All posts in Uncategorized

■■■□□ IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware. https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/ https://t.me/cKure/12544

■■■■□ Zero-Day: VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks (formerly vRealize Network Insight) has come under active exploitation in the wild. The flaw, tracked as CVE-2023-20887, could allow a malicious actor with network access to the product to perform a command injection attack, resulting in remote…

■■■■■ Password spraying and MFA bypasses in the modern security landscape. https://www.sprocketsecurity.com/resources/how-to-bypass-mfa-all-day https://t.me/cKure/12541

■■■■□ Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks. https://thehackernews.com/2023/06/new-condi-malware-hijacking-tp-link-wi.html https://t.me/cKure/12540

■□□□□ Shibuya.XSS techtalk #12. https://shibuyaxss.connpass.com/event/287631/ https://t.me/cKure/12539

■■■■□ Malwarebytes issues fix for Chrome broken by Windows 11 KB5027231. https://www.bleepingcomputer.com/news/microsoft/malwarebytes-issues-fix-for-chrome-broken-by-windows-11-kb5027231/ https://t.me/cKure/12538

■■■■□ Embattled PwC as well as EY caught in Russian-linked cyberattack which hit global corporations, US federal agencies PwC Australia was one of potentially thousands of victims including US federal agencies and the BBC, with the breach coming as a further blow after the tax and consulting giant was slammed for leaking sensitive government information.…

■■■■□ Busting disinformation: Real or fake? Here’s your guide to detect AI-generated images. https://www.logicallyfacts.com/en/article/how-to-detect-ai-images https://t.me/cKure/12536

■■■□□ CS:GO: From Zero to 0-day. https://neodyme.io/blog/csgo_from_zero_to_0day/ https://t.me/cKure/12535

■■■■□ Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign. https://thehackernews.com/2023/06/rogue-android-apps-target-pakistani.html https://t.me/cKure/12534