All posts tagged hack

Zero-Day in Nginx results in Remote Code Execution (RCE). https://securityonline.info/nginx-zero-day-rce-vulnerability-alert/ https://t.me/cKure/11162

■■■□□ First malware targeting AWS Lambda serverless platform disclosed. https://venturebeat.com/2022/04/06/first-malware-targeting-aws-lambda-serverless-platform-disclosed/ https://t.me/cKure/11161

■■■■□ Spyware | Privacy: Google bans dozens of Muslim prayer apps, others after detecting spyware Researchers discovered a line of code that secretly gathered personal data, including phone numbers. https://www.khaleejtimes.com/tech/google-bans-dozens-of-muslim-prayer-apps-others-after-detecting-spyware https://t.me/cKure/11160

■■□□□ The Hamas-backed hacking group tracked as ‘APT-C-23’ was found catfishing Israeli officials working in defense, law, enforcement, and government agencies, ultimately leading to the deployment of new malware. https://www.bleepingcomputer.com/news/security/bearded-barbie-hackers-catfish-high-ranking-israeli-officials/ https://t.me/cKure/11159

■■■□□ Hacking group posted fake Ukrainian surrender messages, says Meta (Facebook). https://about.fb.com/news/2022/04/metas-adversarial-threat-report-q1-2022/ https://t.me/cKure/11158

■□□□□ India – China Cyber-War: Chinese hacker groups continue to target Indian power plants, says government. At least two attempts by Chinese hackers were made on electricity distribution centres near Ladakh but were not successful, Power Minister R.K. Singh said. https://www.thehindu.com/news/national/chinese-hacker-groups-continue-to-target-indian-power-plants-says-government/article65300135.ece https://t.me/cKure/11157

■■■□□ Same Origin XSS challenge. https://github.com/terjanq/same-origin-xss https://t.me/cKure/11156

■■■□□ Tracked as CVE-2022-22292, which can be exploited to compromise Android 9, 10, 11, and 12 devices. https://securityaffairs.co/wordpress/129942/hacking/cve-2022-22292-hack-samsung-android-devices.html https://t.me/cKure/11155

■■■□□ Data-Leak: Indonesian real estate website Travelio was breached in Nov. Data included email addresses, names, password hashes, phone nums and for some accounts, DoBs, physical address and FB auth tokens. 81% were already in @haveibeenpwned. https://www.riskbasedsecurity.com/2021/12/14/dark-web-roundup-november-2021/ https://t.me/cKure/11154

■■■■□ Archive: Web History and security. Chrome sandbox escape. https://www.podbean.com/ew/pb-buujy-ef38c6 https://t.me/cKure/11153