All posts in Uncategorized

■■■□□ Talos discloses multiple zero-day vulnerabilities, two of which could lead to code execution. https://blog.talosintelligence.com/vulnerability-roundup-zero-days-may-8-2024/ https://t.me/cKure/14003

■■■■■ Unveiling GLIBC heap overflow vulnerability (CVE-2023–6246). https://medium.com/@elpepinillo/heap-heap-hooray-unveiling-glibc-heap-overflow-vulnerability-cve-2023-6246-0c6412423269 https://t.me/cKure/14002

■■■■□ Awesome Burp extensions (plugins) list. https://github.com/snoopysecurity/awesome-burp-extensions https://t.me/cKure/14001

■■■■■ Code Interoperability: The Perils of Technological Diversity. https://www.sonarsource.com/blog/avocado-nightmare-1/ https://t.me/cKure/13999

■■■■□ AI enabled warfare. Technical details by VOX News of extermination of Muslims and Christians in Gaza, Palestine amid ongoing genocide using Gospel AI and modified version of it called Lavender AI. The same was covered by us in this post: https://t.me/ckuRED/432 https://t.me/cKure/13997

■□□□□ A tool to demonstrate how passwordless solutions such as Okta Verify’s FastPass or other FIDO2/WebAuthn type solutions can be abused once an authenticator endpoint has been compromised. https://github.com/CCob/okta-terrify https://t.me/cKure/13996

■■■■□ PoC of fuzzing closed-source userspace binaries with KVM. https://github.com/klecko/kvm-fuzz https://t.me/cKure/13994

■□□□□ Microsoft releases copilot AI for defensive cyber security. https://securitycopilot.microsoft.com/ https://t.me/cKure/13993

Zero-Day: Option 121 (DHCP) allows bypasses nearly all VPNs TunnelVision vulnerability has existed since 2002 and may already be known to attackers. https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/ https://t.me/cKure/13991

■□□□□ Ransomware drama: Law enforcement seized Lockbit group’s website again. https://securityaffairs.com/162778/cyber-crime/law-enforcement-seized-lockbit-site-again.html https://t.me/cKure/13990