All posts tagged cyber

■■■□□ Fake GitHub Repos Delivering Malware as PoCs. shttps://www.hackread.com/fake-github-repos-drop-malware-pocs/ https://t.me/cKure/12509

■■■■■ iOS 15.7 Jailbreak, frida and objection setup environment. https://0xdekster.medium.com/ios-15-7-jailbreak-frida-and-objection-setup-environment-d54d4ea5450 https://t.me/cKure/12508

■■■■□ China: Chinese Hacking Group Exploits VMware ESXi Vulnerability to Backdoor Windows and Linux VMs. https://www.blackhatethicalhacking.com/news/chinese-hacking-group-exploits-vmware-esxi-vulnerability-to-backdoor-windows-and-linux-vms/ https://t.me/cKure/12507

■■■■□ Hardware: Security Expert Defeats Lenovo Laptop BIOS Password With a Screwdriver. https://www.tomshardware.com/news/cyber-security-expert-defeats-lenovo-laptop-bios-password-with-a-screwdriver https://t.me/cKure/12506

Chinese hackers use DNS-over-HTTPS for Linux malware communication. ChamelGang and ChamelDoH: A DNS-over-HTTPS implant https://stairwell.com/news/chamelgang-and-chameldoh-a-dns-over-https-implant/ https://www.bleepingcomputer.com/news/security/chinese-hackers-use-dns-over-https-for-linux-malware-communication/ https://t.me/cKure/12504

■■■□□ United States: Millions of Oregon, Louisiana state IDs stolen in MOVEit breach. https://www.bleepingcomputer.com/news/security/millions-of-oregon-louisiana-state-ids-stolen-in-moveit-breach/ https://t.me/cKure/12503

■■■■□ CVE-2023-34362: MOVEit mayhem 3: “Disable HTTP and HTTPS traffic immediately. https://nvd.nist.gov/vuln/detail/CVE-2023-34362 MOVEit mayhem 3: “Disable HTTP and HTTPS traffic immediately” MOVEit zero-day exploit used by data breach gangs: The how, the why, and what to do… https://www.fortinet.com/blog/threat-research/moveit-transfer-critical-vulnerability-cve-2023-34362-exploited-as-a-0-day https://t.me/cKure/12502

■■■□□ Making free phone calls via satellite. https://youtu.be/2njqPpFXhMI https://t.me/cKure/12501

■■■□□ Flipper Zero strikes. https://hackaday.com/2023/06/14/flipper-zero-smoking-a-smart-meter-is-a-bad-look-for-hardware-hackers/ https://t.me/cKure/12500

■■□□□ A successful massive global cyber-attack is underway targeting United States’ government agencies by a Russian speaking ransomware group. Confirmed by CISA. https://www.cisa.gov/news-events https://www.cisa.gov/news-events/news/us-and-international-partners-release-comprehensive-cyber-advisory-lockbit-ransomware https://insiderpaper.com/several-us-government-agencies-hit-in-a-global-cyberattack-report/ https://t.me/cKure/12499