All posts tagged cyber

■□□□□ Microsoft has released a security update to fix the last remaining PrintNightmare zero-day vulnerabilities that allowed attackers to gain administrative privileges on Windows devices quickly. https://t.me/cKure/9324

■□□□□ The evil twin: SSID Stripping flaw lets hackers mimic real wireless access points. https://www.hackread.com/ssid-stripping-hackers-wireless-access-points/ https://t.me/cKure/9323

■■□□□ Zero-Day: United States Sale of zero-click exploit to UAE in case of former U.S. intelligence hackers now charged as part of role of hacking for the UAE https://t.co/MsRmmbqVMo https://t.me/cKure/9322

■■■□□ Privacy: Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns. Kape Technologies is an Israeli cybersecurity firm that has bought ExpressVPN for $936 million. However, its users are now flipping out. https://www.hackread.com/israeli-firm-kape-technologies-expressvpn-privacy/ https://t.me/cKure/9321

A consortium of journalists gained access to a leak of more than 50,000 phone numbers entered into a system used for targeting by Pegasus, a sophisticated spyware product made by the Israel sponsored company NSO Group. Governments around the world paid the company vast sums of money to gain access to Pegasus and let them…

■■■■■ Apple fixes “zero-click” iMessage zero-day exploited to deliver spyware (CVE-2021-30860). Apple has released security updates for macOS, iOS, iPadOS, watchOS and Safari that patch two vulnerabilities (CVE-2021-30860, CVE-2021-30858) that are being exploited in attacks in the wild. About the vulnerabilities (CVE-2021-30860, CVE-2021-30858) Active exploitation of CVE-2021-30860, a integer overflow bug that could be exploited…

Critical encryption vulnerability found in secure communications platform Matrix. https://portswigger.net/daily-swig/critical-encryption-vulnerability-found-in-secure-communications-platform-matrix https://t.me/cKure/9318

■■■■■ Great analysis on Pegasus Malware https://docs.google.com/document/d/1eK-UrzBNHCaFiHuK6RjbeGDJOVTFy5pztmQ0d2bqT2Y https://t.me/cKure/9317

■■■■□ Pair of Google Chrome Zero-Day Bugs Actively Exploited. https://threatpost.com/google-chrome-zero-day-exploited/169442/ https://t.me/cKure/9316

■■□□□ Olympus insists medical services ‘uninterrupted’ by malware attack. https://portswigger.net/daily-swig/olympus-insists-medical-services-uninterrupted-by-malware-attack https://t.me/cKure/9315