All posts tagged cyber

■■■■□ Iranian cyber espionage campaign (COBALT MIRAGE) breakdown. https://www.youtube.com/watch?v=ELa_FrHlMd8 https://t.me/cKure/12290

■■■■□ CVE-2023-29218: The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service (reduction of reputation score) by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as exploited in the wild in March and April 2023. This is the first…

■■■■□ Data-Leak from Russia as ‘Vulkan files’ leak reveals Putin’s global and domestic cyberwarfare tactics. https://www.theguardian.com/technology/2023/mar/30/vulkan-files-leak-reveals-putins-global-and-domestic-cyberwarfare-tactics https://t.me/cKure/12287

■■■■□ Data-Leak from United States: IntelBroker, a notorious initial access broker from Breached, has returned from his hiatus. Attacker informed vx-underground that they have compromised the United States Citizenship and Immigration Services by discovering a publicly exposed AWS bucket. Admin credentials? Admin:Password1 https://twitter.com/vxunderground/status/1642875346235129856 https://t.me/cKure/12282

■■□□□ A Comparison of Exploit-DB and 0day.today. https://vulncheck.com/blog/edb-0day-compare https://t.me/cKure/12281

■■■□□ 3CX DesktopApp Security Alert. https://www.3cx.com/blog/news/desktopapp-security-alert/ https://t.me/cKure/12280

■■■■□ Initial Implants and Network Analysis Suggest the 3CX Supply Chain Operation Goes Back to Fall 2022. https://blogs.blackberry.com/en/2023/03/initial-implants-and-network-analysis-suggest-the-3cx-supply-chain-operation-goes-back-to-fall-2022 https://t.me/cKure/12279

■□□□□ Winter Vivern Uses Known Zimbra Vulnerability to Target Webmail Portals of NATO-Aligned Governments in Europe. https://www.proofpoint.com/us/blog/threat-insight/exploitation-dish-best-served-cold-winter-vivern-uses-known-zimbra-vulnerability https://t.me/cKure/12278

■■■■□ 3CX Supply Chain Compromise Leads to ICONIC Incident. https://www.volexity.com/blog/2023/03/30/3cx-supply-chain-compromise-leads-to-iconic-incident/ https://t.me/cKure/12277

Keytap: acoustic keyboard eavesdropping. Bridging the airgap. https://github.com/ggerganov/kbd-audio https://t.me/cKure/12275