All posts tagged cyber

Zero-Day writeup: Accidental $70k Google Pixel Lock Screen Bypass. https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass https://t.me/cKure/11898

■■■□□ Cyber-War; Pakistan | China China to train 57 employees of ISI’s technical directorate in cyber security, after multiple Pakistan generals and politicians communications were eavesdropped by foreign adversaries. ● We could not verify the credibility of the information. Viewer discretion advised. https://t.me/cKure/11897

■■■□□ Ransomware PoC. https://github.com/ORCx41/Ultra https://t.me/cKure/11896

■■■■□ Zero-Day: Citrix urges admins to patch critical ADC, Gateway auth bypass. CVE-2022-27510, CVE-2022-27513 and CVE-2022-27516. https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516 https://www.bleepingcomputer.com/news/security/citrix-urges-admins-to-patch-critical-adc-gateway-auth-bypass/ https://t.me/cKure/11895

■■■□□ Conti Affiliates Black Basta, BlackByte Continue to Attack Critical Infrastructure. Between February and July, 81 victim organizations were listed on the groups’ data leak sites. https://www.infosecurity-magazine.com/news/black-basta-blackbyte-attack-eu/ https://t.me/cKure/11894

■■□□□ Volatility3 Windows Plugin : AnyDesk. https://www.forensicxlab.com/posts/anydesk/ https://t.me/cKure/11893

■■■□□ Interesting thread on Lazarus, state sponsored center crime group from DPRK (North Korea). https://twitter.com/blackorbird/status/1588109588460716032 https://t.me/cKure/11892

■■■■□ Zero-day: The OpenSSL punycode vulnerability (CVE-2022-3602): Overview, detection, exploitation, and remediation. https://securitylabs.datadoghq.com/articles/openssl-november-1-vulnerabilities/ https://t.me/cKure/11890

■■■□□ Linux Kernel map. https://makelinux.github.io/kernel/map/ https://t.me/cKure/11889

■■■■□ CVE-2022-3786; DoS: Buffer overflow occurs in the ossl_a2ulabel vulnerable function. When this function meets a Punycode part followed by a dot character (“.”) it also appends “.” to the output buffer even if it overflows its size. https://twitter.com/_CPResearch_/status/1587741086340075521 https://t.me/cKure/11888