All posts tagged cyber

■■■□□ Apple fixes eighth zero-day used to hack iPhones and Macs this year. https://www.bleepingcomputer.com/news/security/apple-fixes-eighth-zero-day-used-to-hack-iphones-and-macs-this-year/ https://t.me/cKure/11788

■■□□□ Data-Leak from Oman as 54K records o if PII / user credentials have been stolen via stealer malware in last few months as per vx-underground. https://t.me/cKure/11786

IoT: Firmware extraction tactics. https://youtu.be/nruUuDalNR0 https://t.me/cKure/11784

■■■■■ Browser Exploitation: Firefox OOB to RCE. https://vulndev.io/2022/09/09/browser-exploitation-firefox-oob-to-rce/ https://t.me/cKure/11783

■■■□□ Zero-Day: Akamai WAF bypass Click Here https://twitter.com/RenwaX23/status/1568567665928577025 https://t.me/cKure/11782

■■■■□ Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/malicious-cookie-stuffing-chrome-extensions-with-1-4-million-users/ https://t.me/cKure/11781

■■■■■ Cyber-Crime via fake Google translate and similar other apps for desktop, reveals check point, an Israel based firm. The app mined monero crypto coin. https://research.checkpoint.com/2022/check-point-research-detects-crypto-miner-malware-disguised-as-google-translate-desktop-and-other-legitimate-applications/ https://t.me/cKure/11779

● Many news outlets and forums allegedly claimed about a Data-Leak at TikTok. We had been closely monitoring and can now confirm that the information of leak was fake. No user data was breached. https://t.me/cKure/11778

■■□□□ Suspicious Encoded Powershell. https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules/blob/main/Threat%20Hunting%20Cases/Suspicious%20Encoded%20Powershell.md https://t.me/cKure/11777

■■■□□ Attacking Firecracker: AWS’ microVM Monitor Written in Rust. https://www.graplsecurity.com/post/attacking-firecracker https://t.me/cKure/11776