All posts tagged cyber

■■■□□ Cache Poisoning via SelfXSS + Path Parameter https://0u.ma/m/5 https://t.me/cKure/9091

● FYI: Our tools website ckure.xyz has an API malfunction and blocks valid requests to the site more often. This is not a behaviour that happens always. So most visitors should not face issues using the utilities. The fault is in the API logic that prevents proxy, TOR or known malicious IPs to connect to…

■□□□□ A threat actor is selling ATO (account takeover vulnerability) apparently on a well known crypto exchange for 50K USD. The vulnerability as per the attacker can force reset a user’s password. We could not verify this claim. https://t.me/cKure/9089

■□□□□ Phorpiex botnet shuts down and authors put source code for sale. https://securityaffairs.co/wordpress/121560/malware/phorpiex-botnet.html https://t.me/cKure/9088

■■□□□ Whoogle Search / OS-Intel: Get Google search results, but without any ads. OSINT https://github.com/benbusby/whoogle-search https://t.me/cKure/9087

■□□□□ Interesting thread https://twitter.com/ErrataRob/status/1430988198801457157 https://t.me/cKure/9086

■□□□□ Annke network video recorder vulnerability could see attackers seize control of security cameras. https://portswigger.net/daily-swig/annke-network-video-recorder-vulnerability-could-see-attackers-seize-control-of-security-cameras https://t.me/cKure/9085

■■■■□ T-Mobile CEO: Hacker brute-forced his way through our network. https://www.bleepingcomputer.com/news/security/t-mobile-ceo-hacker-brute-forced-his-way-through-our-network/ https://t.me/cKure/9084

■■■□□ Interesting thread. Local administrator is not just with Razer.. it is possible for ALL. https://twitter.com/ptracesecurity/status/1431036753054474240 https://t.me/cKure/9080

■■■■■ CHAOSDB: Critical Vulnerability in Microsoft Azure Cosmos DB https://chaosdb.wiz.io/ https://t.me/cKure/9079