All posts tagged cyber

■■■■□ New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs. https://www.bleepingcomputer.com/news/security/new-cachewarp-amd-cpu-attack-lets-hackers-gain-root-in-linux-vms/ https://t.me/cKure/13239

■■■■□ Russia: Sandworm have breached Danish energy sector companies. Very nice timeline analysis. CVE-2023-28771 + CVE-2023-33009 + CVE-2023-33010 https://github.com/blackorbird/APT_REPORT/blob/master/Sandworm/sektorcert-angrebet-mod-dansk-kritisk-infrastruktur-tlp-clear-en.pdf https://t.me/cKure/13238

■■■■■ WhatsApp spy – logs online/offline events from ANYONE in the world. https://github.com/jasperan/whatsapp-osint https://t.me/cKure/13236

■■■■□ Disinformation: Telegram bot that deletes content from social media which show any content critical of Israel is still functional a month since creation. Their statistics claim to bed up to 60% successful in deleting articles (https://t.me/cKure/13183) Source: https://t.me/cKure/13234 https://t.me/cKure/13235

■■■□□ Cyber-Attack on UAE based company DP-World as it suffers a major cyber incident on its offshore offices in Australia 🦘 The attack disrupted port services. Up to 40% of the services were halted. Some operations were resume after overnight efforts by tech teams. The Australian government was involved in this incident. https://edition.cnn.com/2023/11/13/tech/australia-dp-world-cyberattack-ports-intl-hnk/index.html https://t.me/cKure/13233

■■■■■ Bypassing GLIBC 2.32’s Safe-Linking Without Leaks into Code Execution: The House of Rust. https://c4ebt.github.io/2021/01/22/House-of-Rust.html https://t.me/cKure/13232

■■■■□ Tor / Darknet Links: Every website added to our repository has been verified as legitimate by an independent staff of Internet journalists from #DeepOnionWeb. Beware of unverified links that may lead to scams. DeepOnionWeb is one of the oldest and most reputable darknet news and links portals, used by thousands of people every day…

■■■■□ Israel-Palestine Cyber-War update! Iranian hackers launch malware attacks on Israel’s tech sector. https://www.bleepingcomputer.com/news/security/iranian-hackers-launch-malware-attacks-on-israels-tech-sector/ https://t.me/cKure/13228

■■■■□ An unknown Threat Actor(s) claim to have compromised Coin Cloud. They allege to have exfiltrated 70,000 customer selfies (via ATM cameras), and 300,000 customers PII which includes Social Security Number, Date of Birth, First Name, Last Name, e-mail address, Telephone Number, Current Occupation, Physical Address, and more. They allege to have data for individuals…

■■■■□ Zero-Day: CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular vulnerability can be leveraged for remote, unauthenticated code execution. https://github.com/kljunowsky/CVE-2023-36845 https://t.me/cKure/13223