All posts tagged cyber

This (t.me/ckuRED/212) comes as nation state actors are involved in wild exploitation. https://t.me/cKure/11922

Researchers from Google’s Project Zero security team said that the Samsung S10, A50, and A51 models were affected, and that only devices powered by Samsung’s home-made Exynos chip were vulnerable, meaning the targets (as well as the attackers) were located in Europe, the Middle East, or Africa. CVE-2021-25337, CVE-2021-25369, CVE-2021-25370 https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html https://www.techradar.com/news/samsung-phones-are-being-targeted-by-some-seriosuly-shady-zero-days https://t.me/cKure/11920

■■■■□ Starlink User Terminal Modchip. https://github.com/KULeuven-COSIC/Starlink-FI https://t.me/cKure/11919

■■■■□ Defender for Endpoint – Implementing ASR Rules. https://blog.nathanmcnulty.com/defender-for-endpoint-implementing-asr-rules/ https://t.me/cKure/11918

■■■□□ Exploiting Wi-Fi Stack on Tesla Model S. https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s/ https://t.me/cKure/11917

■■■■□ Melting the DNS Iceberg: Taking over your infrastructure Kaminsky style. https://sec-consult.com/blog/detail/melting-the-dns-iceberg-taking-over-your-infrastructure-kaminsky-style/ https://t.me/cKure/11916

■■■□□ Tool: Web Automation: Don’t Use Selenium, Use Playwright. https://new.pythonforengineers.com/blog/web-automation-dont-use-selenium-use-playwright/ https://t.me/cKure/11915

■■■■□ Automatic Detection of Misconfigurations of AWS Identity and Access Management Policies. https://github.com/utwente-scs/misdet-code https://t.me/cKure/11914

■■■■□ Reverse engineering an EV charger. https://www.mnemonic.io/resources/blog/reverse-engineering-an-ev-charger/ https://t.me/cKure/11913

■■■□□ Todo REST API samples using ASP.NET Core minimal APIs. https://github.com/davidfowl/TodoApi https://t.me/cKure/11912