All posts tagged cyber

■■■■□ Data-Leak: Crypto exchange Coinbase disclosed that a threat actor stole cryptocurrency from 6,000 customers after using a vulnerability to bypass the company’s SMS multi-factor authentication security feature. https://www.bleepingcomputer.com/news/security/hackers-rob-thousands-of-coinbase-customers-using-mfa-flaw/ https://t.me/cKure/9593

■■■■□ XSS to RCE https://whynotsecurity.com/blog/xss-to-rce/ https://t.me/cKure/9592

■■□□□ Kernel Vmalloc Use-After-Free in the ION Allocator. https://labs.taszk.io/blog/post/61_android_ion_uaf/ https://t.me/cKure/9591

■□□□□ https://medium.com/@0xnaeem/how-i-get-my-first-p1-bug-from-bugcrowd-vdp-program-with-my-phone-e1eb1444146c https://t.me/cKure/9590

■■■■□ CVE-2015-1642: SPRAYING THE HEAP IN SECONDS USING ACTIVEX CONTROLS IN MICROSOFT OFFICE https://www.greyhathacker.net/?p=911 https://t.me/cKure/9589

■■■■□ Video: Satellite hacking. https://m.youtube.com/watch?v=76w6wPwnQh4 https://t.me/cKure/9587

■■■■□ Video: Satellite hacking. https://m.youtube.com/watch?v=76w6wPwnQh4 https://t.me/cKure/9587

■■■■□ Ping’ing XMLSec. https://blog.tint0.com/2021/09/pinging-xmlsec.html https://t.me/cKure/9584

■■■□□ Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws. https://thehackernews.com/2021/09/update-google-chrome-asap-to-patch-2.html https://t.me/cKure/9583

■■■■□ Threat actors could exploit a stored cross-site scripting (XSS) vulnerability in Apple AirTag product to lure users to malicious websites. https://securityaffairs.co/wordpress/122788/hacking/weaponizing-apple-airtag.html https://t.me/cKure/9582