All posts tagged cyber

■■■■□ New, currently undetectable Powershell Reverse Shell based on the original Nishang Framework written by Nikhil Mittal. No need for AMSI bypass. Changed the ASCII encoding to UTF8 and 65535 integer to (2-shl15) to reach 100% AV bypass ratio. https://github.com/tihanyin/PSSW100AVB/blob/main/ReverseShell_2021_09.ps1 Creator: Dr. Norbert Tihanyi https://t.me/cKure/9704

■■■■□ Apache Software Foundation has released HTTP Web Server 2.4.51 to address an actively exploited path traversal vulnerability (CVE-2021-41773) that was only partially addressed with a previous release. https://httpd.apache.org/security/vulnerabilities_24.html https://t.me/cKure/9703

■□□□□ United Kingdom : Cyber-attacks targeting UK firms are back on the increase, reaching a rate of one every 47 seconds over the summer, according to new data from Beaming. https://t.me/cKure/9702

■■■□□ A 13-year-old Chinese hacker did not cause a global outage that took Facebook offline this week The company said the crisis was caused by an internal error, not malicious activity https://factcheck.afp.com/http%253A%252F%252Fdoc.afp.com%252F9P982P-1 https://t.me/cKure/9701

■□□□□ Cyber-Attack: Navy Warship’s Facebook Page Hacked to Stream ‘Age of Empires’ Gaming. United States https://t.me/cKure/9700

■■□□□ Tool: pFuzz, an advanced red teaming fuzzing tool which we developed for our research. It helps to bypass web application firewall by using different methods at the same time. https://github.com/RedSection/pFuzz https://t.me/cKure/9699

■■■■■ Breaking from India 🇮🇳: Activists in Togo 🇹🇬 attacked by Indian made spyware. OSINT report by Amnesty International of a Cyber-Crime apparently by an Indian company that has been linked to the infrastructure used by Donot Group and an Indian cybersecurity company Innefu Labs. We have asked the concerned team for a comment. We…

■■■□□ Microsoft: 58% of Nation-State Cyberattacks Come From Russia (United States ). https://t.me/cKure/9692

■□□□□ Microsec.ai Launches Solution to Deliver Agentless Runtime Protection for Multi-cloud Infrastructure as a Service. https://t.me/cKure/9691

■■□□□ United States : Google has warned about 14,000 of its users about being targeted in a state-sponsored phishing campaign from APT28, a threat group that has been linked to Russia https://www.bleepingcomputer.com/news/security/google-warns-14-000-gmail-users-targeted-by-russian-hackers/ https://t.me/cKure/9690