All posts tagged cyber

■■■□□ Swiss government websites are under DDoS attacks, but several ransomware gangs have also turned their sights on Swiss government organizations, cantonal governments, cities and companies in the last few months. DDoS on Switzerland: Several Federal Administration websites are/were inaccessible on Monday 12 June 2023, due to a DDoS attack on its systems,” the Swiss…

■■■■□ Elevate to SYSTEM in Windows. https://github.com/g3tsyst3m/elevationstation https://t.me/cKure/12497

■■■■□ Omnipotent, the previous administrator of RaidForums, delivered a PGP signed message today. Since he was arrested by authorities, it is possible that his private key could have been compromised. https://t.me/cKure/12494

Zero-Day: Hackers can steal cryptographic keys by video-recording power LEDs 60 feet away (AirGap). https://arstechnica.com/information-technology/2023/06/hackers-can-steal-cryptographic-keys-by-video-recording-connected-power-leds-60-feet-away/ https://t.me/cKure/12492

■■■■□ Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs. https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2023-patch-tuesday-fixes-78-flaws-38-rce-bugs/ https://t.me/cKure/12491

■■■■■ VPX Gon’ Give It to Ya: VMware ESXi Zero-Day Used by Chinese Espionage Actor to Bypass Authentication Checks and Perform Privileged Guest Operations. https://www.mandiant.com/resources/blog/vmware-esxi-zero-day-bypass https://t.me/cKure/12490

■■■□□ Reverse Engineering: ChatGPT Analyzes Fake ChatGPT Malware. https://youtube.com/watch?v=poIZDuAWrOo https://t.me/cKure/12489

■■■■■ Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused by a threat actor to achieve remote code execution. CVE-2023-27997, is reachable pre-authentication, on every SSL VPN appliance. https://thehackernews.com/2023/06/critical-rce-flaw-discovered-in.html https://olympecyberdefense.fr/1193-2/ https://t.me/cKure/12488

■■■■□ Proof of Concept Code for CVE-2023-32353: Local privilege escalation via iTunes in Windows. https://github.com/86x/CVE-2023-32353-PoC https://t.me/cKure/12487

■■■□□ Cyber-War: Ukrainian hackers take down service provider for Russian banks in a Cyber-Attack. https://www.bleepingcomputer.com/news/security/ukrainian-hackers-take-down-service-provider-for-russian-banks/ https://t.me/cKure/12486