All posts tagged cyber

■■■■□ From Pearl to Pegasus: Bahraini Government Hacks Activists with NSO Group Zero-Click iPhone Exploits created / endorsed by the state of Israel . https://citizenlab.ca/2021/08/bahrain-hacks-activists-with-nso-group-zero-click-iphone-exploits/ https://t.me/cKure/9019

■□□□□ The Google IPv6 2a00:1450:4014:801::200e (formerly google.com) no longer responds to ICMP Echo requests since 17.08.2021. Not good if you rely on it for internet uptime detection. New IPv6 is 2a00:1450:4001:82f::200e (pingable). Source: https://twitter.com/_IntelligenceX/status/1430103241652588547 https://t.me/cKure/9018

■■■■■ Razer is working on an updated installer after it was discovered you can gain admin privileges on Windows by plugging in one of the gaming gear maker’s mice or keyboards. In fact, inserting any USB device that declares itself a Razer mouse or keyboard will lead to an exploitable situation. https://www.theregister.com/2021/08/23/security_in_brief/ https://t.me/cKure/9017

■□□□□ Telecommunications company AT&T has trashed claims that the personal data of 70 million of its customers has been stolen by the threat actor ShinyHunters. https://t.me/cKure/9016

■■■□□ Data-Leak by Microsoft. Data leaked includes COVID-19 vaccination records, social security numbers and email addresses tied to American Airlines, Ford, Indiana Department of Health and New York City public schools. https://threatpost.com/microsoft-38-million-sensitive-records-power-app/168885/ https://t.me/cKure/9015

■■■□□ Cyber-Attack on Russia as Konni RAT variant targeting Russia in ongoing attack campaign. So far, Konni RAT has managed to evade detection as only 3 security solutions on VirusTotal were able to detect the malware. https://www.hackread.com/konni-rat-variant-hits-russia-ongoing-attack/ https://t.me/cKure/9014

■■■□□ China : DJI once jailed is developer for 6 months for a git code leak. https://youtu.be/VqyzTv-2h9k https://t.me/cKure/9013

■■■■□ XLSM Malware with MacroSheets. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/xlsm-malware-with-macrosheets/ https://t.me/cKure/9012

■■■■□ Arbitrary code execution due to YAML deserialization. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r6jx-9g48-2r5r https://t.me/cKure/9011

■■■□□ Data-Leak: The State Department Has Reportedly Been Hacked. https://packetstormsecurity.com/news/view/32586/The-State-Department-Has-Reportedly-Been-Hacked.html https://t.me/cKure/9010