All posts tagged cyber

■■■□□ Cyber-Crime: cl0p ransomware group claims to have ransomed Sony and PWC. cl0p claims to have exfiltrated 120GB of data and archives from PWC. Source: vx-underground | twitter https://t.me/cKure/12552

■■■■□ Camaro Dragon Hackers Strike with USB-Driven Self-Propagating Malware. https://thehackernews.com/2023/06/camaro-dragon-hackers-strike-with-usb.html https://t.me/cKure/12551

■■■■□ nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover https://www.descope.com/blog/post/noauth https://t.me/cKure/12550

■■□□□ DuckDuckGo browser for Windows available for everyone as public beta. https://t.me/cKure/12549

■■■■■ Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!. https://nakedsecurity.sophos.com/2023/06/22/apple-patch-fixes-zero-day-kernel-hole-reported-by-kaspersky-update-now/ https://t.me/cKure/12547

■■■■□ Weaponised XSS Payloads. https://github.com/hakluke/weaponised-XSS-payloads https://t.me/cKure/12546

■■■■□ Analyzing the TriangleDB implant used in Operation Triangulation. https://securityaffairs.com/147717/malware/triangledb-implant-used-operation-triangulation.html https://t.me/cKure/12545

■■■□□ IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware. https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/ https://t.me/cKure/12544

■■■■□ Zero-Day: VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks (formerly vRealize Network Insight) has come under active exploitation in the wild. The flaw, tracked as CVE-2023-20887, could allow a malicious actor with network access to the product to perform a command injection attack, resulting in remote…

■■■■■ Password spraying and MFA bypasses in the modern security landscape. https://www.sprocketsecurity.com/resources/how-to-bypass-mfa-all-day https://t.me/cKure/12541