■■■□□ Zero-Day: Discovered by X. B. of the Cisco Advanced Security Initiatives Group (ASIG), this medium-severity security flaw (CVE-2023-20109) stems from inadequate attribute validation within the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. https://www.bleepingcomputer.com/news/security/cisco-urges-admins-to-fix-ios-software-zero-day-exploited-in-attacks/ https://t.me/cKure/12951
All posts in Uncategorized
October 1, 2023 at 01:43PM
■■■■■ Skyhook – A Round-Trip Obfuscated HTTP File Transfer Setup Built To Bypass IDS Detections. https://github.com/blackhillsinfosec/skyhook https://t.me/cKure/12950
September 30, 2023 at 03:42PM
■■■■□ Lazarus hackers breach aerospace firm with new LightlessCan malware. https://www.bleepingcomputer.com/news/security/lazarus-hackers-breach-aerospace-firm-with-new-lightlesscan-malware/ https://t.me/cKure/12949
September 29, 2023 at 01:17PM
■□□□□ CVE-2023-42820 JumpServer – Random seed leakage results in the user password being reset. https://github.com/h4m5t/CVE-2023-42820 https://t.me/cKure/12948
September 28, 2023 at 03:35PM
■■□□□ CrowdStrike’s Advanced Memory Scanning Stops Threat Actor Using BRc4 at Telecommunications Customer. https://www.crowdstrike.com/blog/crowdstrikes-advanced-memory-scanning-stops-threat-actor/ https://t.me/cKure/12947
September 28, 2023 at 11:33AM
■■■■■ Technical writeups on security vulnerabilities and bypasses. https://github.com/kh4sh3i/bug-bounty-writeups#cross-site-scripting-xss https://t.me/cKure/12946
September 27, 2023 at 11:30PM
■■□□□ The only easy day was yesterday. https://youtu.be/x3aJDMkio1E https://t.me/cKure/12945
September 27, 2023 at 11:19PM
■■■□□ Possible Data-Leak at Volkswagen. Central infrastructure of the Volkswagen Group is paralyzed by an IT malfunction. Production at several plants is at a standstill, a company spokesperson says — n-tv https://t.me/cKure/12944
September 27, 2023 at 11:17PM
■■■□□ Researchers uncover thriving market for malware targeting IoT devices. https://www.thehindu.com/sci-tech/technology/researchers-uncover-market-malware-targeting-iot-devices/article67347827.ece https://t.me/cKure/12943
September 27, 2023 at 07:06PM
REArchive: Reverse engineering APT37’s GOLDBACKDOOR dropper. https://www.0x0v1.com/rearchive-goldbackdoor/ https://t.me/cKure/12941