All posts in Uncategorized

■■■■□ Fuzzing and Bypassing the AWS WAF. https://sysdig.com/blog/fuzzing-and-bypassing-the-aws-waf/ https://t.me/cKure/13494

■■■■■ Forging signed commits on GitHub. https://iter.ca/post/gh-sig-pwn/ https://t.me/cKure/13493

■□□□□ Canada Moves to Ban the Flipper Zero Over Car Hacking Fears. The tiny hacking device has been viewed as a threat by law enforcement. Now it looks like a major western government is trying to ban it. https://gizmodo.com/canada-moves-to-ban-the-flipper-zero-over-car-hacking-f-1851242790 https://t.me/cKure/13492

■□□□□ Google’s Bard becomes Gemini AI; comes with mobile app. Another tool in the arsenal. https://youtu.be/b5Fh7TaTkEU https://t.me/cKure/13491

■■□□□ UAE foils attempted cyberattacks by hacktivist groups, says Cyber Security Council. State controlled media outlet uses the term “terrorists” for the cyber hacktivists that target UAE (for being an ally of the genocidal Jewish regime). https://gulfnews.com/uae/crime/uae-foils-attempted-cyberattacks-by-terrorist-groups-says-cyber-security-council-1.1707507973303 https://t.me/cKure/13490

■■■■■ CVE-2022-0435: A Remote Stack Overflow in The Linux Kernel. https://blog.immunityinc.com/p/a-remote-stack-overflow-in-the-linux-kernel/ https://t.me/cKure/13489

■■■■■ Espressif ESP32: Breaking HW AES with Power Analysis raelize.com https://raelize.com/blog/espressif-systems-esp32-breaking-hw-aes-with-power-analysis/ https://t.me/cKure/13488

■■■□□ Data-Leak amid ongoing Israeli genocide in Gaza and West-Bank as websites from pro-Israel states take a hit from hackers as many state and non state businesses and educational institutes have been breached, sites defaced or taken down in a DoS. Countries hit include UAE, India, Bahrain among others including Israel itself. https://t.me/cKure/13487

Zero-Day (via CVE-2023-45866): Exploiting Zero-click Android Bluetooth vulnerability to inject keystrokes without pairing. https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/ https://t.me/cKure/13485

■■■■□ Critical Remote Code Execution Vulnerability Patched in Android. https://source.android.com/docs/security/bulletin/2024-02-01 https://www.securityweek.com/critical-remote-code-execution-vulnerability-patched-in-android/ https://t.me/cKure/13484