All posts tagged hack

■■□□□ Browser Add-On: Fake Profile Detector (Deepfake, GAN). Right-click on a profile picture, our model will detect if that image contains a GAN generated or real person. https://addons.mozilla.org/en-US/firefox/addon/deepfake-detector/ https://t.me/cKure/11066

■■■□□ Azure AD introduction for red teamers. https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers.html https://t.me/cKure/11065

■■□□□ Okta has admitted that it made a mistake delaying the disclosure of hack from the Lapsus$ data extortion group that took place in January. Additionally, the company has provided a detailed timeline of the incident and its investigation activities. https://www.bleepingcomputer.com/news/security/okta-we-made-a-mistake-delaying-the-lapsus-hack-disclosure/ https://t.me/cKure/11063

■■■■■ 7 top Shodan dorks. An interesting thread. https://twitter.com/AseemShrey/status/1508059759491964928 https://t.me/cKure/11061

■■■■□ Zero-Day: Sophos has fixed a critical vulnerability in its Sophos Firewall product that allows remote code execution. Tracked as CVE-2022-1040, the authentication bypass vulnerability exists in the User Portal and Webadmin areas of Sophos Firewall. https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce https://t.me/cKure/11060

■■■□□ Zero-Day: Western Digital fixed a critical flaw affecting My Cloud OS 5 devices that allowed attackers to gain remote code execution with root privileges. https://securityaffairs.co/wordpress/129507/security/western-digital-my-cloud-os-5-flaw.html https://t.me/cKure/11059

■■■□□ CISA adds 66 vulnerabilities to list of bugs exploited in attacks. https://www.cisa.gov/uscert/ncas/current-activity/2022/03/25/cisa-adds-66-known-exploited-vulnerabilities-catalog https://t.me/cKure/11058

● Ckure was rated among the top 5 or top 10 Cyber-Informarion sources of Telegram by a renowned cyber threat intelligence firm. The representative of the firm asked not to mention them. Apparently, they’re present within some private groups on dark-net forums incl. Telegram. https://t.me/cKure/11057

■■□□□ Phantun: lightweight and fast UDP to TCP obfuscator. https://securityonline.info/phantun-lightweight-and-fast-udp-to-tcp-obfuscator/ https://t.me/cKure/11056

■■■■■ Interesting thread! Apparently ntcrack is 57% faster than hashcat for large word-lists. https://twitter.com/singe/status/1507799288386048005 https://t.me/cKure/11055