All posts tagged cyber

BLASTPASS NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild. ● Update your Apple devices. https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/ https://t.me/cKure/12851

■■■□□ Bypassing Defender’s LSASS dump detection and PPL protection In Go. https://tastypepperoni.medium.com/bypassing-defenders-lsass-dump-detection-and-ppl-protection-in-go-7dd85d9a32e6 https://t.me/cKure/12850

■■■■□ LDAP Relay Scan: Check for LDAP protections regarding the relay of NTLM authentication. https://github.com/zyn3rgy/LdapRelayScan https://t.me/cKure/12849

■■■□□ PySQLRecon: Offensive MSSQL toolkit written in Python, based off SQLRecon. https://github.com/Tw1sm/PySQLRecon https://t.me/cKure/12848

■■■■□ Burp Suite Certified Practitioner Exam Study. https://github.com/botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study https://t.me/cKure/12847

■■■□□ Gpoddity: Exploiting Active Directory Gpos Through Ntlm Relaying, And More. https://www.synacktiv.com/publications/gpoddity-exploiting-active-directory-gpos-through-ntlm-relaying-and-more https://t.me/cKure/12846

■■■■□ Cyber-War: The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday said it thwarted a cyber attack against an unnamed critical energy infrastructure facility in the country by Russia’s APT 28 (aka Fancy Bear ). https://thehackernews.com/2023/09/ukraines-cert-thwarts-apt28s.html https://t.me/cKure/12845

■□□□□ Dubai: 23,600 free Wi-Fi hotspots in emirate, says authority as it announces new digital strategy. ● Cyber-Crime is bound to expand. However, controls and active monitoring may relieve attacks from skiddies. https://www.khaleejtimes.com/uae/dubai-23600-free-wi-fi-hotspots-in-emirate-says-authority-as-it-announces-new-digital-strategy https://t.me/cKure/12844

■■■□□ Hackers steal 10 years of patient forms from TPG Asia-backed TissuPath. Global private equity giant TPG’s Australian pathology business, TissuPath, has suffered a data breach with a decade’s worth of patient request forms being released on the dark web. https://www.afr.com/companies/healthcare-and-fitness/tpg-asia-backed-tissupath-tangled-in-data-breach-20230906-p5e2fl https://t.me/cKure/12843

■■■□□ German financial agency site disrupted by DDoS attack since Friday. https://twitter.com/BaFin_Bund/status/1698594562724290767 https://t.me/cKure/12842