March 23, 2021 at 06:03PM

■■■■■ Facebook awards $55k bug bounty for SSRF; via third-party vulnerabilities that could compromise its internal network. https://portswigger.net/daily-swig/facebook-awards-55k-bug-bounty-for-third-party-vulnerabilities-that-could-compromise-its-internal-network https://t.me/cKure/7333

March 23, 2021 at 10:32AM

■□□□□ #DataLeak: Manga scanlation giant MangaDex has been temporarily shut down after suffering a cyberattack and having its source code stolen. MangaDex is one of the largest manga scanlation (scanned translations) sites where visitors can read manga comics online for free. According to SimilarWeb, MangaDex is the 179th most frequently visited site on the web, with over 76…

March 23, 2021 at 10:29AM

■■■■■ A New Android Zero-Day Vulnerability Is Under Active Attack. Google has disclosed that a now-patched vulnerability affecting Android devices that use Qualcomm chipsets is being weaponized by attackers to launch targeted attacks. Tracked as CVE-2020-11261 (CVSS score 8.4), the flaw concerns an “improper input validation” issue in Qualcomm’s Graphics component that could be exploited…

March 22, 2021 at 04:49PM

■■□□□ An independent security researcher based in Basel, Switzerland, Jannis Kirschner, began to look for the widely known Telegram desktop version on the internet on Sunday. The second Google result was an advertisement, which led him directly to malware cloaked as a Telegram for Windows desktop version. At first sight, it was sufficiently convincing for…