All posts tagged cyber

■■■■■ Threat Alert: Mirai/Gafgyt Fork with New DDoS Modules Discovered https://cujo.com/mirai-gafgyt-with-new-ddos-modules-discovered/ https://t.me/cKure/9253

■■■■■ CVE-2021-40444: Microsoft MSHTML Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444 https://t.me/cKure/9252

■■■■□ SSRF in PDF export with PhantomJs https://github.com/PetrusViet/CVE-2021-39115 https://t.me/cKure/9251

■■■□□ CVE-2021-39115 Template Injection in Email Templates leads to code execution on Jira Service Management Server https://github.com/PetrusViet/CVE-2021-39115 https://t.me/cKure/9250

■□□□□ Israel : A threat actor that goes online with the moniker ‘Sangkancil’ claims to have stolen the personal information of 7 million Israelis. https://securityaffairs.co/wordpress/121984/breaking-news/israelis-data-online.html https://t.me/cKure/9249

■■■□□ Microsoft Sounds Alarm on Zero-Day Aimed at Office. https://securityboulevard.com/2021/09/microsoft-sounds-alarm-on-zero-day-aimed-at-office/ https://t.me/cKure/9248

■■■■■ GitHub finds 7 code execution vulnerabilities in ‘tar’ and npm CLI. GitHub security team has identified several high-severity vulnerabilities in npm packages, “tar” and “@npmcli/arborist,” used by npm CLI. The tar package receives 20 million weekly downloads on average, whereas arborist gets downloaded over 300,000 times every week. https://www.bleepingcomputer.com/news/security/github-finds-7-code-execution-vulnerabilities-in-tar-and-npm-cli/ https://t.me/cKure/9247

■■■■■ A team of academics from universities in Australia , Israel , and the United States has successfully mounted CPU side-channel attacks that recover data from Google Chrome and Chromium-based browsers protected by the Site Isolation feature. https://malware.news/t/new-cpu-side-channel-attack-takes-aim-at-chrome-s-site-isolation-feature/52538 https://t.me/cKure/9246

■□□□□ Cyber-Attack on Washington DC University. https://www.infosecurity-magazine.com/news/cyberattack-on-washington-dc/ https://t.me/cKure/9245

■■■■□ Critical Vulnerability in HAProxy (CVE-2021-40346): Integer Overflow Enables HTTP Smuggling https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/ https://t.me/cKure/9244