All posts tagged hack

■■■■■ CVE-2022-21972: Windows Server VPN Remote Kernel Use After Free Vulnerability https://labs.nettitude.com/blog/cve-2022-21972-windows-server-vpn-remote-kernel-use-after-free-vulnerability/ https://t.me/cKure/11328

■□□□□ The United Kingdom , Australian , Canadian , New Zealand , and United States cybersecurity authorities expect malicious cyber actors — including state-sponsored advanced persistent threat (APT) groups — to step up their targeting of MSPs in their efforts to exploit provider-customer network trust relationships. https://www.cisa.gov/uscert/ncas/alerts/aa22-131a Canada https://t.me/cKure/11327

■■■□□ Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925). https://www.helpnetsecurity.com/2022/05/10/cve-2022-26925/ https://t.me/cKure/11326

An advanced threat actor has leaked data of multiple institutions, organizations, nation-states and civilians in varying forms (PII, documents, credentials and similar). The data collage is huge and we (t.me/ckure) have received the copy. Some leaks were previously public. However, some are either new or were previously unreported. https://t.me/cKure/11325

■■□□□ Cyber-War against Russia This morning the online Russian TV schedule page was hacked. The name of every programme was changed to “On your hands is the blood of thousands of Ukrainians and their hundreds of murdered children. TV and the authorities are lying. No to war.” https://twitter.com/francis_scarr/status/1523554493144584192 https://t.me/cKure/11323

■■■□□ Cyber-War / Cyber-Attack: Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages. https://www.hackread.com/russian-tv-schedules-hacked-victory-day-anti-war/ https://t.me/cKure/11322

■■□□□ Costa Rica Declares State of Emergency Under Sustained Conti Cyberattacks. https://www.darkreading.com/attacks-breaches/costa-rica-declares-state-of-emergency-under-sustained-conti-cyberattacks https://t.me/cKure/11321

■□□□□ Industry pushes back against India’s data security breach reporting requirements. https://go.theregister.com/feed/www.theregister.com/2022/05/10/india_infosec_rules_criticised/ https://t.me/cKure/11320

■■■□□ Lincoln College to close after 157 years due ransomware attack. https://t.me/cKure/11319

■■■□□ Sophos Firewall CVE-2022-1040 (RCE) One-liner mass checker. Sophos Firewall CVE-2022-1040 (RCE) one-liner mass checker. REF: https://attackerkb.com/topics/cdXl2NL3cR/cve-2022-1040 cat sophos_servers | while read host do; do curl –connect-timeout 10 -ks -H “X-Requested-With: XMLHttpRequest” -X POST “https://$host/userportal/Controller?mode=8700&operation=1&datagrid=179&json=\{“”:”TEST”\}” | grep -q ‘Session Expired’ && printf “$host \033[1;41mVulnerable a CVE-2022-1040 (Sophos RCE)\e[0m\n”; done; https://github.com/CronUp/Vulnerabilidades/blob/main/CVE-2022-1040_checker https://t.me/cKure/11318