All posts tagged hack

■■■□□ Attackers exploit another zero-day in ManageEngine software (CVE-2021-44515). https://www.helpnetsecurity.com/2021/12/07/cve-2021-44515/ https://t.me/cKure/10364

■■□□□ Data-Leak: A state-owned French transportation giant has inadvertently exposed nearly 60,000 employees to identity fraud after leaking their personal information via an unsecured HTTP server, according to researchers. https://www.infosecurity-magazine.com/news/french-transport-giant-exposes/ https://t.me/cKure/10363

■■■□□ A Mirai-based botnet called ‘Moobot’ is spreading aggressively via exploiting a critical command injection flaw in the webserver of many Hikvision products. https://www.bleepingcomputer.com/news/security/moobot-botnet-spreading-via-hikvision-camera-vulnerability/ https://t.me/cKure/10360

■□□□□ Privacy: Telegram has added content protection support to enable users to block others from saving or forwarding posts shared in groups and channels. https://www.bleepingcomputer.com/news/software/telegram-adds-content-protection-support-for-groups-and-channels/ https://t.me/cKure/10359

■■■■□ The hidden side of Seclogon part 2: Abusing leaked handles to dump LSASS memory https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://t.me/cKure/10358

■■□□□ Grafana nuclei Zero-Day template: https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/grafana/grafana-file-read.yaml https://t.me/cKure/10357

■□□□□ Grafana Zero-Day https://nosec.org/m/share/4914.html https://t.me/cKure/10356

■■□□□ One line command to detect unauth arbitrary file reading vulnerability in Grafana. https://t.co/9jzPH7KeUY https://t.me/cKure/10355

■■■■□ United States based Google has taken technical and legal action to disrupt the operations of Glupteba botnet targeting Windows computers. Approx 1M infected computers worldwide. https://blog.google/threat-analysis-group/disrupting-glupteba-operation https://t.me/cKure/10354

■■■■□ United States / China Microsoft Seizes 42 Malicious Web Domains Used By Chinese Hackers. https://thehackernews.com/2021/12/microsoft-seizes-42-malicious-web.html https://t.me/cKure/10353