All posts tagged hack

■□□□□ Cryptocurrency trading platform BitMart has disclosed a “large-scale security breach” that it blamed on a stolen private key, resulting in the theft of more than $150 million in various cryptocurrencies. The breach is said to have impacted two of its hot wallets on the Ethereum (ETH) blockchain and the Binance smart chain (BSC). https://t.me/cKure/10352

■■■□□ Data-Leak: Motherboard has obtained video footage from inside Anom, an encrypted phone company that, unbeknownst to its staff, secretly sent a copy of every message on the phones it sold to the FBI (United States ) and Australian police. https://www.vice.com/en/article/n7nnmg/inside-anom-video-operation-trojan-shield-ironside https://t.me/cKure/10351

■■■□□ Interesting thread: New scraped data: Gravatar had 167M profiles scraped in Oct last year via an enumeration vector. 114M of the MD5 email address hashes were subsequently cracked and distributed alongside names and usernames. 72% were already in @haveibeenpwned. Read more: https://t.co/gLN3jDx1Wf https://t.me/cKure/10350

■■■■■ 14 New XS-Leaks (Cross-Site Leaks) Attacks Affect All Modern Web Browsers. https://thehackernews.com/2021/12/14-new-xs-leaks-cross-site-leaks.html https://t.me/cKure/10349

■■□□□ Crawpy: Content discovery tool written in python. https://github.com/morph3/crawpy https://t.me/cKure/10348

■□□□□ Heads-up wrt. Zero-Day: Vulnerability in the Grafana results in Unauthenticated Arbitrary File Read on the host; as identified by a researcher in Netherlands 🇳🇱 (unconfirmed) https://t.me/cKure/10347

● Yet another website: BugBounty.ae (National Vulnerability Program of UAE ) https://t.me/cKure/10346

■■■□□ Zero-Day: Yet Another Zoho ManageEngine Product Found Under Active Attacks | CVE-2021-44515 https://thehackernews.com/2021/12/warning-yet-another-zoho-manageengine.html https://t.me/cKure/10345

■■□□□ Interesting thread: https://twitter.com/KLINIX5/status/1465658023158992896 https://t.me/cKure/10344

■■■■□ State sponsored Cyber-Attack by Israel on United States Apple notified several U.S. Embassy and State Department employees that their iPhones may have been targeted by an unknown assailant using state-sponsored spyware created by the controversial Israeli company NSO Group, according to multiple reports from Reuters and The Washington Post. https://t.me/cKure/10343