All posts tagged hack

■■■■■ Sandbox Bypass Affecting vm2 package, versions 

■■□□□ Data-Leak: New breach: 3.1M email addresses from CoinMarketCap were found being traded this month. CMC have advised there is “a correlation with our subscriber base”, but are yet to identify the source of the data. https://twitter.com/haveibeenpwned/status/1451650181552750594 https://t.me/cKure/9812

■■■□□ Interesting thread! https://twitter.com/vxunderground/status/1451624106005311505 https://t.me/cKure/9811

■■■■□ Melting cobalt: A tool 🔧 to hunt/mine for Cobalt Strike beacons and “reduce” their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP’s. https://github.com/splunk/melting-cobalt https://t.me/cKure/9810

■■■□□ CISA: GPS software bug may cause unexpected behavior this Sunday. The Cybersecurity and Infrastructure Security Agency (CISA) warned that GPS deices might experience issues over the weekend because of a timing bug impacting Network Time Protocol  (NTP) servers running the GPS Daemon (GPSD) software. https://www.bleepingcomputer.com/news/technology/cisa-gps-software-bug-may-cause-unexpected-behavior-this-sunday/ https://t.me/cKure/9809

■■□□□ Data-Leak from Italy : The Italian data protection authority Garante per la Protezione dei Dati Personali (GPDP) has announced an investigation into a data breach of the country’s copyright protection agency. https://www.bleepingcomputer.com/news/security/italian-celebs-data-exposed-in-ransomware-attack-on-siae/ https://t.me/cKure/9808

■■□□□ Privacy: How your phone, laptop, or watch can be tracked by their Bluetooth transmissions. https://go.theregister.com/feed/www.theregister.com/2021/10/22/bluetooth_tracking_device/ https://t.me/cKure/9807

■■□□□ FIN7 Recruits Talent For Push Into Ransomware https://geminiadvisory.io/fin7-ransomware-bastion-secure/ https://t.me/cKure/9806

■■■■□ Apache HTTP Server CVE-2021-42013 and CVE-2021-41773 Exploited in the Wild. https://blogs.juniper.net/en-us/enterprise-cloud-and-transformation/apache-http-server-cve-2021-42013-and-cve-2021-41773-exploited https://t.me/cKure/9805

■■■■□ How Canada , Toronto’s Citizen Lab uncovered the hacking of Princess Haya of Jordan via UAE . https://www.theglobeandmail.com/world/article-how-torontos-citizen-lab-uncovered-the-hacking-of-princess-haya/ https://t.me/cKure/9804