All posts tagged cyber

■■■■■ BugHound: a static code analysis tool based on ElasticSearch. https://shells.systems/unveiling-bughound-a-static-code-analysis-tool-based-on-elasticsearch/ https://t.me/cKure/9429

■□□□□ US agricultural co-op hit by ransomware, expects food supply chain disruption. https://www.helpnetsecurity.com/2021/09/21/new-cooperative-ransomware/ https://t.me/cKure/9428

■■■■□ Local File Read via Stored XSS in The Opera Browser https://blogs.opera.com/security/2021/09/bug-bounty-guest-post-local-file-read-via-stored-xss-in-the-opera-browser/ https://t.me/cKure/9427

■■■□□ ‘We in This ****:’ Snapchat Maps Used to Bust Alleged Capitol Rioter. https://www.vice.com/amp/en/article/pkbne8/snapchat-map-capitol-rioter-arrested https://t.me/cKure/9426

iOS 15 iCloud Private Relay Vulnerability Identified. https://fingerprintjs.com/blog/ios15-icloud-private-relay-vulnerability/ https://t.me/cKure/9425

■■■■■ 5 RCEs in npm for $15,000+. ︎CVE-2021-32804 ($10,000) ︎CVE-2021-32803 ($2,000) ︎CVE-2021-37701 ($2,500) ︎CVE-2021-37712 (found internally – $1,000 token payout) ︎CVE-2021-37713 (found internally)︎CVE-2021-39134 (TBD) https://robertchen.cc/blog/2021/09/20/npm-rce https://t.me/cKure/9424

■□□□□ Bonaci Group, a new leak gang, has opened a site on the DarkWeb. Most of the victims’ lists are law firms. Source: https://t.co/c37xstjarE https://t.me/cKure/9423

■□□□□ Hacked sites push TeamViewer using fake expired certificate alert. https://www.bleepingcomputer.com/news/security/hacked-sites-push-teamviewer-using-fake-expired-certificate-alert/ https://t.me/cKure/9422

■■■■■ Cyber-Attack by India 🇮🇳 on Pakistan 🇵🇰 and China 🇨🇳 as Windows Zero-Day(s) made by United States 🇺🇸 company used in spy campaign. India apparently leaked the Zeroday details and were used by rogue hacking units of South Korea 🇰🇷 (non-state sponsored). https://www.forbes.com/sites/thomasbrewster/2021/09/17/exodus-american-tech-helped-india-spy-on-china/ https://t.me/cKure/9420

■□□□□ AT&T lost $200M in seven years to illegal phone unlocking scheme. https://www.bleepingcomputer.com/news/security/atandt-lost-200m-in-seven-years-to-illegal-phone-unlocking-scheme/ https://t.me/cKure/9419