All posts in Uncategorized

■■□□□ FTP password of SolarWinds ‘leaked on GitHub in plaintext’ a year ago. It was solarwinds123. https://go.theregister.com/feed/www.theregister.com/2020/12/16/solarwinds_github_password/ https://t.me/cKure/6374

■□□□□ Microsoft to quarantine SolarWinds apps linked to recent hack starting tomorrow. https://t.me/cKure/6373

■■□□□Automating SSRF. https://dant0x65.medium.com/bug-bounty-tip-automating-ssrf-ea344ec59962 https://t.me/cKure/6372

■■■■■ Academics at Ben Gurion University, Tel Aviv, #Israel turn RAM into Wi-Fi cards to steal data from air-gapped systems. Named AIR-FI, the technique is the work of Mordechai Guri, the head of R&D at the Ben-Gurion University of the Negev, in Israel. https://www.zdnet.com/article/academics-turn-ram-into-wifi-cards-to-steal-data-from-air-gapped-systems https://t.me/cKure/6369

■■□□□ #CyberAttack on #UnitedStates : Russian hackers also hacked Department of Homeland Security – Report. The known list of targets hit by hackers is now five. Here is which department was hacked and what you should about the attack. https://www.hackread.com/russian-hackers-hacked-homeland-security/ https://t.me/cKure/6367

■□□□□ Google’s global outage from yesterday was due to a bug that restricted storage space to the Identity Management System and caused the system to fail.  https://t.me/cKure/6366

■■□□□ CVE-2020-29395: XSS in WordPress plugin EventON. https://securityboulevard.com/2020/12/cve-2020-29395-xss-in-wordpress-plugin-eventon/ https://t.me/cKure/6364

■■■□□ Common Nginx misconfigurations that leave your web server open to attack. https://blog.detectify.com/2020/11/10/common-nginx-misconfigurations/ https://t.me/cKure/6363

● @ckure has received ~300 MB file of leaked data from #China of Chinese Communist Party ☭ (Shanghai Clique). https://t.me/cKure/6362

■■□□□ #UAE : Government official claims victim of increase in #CyberAttack frequency. https://www.reuters.com/article/us-emirates-tech-israel-idUSKBN28G0BW https://t.me/cKure/6361