All posts in Uncategorized

■■■■□ CSP bypass on PortSwigger.net using Google script resources joaxcar.com. https://hackerone.com/reports/2279346 Blog: https://joaxcar.com/blog/2024/02/19/csp-bypass-on-portswigger-net-using-google-script-resources/ https://t.me/cKure/13574

■■■■□ Interesting thread: Cyber Threat Intelligence on Bangladesh Intelligence on Hacker Groups Targeting Bangladesh Government, Educational Institutions, and Businesses. https://twitter.com/stealthmole_int/status/1763384906074489174 https://t.me/cKure/13573

■■■■□ Zero-Day: Actively exploited open redirect in Google Web Light. https://www.mymybank.tld/?redirect_to=https://login.mybank.tld https://untrustednetwork.net/en/2024/02/26/google-open-redirect/ https://t.me/cKure/13572

■■■■■ Kali Linux 2024.1 released: New tools, new look, new Kali Nethunter kernels. ● I love the Bluetooth hacking modules. https://www.helpnetsecurity.com/2024/02/29/kali-linux-2024-1-released-new-tools-new-look-kali-nethunter-kernels/ https://t.me/cKure/13571

■■□□□ Chinese Cyberspies Use New Malware in Ivanti VPN Attacks. Chinese threat actors target Ivanti VPN appliances with new malware designed to persist system upgrades. https://www.securityweek.com/chinese-cyberspies-use-new-malware-in-ivanti-vpn-attacks/ https://t.me/cKure/13570

■■■□□ Cyber-War by Iran: UNC1549, aka Smoke Sandstorm and Tortoiseshell, appears to be the culprit behind a cyberattack campaign customized for each targeted organization. https://t.me/cKure/13569

■■□□□ Data-Leak: AI platform cutout.pro suffered data breach last week with over 20 million records stolen. https://t.me/cKure/13568

■■■□□ India vs Pakistan . A story of a electronic warfare and is of SDRs. 5 Years After Pakistan’s Swift Retort, Indian Fighters Now Fully Armed With ‘Air-To-Air Network’ To Talk Mid-Air. https://www.eurasiantimes.com/5-years-after-pakistans-swift-retort-indian-warplanes/ https://t.me/cKure/13567

Major cyber-attack on Israel by pro-Pslestine hacker groups amid ongoing extermination cum genocide of Muslims and Christians in Gaza and West-Bank Palestine by Israel. The Eilat power station is pwned and apparently electricity in some areas has been affected by this ICS-SCADA hack. https://t.me/cKure/13561

■■■■■ Weaponization of Token Theft – A Red Team Perspective. https://trustedsec.com/blog/weaponization-of-token-theft-a-red-team-perspective https://t.me/cKure/13560