All posts in Uncategorized

■□□□□ WeTransfer phishing attack spoofs file-sharing to steal credential. https://www.hackread.com/wetransfer-phishing-attack-spoofs-steal-credential/ https://t.me/cKure/8798

■■■□□ New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits. https://thehackernews.com/2021/08/new-apt-hacking-group-targets-microsoft.html https://t.me/cKure/8797

■■■□□ PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S. https://thehackernews.com/2021/08/pwnedpiper-pts-security-flaws-threaten.html https://t.me/cKure/8796

■■■■■ XSS in AWS https://frichetten.com/blog/xss_in_aws_console/ https://t.me/cKure/8795

■□□□□ Cyber-Attack via defacement at http://samarra.tv/ as the new channel probably suffered from persistent XSS. https://t.me/cKure/8791

■□□□□ Microsoft has announced that the Web Application Firewall (WAF) bot protection feature has reached general availability on Azure on Application Gateway starting this week. https://t.me/cKure/8790

■■■■■ CSIRT-Collect – PowerShell Script To Collect Memory And (Triage) Disk Forensics. https://github.com/dwmetz/CSIRT-Collect https://t.me/cKure/8789

■■■□□ Calgary Parking Authority exposed sensitive data of residents. https://www.hackread.com/calgary-parking-authority-exposed-sensitive-data/ https://t.me/cKure/8788

■■□□□ VulWebaju: set up your pentesting environment for learning purpose. https://github.com/Aju100/VulWebaju https://t.me/cKure/8787

■■■■□ Node.js Pushes Out Immediate Fixes for the Severe HTTP Bug. https://www.ehackingnews.com/2021/08/nodejs-pushes-out-immediate-fixes-for.html https://t.me/cKure/8786