All posts in Uncategorized

■□□□□ Microsoft’s GitHub under fire after disappearing proof-of-concept exploit for critical Microsoft Exchange vuln. On Wednesday, shortly after security researcher Nguyen Jang posted a proof-of-concept exploit on GitHub that abuses a Microsoft Exchange vulnerability revealed earlier this month, GitHub, which is owned by Microsoft, removed code, to the alarm of security researchers. https://t.me/cKure/7139

■■■□□ New DEARCRY Ransomware is targeting Microsoft Exchange Servers. https://www.bleepingcomputer.com/news/security/new-dearcry-ransomware-is-targeting-microsoft-exchange-servers/ https://t.me/cKure/7138

■□□□□ Hackers Are Targeting Microsoft Exchange Servers With Ransomware. https://t.me/cKure/7136

■■■■■ Browser exploit via side channel attack: Researchers have discovered a new side-channel that they say can be reliably exploited to leak information from web browsers that could then be leveraged to track users even when JavaScript is completely disabled. “This is a side-channel attack which doesn’t require any JavaScript to run,” the researchers said.…

■■■■■ Browser exploitation (beginner video tutorial / story). https://youtu.be/yJewXMwj38s https://t.me/cKure/7132

■□□□□ ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks. https://thehackernews.com/2021/03/proxylogon-exchange-poc-exploit.html https://t.me/cKure/7131

■□□□□ The security loophole in the Plus Addons for Elementor plugin of WordPress was used in active zero-day attacks prior to a patch being issued. https://threatpost.com/cyberattackers-exploiting-critical-wordpress-plugin-bug/164663/ https://t.me/cKure/7124

■□□□□ SSRF PoC for CVE-2021-26855. https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-26855.yaml https://t.me/cKure/7123

■□□□□ Interesting thread https://mobile.twitter.com/nav1n0x/status/1369743606320406532 https://t.me/cKure/7122

■□□□□ Microsoft confirms Windows 10 crash issue due to March updates. https://t.me/cKure/7121