All posts in Uncategorized

■■□□□ A tool for carrying out brute force attacks against Office 365, with built-in IP rotation use AWS gateways. https://github.com/nickzer0/RagingRotator https://t.me/cKure/13244

■■■□□ Exploit for cve-2023-47246 SysAid RCE (shell upload). https://github.com/W01fh4cker/CVE-2023-47246-EXP https://t.me/cKure/13243

■■■■■ Data-Leak: Samsung says hackers accessed customer data during year-long data-breach. Samsung says hackers accessed customer data during year-long breach https://t.me/cKure/13242

■■■■■ Zero-Day: VMware discloses critical VCD Appliance auth bypass with no patch. https://www.bleepingcomputer.com/news/security/vmware-discloses-critical-vcd-appliance-auth-bypass-with-no-patch/ https://t.me/cKure/13241

■■■■□ CVE-2023-23583 (CVSS score: 8.8) allow escalation of privilege and/or information disclosure and/or denial of service via local access. Termed Reptar; the Intel CPU vulnerability impacts multi-tenant virtualized environments. https://thehackernews.com/2023/11/reptar-new-intel-cpu-vulnerability.html https://t.me/cKure/13240

■■■■□ New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs. https://www.bleepingcomputer.com/news/security/new-cachewarp-amd-cpu-attack-lets-hackers-gain-root-in-linux-vms/ https://t.me/cKure/13239

■■■■□ Russia: Sandworm have breached Danish energy sector companies. Very nice timeline analysis. CVE-2023-28771 + CVE-2023-33009 + CVE-2023-33010 https://github.com/blackorbird/APT_REPORT/blob/master/Sandworm/sektorcert-angrebet-mod-dansk-kritisk-infrastruktur-tlp-clear-en.pdf https://t.me/cKure/13238

■■■■■ WhatsApp spy – logs online/offline events from ANYONE in the world. https://github.com/jasperan/whatsapp-osint https://t.me/cKure/13236

■■■■□ Disinformation: Telegram bot that deletes content from social media which show any content critical of Israel is still functional a month since creation. Their statistics claim to bed up to 60% successful in deleting articles (https://t.me/cKure/13183) Source: https://t.me/cKure/13234 https://t.me/cKure/13235

■■■□□ Cyber-Attack on UAE based company DP-World as it suffers a major cyber incident on its offshore offices in Australia 🦘 The attack disrupted port services. Up to 40% of the services were halted. Some operations were resume after overnight efforts by tech teams. The Australian government was involved in this incident. https://edition.cnn.com/2023/11/13/tech/australia-dp-world-cyberattack-ports-intl-hnk/index.html https://t.me/cKure/13233