All posts tagged cyber

■□□□□ Household Names Hit with £500K Fine for Spamming Consumers. https://www.infosecurity-magazine.com/news/household-brands-500k-fine/ https://t.me/cKure/9370

■■■■□ United States : Former U.S. intel operatives to pay $1.6M for hacking for foreign govt. (UAE ). https://www.bleepingcomputer.com/news/security/former-us-intel-operatives-to-pay-16m-for-hacking-for-foreign-govt/ https://t.me/cKure/9369

■□□□□ Russia : Only one-in-ten Russian organizations are aware of the danger of vulnerabilities in web applications. https://www.ehackingnews.com/2021/09/only-one-in-ten-russian-organizations.html https://t.me/cKure/9368

■□□□□ Keys to the cloud: Unlocking digital transformation to enhance national security. https://www.helpnetsecurity.com/2021/09/16/digital-transformation-national-security/ https://t.me/cKure/9367

■□□□□ Data-Leak: Krita art app users targeted by ransomware posing as paid ‘collaboration’ opportunities. https://www.theregister.com/2021/09/14/krita_users_targeted_by_ransomware/ https://t.me/cKure/9366

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution), works with arbitrary DLL files. https://github.com/klezVirus/CVE-2021-40444 https://t.me/cKure/9365

■□□□□ Hillstone virtual Web Application Firewall detects and defends against treats in web applications. https://www.helpnetsecurity.com/2021/09/16/hillstone-virtual-web-application-firewall/ https://t.me/cKure/9364

■■□□□ Critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control of vulnerable devices. The flaw — dubbed “Seventh Inferno” (CVSS score: 9.8) — is part of a trio of security weaknesses, called Demon’s Cries (CVSS score: 9.8) and Draconian Fear (CVSS score: 7.8).…

■■■□□ ROFL-FUZZER: Ths is Domato, a DOM Fuzzer from Google, but hosted as an website It generates a instance of a newtab on the template given by the user , cuz come on no one wants thousands of html files on their PC HDD. https://github.com/GawdOfROFL/rofl-fuzzer https://t.me/cKure/9362

■■□□□ SpoolSploit: A collection of Windows print spooler exploits containerized with other utilities for practical exploitation. https://github.com/BeetleChunks/SpoolSploit https://t.me/cKure/9361