All posts tagged cyber

■■■□□ Splunk RCE Vulnerability Let Attackers Upload Malicious File. https://cybersecuritynews.com/splunk-rce-vulnerability/ https://t.me/cKure/13250

■■■□□ Cyber-Attack by Russia: Russian Hackers Linked to ‘Largest Ever Cyber Attack’ on Danish Critical Infrastructure. https://thehackernews.com/2023/11/russian-hackers-launch-largest-ever.html https://t.me/cKure/13249

An Indian hack-for-hire group targeted the United States, China, Myanmar, Pakistan, Kuwait, and other countries as part of a wide-ranging espionage, surveillance, and disruptive operation for over a decade. The Appin Software Security (aka Appin Security Group), according to an in-depth analysis from SentinelOne, began as an educational startup offering offensive security training programs, while…

■■■■■ MetaFinder: Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata. https://github.com/Josue87/MetaFinder https://t.me/cKure/13246

■■■■■ Zero-Day: In a first, cryptographic keys protecting SSH connections stolen in new attack An error as small as a single flipped memory bit is all it takes to expose a private key. https://arstechnica.com/security/2023/11/hackers-can-steal-ssh-cryptographic-keys-in-new-cutting-edge-attack/2/ https://t.me/cKure/13245

■■□□□ A tool for carrying out brute force attacks against Office 365, with built-in IP rotation use AWS gateways. https://github.com/nickzer0/RagingRotator https://t.me/cKure/13244

■■■□□ Exploit for cve-2023-47246 SysAid RCE (shell upload). https://github.com/W01fh4cker/CVE-2023-47246-EXP https://t.me/cKure/13243

■■■■■ Data-Leak: Samsung says hackers accessed customer data during year-long data-breach. Samsung says hackers accessed customer data during year-long breach https://t.me/cKure/13242

■■■■■ Zero-Day: VMware discloses critical VCD Appliance auth bypass with no patch. https://www.bleepingcomputer.com/news/security/vmware-discloses-critical-vcd-appliance-auth-bypass-with-no-patch/ https://t.me/cKure/13241

■■■■□ CVE-2023-23583 (CVSS score: 8.8) allow escalation of privilege and/or information disclosure and/or denial of service via local access. Termed Reptar; the Intel CPU vulnerability impacts multi-tenant virtualized environments. https://thehackernews.com/2023/11/reptar-new-intel-cpu-vulnerability.html https://t.me/cKure/13240