All posts in Uncategorized

■■■■■ HackSys Extreme Vulnerable Driver (HEVD) – Windows & Linux. https://github.com/hacksysteam/HackSysExtremeVulnerableDriver https://t.me/cKure/12953

■■■■□ A new Chrome zero-day is sending the Internet into a new chapter of Groundhog Day. https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ https://t.me/cKure/12952

■■■□□ Zero-Day: Discovered by X. B. of the Cisco Advanced Security Initiatives Group (ASIG), this medium-severity security flaw (CVE-2023-20109) stems from inadequate attribute validation within the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. https://www.bleepingcomputer.com/news/security/cisco-urges-admins-to-fix-ios-software-zero-day-exploited-in-attacks/ https://t.me/cKure/12951

■■■■■ Skyhook – A Round-Trip Obfuscated HTTP File Transfer Setup Built To Bypass IDS Detections. https://github.com/blackhillsinfosec/skyhook https://t.me/cKure/12950

■■■■□ Lazarus hackers breach aerospace firm with new LightlessCan malware. https://www.bleepingcomputer.com/news/security/lazarus-hackers-breach-aerospace-firm-with-new-lightlesscan-malware/ https://t.me/cKure/12949

■□□□□ CVE-2023-42820 JumpServer – Random seed leakage results in the user password being reset. https://github.com/h4m5t/CVE-2023-42820 https://t.me/cKure/12948

■■□□□ CrowdStrike’s Advanced Memory Scanning Stops Threat Actor Using BRc4 at Telecommunications Customer. https://www.crowdstrike.com/blog/crowdstrikes-advanced-memory-scanning-stops-threat-actor/ https://t.me/cKure/12947

■■■■■ Technical writeups on security vulnerabilities and bypasses. https://github.com/kh4sh3i/bug-bounty-writeups#cross-site-scripting-xss https://t.me/cKure/12946

■■□□□ The only easy day was yesterday. https://youtu.be/x3aJDMkio1E https://t.me/cKure/12945

■■■□□ Possible Data-Leak at Volkswagen. Central infrastructure of the Volkswagen Group is paralyzed by an IT malfunction. Production at several plants is at a standstill, a company spokesperson says — n-tv https://t.me/cKure/12944