All posts by cK-bot

■□□□□ Interesting thread https://mobile.twitter.com/nav1n0x/status/1369743606320406532 https://t.me/cKure/7122

■□□□□ Microsoft confirms Windows 10 crash issue due to March updates. https://t.me/cKure/7121

■■■■■ F5 #Zeroday: Application security company F5 Networks on Wednesday published an advisory warning of four critical vulnerabilities impacting multiple products that could result in a denial of service (DoS) attack and even unauthenticated remote code execution on target networks. The patches concern a total of seven related flaws (from CVE-2021-22986 through CVE-2021-22992), two of which were discovered and reported by…

■□□□□ Threat actors prevented the Williams Formula 1 team from giving fans a first look at their car’s latest version via an ‘augmented reality’ app. In the wake of the malicious intrusion, Williams canceled their plan to launch its FW43B and claimed that the app was “hacked prior to launch”.  ‘Williams’ were planning to reveal…

■■■■□ Thanks to the Solarwinds security blunders, we’re all aware now of how vital it is to protect our software supply chain from unauthorized changes. Now, the Linux Foundation and partners have created a new free cryptographic software signing to improve open-source program security. https://www.zdnet.com/article/linux-foundation-announces-new-open-source-software-signing-service/ https://t.me/cKure/7117

■□□□□ Hackers Exploit QNAP Vulnerabilities to Turn NAS Devices Into Crypto Miners. https://www.tomshardware.com/news/hackers-exploit-qnap-vulnerabilities-turn-nas-crypto-miners https://t.me/cKure/7116

■■■■□ #China: Researchers Unveil New Linux Malware Linked to Chinese Hackers. Dubbed “RedXOR” by Intezer, the backdoor masquerades as a polkit daemon, with similarities found between the malware and those previously associated with the Winnti Umbrella (or Axiom) threat group such as ​PWNLNX, ​XOR.DDOS​ and Groundhog. https://thehackernews.com/2021/03/researchers-unveil-new-linux-malware.html https://t.me/cKure/7115

■■■□□ More state-sponsored hacking groups have joined the ongoing attacks targeting tens of thousands of on-premises Exchange servers impacted by severe vulnerabilities tracked as ProxyLogon. https://t.me/cKure/7114

■■■□□ Ryuk ransomware hits 700 Spanish government labor agency offices. https://www.bleepingcomputer.com/news/security/ryuk-ransomware-hits-700-spanish-government-labor-agency-offices/ #Spain https://t.me/cKure/7113

■■■□□ https://www.praetorian.com/blog/reproducing-proxylogon-exploit/ https://t.me/cKure/7111