All posts tagged cyber

■■■■□ HCRootkit / Sutersu Linux Rootkit Analysis. https://www.lacework.com/blog/hcrootkit-sutersu-linux-rootkit-analysis/ https://t.me/cKure/9502

■■■■■ Disclosure of three 0-day iOS vulnerabilities and critique of Apple Security Bounty program. Tweets by illusionofcha0s https://habr.com/en/amp/post/579714 https://t.me/cKure/9498

■□□□□ Data-Leak: European Union formally blames Russia for the GhostWriter operation. https://hackademicus.nl/european-union-formally-blames-russia-for-the-ghostwriter-operation/ https://t.me/cKure/9497

■■■■□ subcrawl: find, scan and analyze open directories. https://github.com/hpthreatresearch/subcrawl https://t.me/cKure/9496

■■■■■ Researchers compile list of vulnerabilities abused by ransomware groups. So, we are up to 42 vulnerabilities across 17 technologies (with 1 pending) that ransomware groups exploit for initial access. This is why preaching “just patch” isn’t good enough. I don’t know what the answer is, but what we’re doing clearly isn’t working. https://t.co/oYBRUwTWf3 —…

■■■■■ This is one of the entries to the BGGP 2021 Polyglot File challenge. It uses a novel technique of directly embedding data within the compressed image data stream of a PNG. This means you can literally see the bytes of the embedded files! ● It literally took about a minute for me to understand.…

■■■■□ CVE-2021-37973: Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability. Use after free in Portals. Reported by Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero on 2021-09-21 (https://bugs.chromium.org/p/chromium/issues/detail?id=1251727) https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html https://thehackernews.com/2021/09/urgent-chrome-update-released-to-patch.html https://t.me/cKure/9491

■■□□□ CVE-2021-22005 PoC https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e https://t.me/cKure/9490

■■■□□ A New APT Hacker Group Spying On Hotels and Governments Worldwide. https://thehackernews.com/2021/09/a-new-apt-hacker-group-spying-on-hotels.html https://t.me/cKure/9489

■□□□□ Resetting Expired Passwords Remotely. https://www.n00py.io/2021/09/resetting-expired-passwords-remotely/ https://t.me/cKure/9488