer.com/news/security/pypi-package-backdoors-macs-using-the-sliver-pen-testing-suite/ https://t.me/cKure/14041

■■■■■ [Tool] The IoT security toolkit to help identify IoT related dashboards and scan them for default passwords and vulnerabilities. https://github.com/umair9747/Genzai https://t.me/cKure/14039

■■■■□ RRFuzz: Fuzz anything with Program Environment Fuzzing. https://github.com/GJDuck/RRFuzz https://t.me/cKure/14038

■■■■■ 16 years of CVE-2008-0166 Debian OpenSSL Bug – Breaking DKIM and BIMI in 2024. https://16years.secvuln.info/ https://t.me/cKure/14037