All posts in Uncategorized

■■□□□ Data-Leak: waterbergcollege.co.za was hacked on 3/16/2021 at 8:54:57 AM with 3.8k records of data being exfiltrated. The data is being sold online. https://t.me/cKure/8598

■■■■■ China sets laws to zero-day vulnerabilities. Chinese makers of network software and hardware must alert Beijing within two days of learning of a security vulnerability in their products under rules coming into force in China this year. Details: http://www.cac.gov.cn/2021-07/13/c_1627761607640342.htm https://t.me/cKure/8596

■■□□□ Disrupting Ransomware with Advanced File System Techniques. https://securityboulevard.com/2021/07/disrupting-ransomware-with-advanced-file-system-techniques/ https://t.me/cKure/8595

■□□□□ Linux version of HelloKitty ransomware targets VMware ESXi servers. https://www.bleepingcomputer.com/news/security/linux-version-of-hellokitty-ransomware-targets-vmware-esxi-servers/ https://t.me/cKure/8594

■■■□□ Apple’s under fire yet again for iOS security bugs in WebKit—the code behind the Safari browser. Apple Safari Leaks Cookies, so ‘Russia-Backed’ Hackers Attack Targets. https://securityboulevard.com/2021/07/apple-safari-leaks-cookies-so-russia-backed-hackers-attack-targets/ https://t.me/cKure/8593

■■□□□ The data (mentioned here: https://t.me/cKure/8583) consists of 40K user records. https://t.me/cKure/8591

■■■□□ US govt offers $10 million reward for tips on nation-state hackers. https://www.bleepingcomputer.com/news/security/us-govt-offers-10-million-reward-for-tips-on-nation-state-hackers/ https://t.me/cKure/8590

■■■■□ SolarWinds hackers used iOS zero-day to penetrate iPhones used by government officials. https://appleinsider.com/articles/21/07/15/solarwinds-hackers-used-ios-zero-day-to-penetrate-iphones-used-by-government-officials https://t.me/cKure/8589

■■■■□ Microsoft shares guidance on new Windows Print Spooler vulnerability. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481 https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-guidance-on-new-windows-print-spooler-vulnerability/ https://t.me/cKure/8588

■■■■■ Zero-day: Microsoft Warns of New Unpatched Windows Print Spooler Vulnerability identified by Jacob Baines. Tracked as CVE-2021-34481 (CVSS score: 7.8), the issue concerns a local privilege escalation flaw that could be abused to perform unauthorized actions on the system. https://thehackernews.com/2021/07/microsoft-warns-of-new-unpatched.html https://t.me/cKure/8587