All posts tagged hack

■■■□□ How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks. https://www.praetorian.com/blog/how-to-exploit-active-directory-acl-attack-paths-through-ldap-relaying-attacks/ https://t.me/cKure/11445

■■■■□ Zero-Day: Exploit code for Microsoft Windows Support Diagnostic Tool RCE. https://github.com/NafisiAslH/KnowledgeSharing/tree/main/CyberSecurity/Web/CVEs/CVE-2022/CVE-2022-30190 https://t.me/cKure/11444

■■□□□ SCADA: Conti spotted working on exploits for Intel Management Engine flaws. Keep firmware updated. https://eclypsium.com/2022/06/02/conti-targets-critical-firmware/ https://t.me/cKure/11443

■□□□□ Ransomware gang now hacks corporate websites to show ransom notes. https://www.bleepingcomputer.com/news/security/ransomware-gang-now-hacks-corporate-websites-to-show-ransom-notes/ https://t.me/cKure/11442

■■■■□ Using Python to unearth a goldmine of threat intelligence from leaked chat logs. https://www.microsoft.com/security/blog/2022/06/01/using-python-to-unearth-a-goldmine-of-threat-intelligence-from-leaked-chat-logs/ https://t.me/cKure/11441

■■■■■ Cyber-War via electronic-warfare against Ukraine by Russia Ukrainian intelligence official calls Russian threat ‘pretty severe’ when it comes to disrupting reconnaissance efforts, commanders’ communications with troops. https://www.timesofisrael.com/theyre-jamming-everything-secretive-electronic-warfare-shapes-war-in-ukraine/ https://t.me/cKure/11440

Zero-Day: New Windows Search zero-day added to Microsoft protocol nightmare. https://www.bleepingcomputer.com/news/security/new-windows-search-zero-day-added-to-microsoft-protocol-nightmare/ https://t.me/cKure/11439

Zero-Day: A critical security flaw has been uncovered in UNISOC’s smartphone chipset that could be potentially weaponized to disrupt a smartphone’s radio communications through a malformed packet. https://research.checkpoint.com/2022/vulnerability-within-the-unisoc-baseband/ https://t.me/cKure/11438

■■■■□ Zero-Day: GitLab addresses a critical security vulnerability, tracked as CVE-2022-1680, that could be exploited by an attacker to take over users’ accounts. https://about.gitlab.com/releases/2022/06/01/critical-security-release-gitlab-15-0-1-released/ https://t.me/cKure/11436

■■□□□ Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability. https://thehackernews.com/2022/06/hackers-exploiting-unpatched-critical.html https://t.me/cKure/11435