All posts tagged cyber

■■■□□ Interesting thread! https://twitter.com/_justYnot/status/1432322673791537153 https://t.me/cKure/9135

■■□□□ 1Password Secret Retrieval — Methodology and Implementation. https://posts.specterops.io/1password-secret-retrieval-methodology-and-implementation-6a9db3f3c709 https://t.me/cKure/9134

■□□□□ Single-factor authentication (SFA) has been added today by the US Cybersecurity and Infrastructure Security Agency (CISA) to a very short list of cybersecurity bad practices it advises against. https://t.me/cKure/9133

■□□□□ Data-Leak: LockBit group to publish 103GB of Bangkok Air customer data. https://threatpost.com/lockbit-bangkok-airways-breach/169019/ https://t.me/cKure/9132

■■□□□ The bug (CVE-2021-33766) is an information-disclosure issue that could reveal victims’ personal information, sensitive company data and more. https://threatpost.com/microsoft-exchange-proxytoken-email/169030/ https://t.me/cKure/9131

■■■□□ Vulnerabilities Detected in Open Source elFinder File Manager. The five flaws, termed CVE-2021-32682 as a group, have a CVSS score of 9.8, which means they’re highly dangerous. The vulnerability chain impacts elFinder version 2.1.58. https://www.ehackingnews.com/2021/08/vulnerabilities-detected-in-open-source.html https://t.me/cKure/9130

■□□□□ Cofense Report Analysis on Phishing Campaign Utilizing Vzwpix. https://www.ehackingnews.com/2021/08/cofense-report-analysis-on-phishing.html https://t.me/cKure/9129

■■□□□ SMB Relay Attack Auto Script. https://reconshell.com/smb-relay-attack-auto-script/ https://t.me/cKure/9128

■■■□□ Trend Micro reported that the theme of commercial spyware Pegasus from NSO Group is used by cybercriminals in phishing campaigns. According to experts, recently the Confucius cybercriminal group conducted a phishing campaign aimed at the Pakistani military. The ma licious campaign was discovered in a broader Trend Micro investigation into Confucius. https://t.me/cKure/9127

■■■■■ Subrake: Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters https://github.com/hash3liZer/Subrake https://t.me/cKure/9126