All posts in Uncategorized

■■■■□ Android trojan spotted in the wild can record audio and phone calls. A banking trojan named SpyNote is once again ‘smishing’ its way into your financial information. Here’s your best defense. https://www.zdnet.com/article/android-trojan-spotted-in-the-wild-can-record-audio-and-phone-calls/ https://t.me/cKure/13090

■■■□□ Android and Windows devices aren’t safe from Flipper Zero either. The Bluetooth spam feature that was initially used to inundate, and even crash, iPhones has now been expanded to cover Android and Windows devices. https://www.zdnet.com/article/now-android-and-windows-devices-arent-safe-from-flipper-zero-either/ https://t.me/cKure/13089

The outstanding stealth of Operation Triangulation. https://securelist.com/triangulation-validators-modules/110847/ https://t.me/cKure/13088

■■■■□ PoC Exploits Released for Citrix and VMware Vulnerabilities. Tracked as CVE-2023-34051 (CVSS score: 8.1), the high-severity vulnerability relates to a case of authentication bypass that could lead to remote code execution. https://thehackernews.com/2023/10/alert-poc-exploits-released-for-citrix.html https://t.me/cKure/13087

■■■□□ Palestine-Israel Cyber-War: Japanese Website Faces Defacement Attack by Pro-Palestinian Hacker Group. The Pro-Palestinian hacker group “IRoX Team” has launched a defacement attack on Japanese websites targeting Japan’s support for Israel. Source: Fusion Intelligence https://t.me/cKure/13086

■■■■■ Java Deserialization Vulnerability Still Alive . https://blog.pyn3rd.com/2023/10/20/Java-Deserialization-Vulnerability-Still-Alive/ https://t.me/cKure/13083

■■■■□ Israel-Palestine Cyber-War: The intelligence platform has identified three Singaporean websites that suffered damage using the same image that the pro-Palestinian hacker group used for defacement. https://t.me/cKure/13082

■■■■□ United States’ energy firm shares how Akira ransomware hacked its systems. https://www.bleepingcomputer.com/news/security/us-energy-firm-shares-how-akira-ransomware-hacked-its-systems/ https://t.me/cKure/13080

■□□□□ Google reportedly turned off display of traffic conditions in Israel and Gaza at the request of the Israeli army. https://t.me/cKure/13079

A backdoor is implanted on Cisco devices by exploiting a pair of zero-day flaws in IOS XE software that has been modified by the threat actor so as to escape visibility via previous fingerprinting methods. The attacks entail fashioning CVE-2023-20198 (CVSS score: 10.0) and CVE-2023-20273 (CVSS score: 7.2) into an exploit chain that grants the…