All posts in Uncategorized

■□□□□ Expected cyber activity by Israel and United States against Iran as it obtains its first nuclear bomb https://t.me/cKure/14028

■■□□□ #Privacy | #Propaganda: An interesting thread. Telegram allegedly defaming Signal , a gold standard in cryptography and security. https://twitter.com/matthew_d_green/status/1789687898863792453 https://t.me/cKure/14027

■■■■□ LLMjacking: Stolen Cloud Credentials Used in New AI Attack. https://sysdig.com/blog/llmjacking-stolen-cloud-credentials-used-in-new-ai-attack/ https://t.me/cKure/14026

■■□□□ Privacy: Meta is using your Instagram and Facebook photos to train its AI models. https://www.businessinsider.com/meta-instagram-facebook-photos-used-in-ai-models-training-2024-5 https://t.me/cKure/14025

■□□□□ Data-Leak: Europol confirms web portal breach, says no operational data stolen. https://www.bleepingcomputer.com/news/security/europol-confirms-web-portal-breach-says-no-operational-data-stolen/ https://t.me/cKure/14024

■■■□□ Git-Rotate: Leveraging GitHub Actions to Bypass Microsoft Entra Smart lockout. https://research.aurainfosec.io/pentest/git-rotate/ https://t.me/cKure/14023

■□□□□ Nmap 7.95 released https://t.me/cKure/14022

■■■■■ POST to XSS : Leveraging Pseudo Protocols to Gain JavaScript Evaluation in SSO Flows. https://security.lauritz-holtmann.de/post/sso-security-redirect-uri-iii/ https://t.me/cKure/14020

■□□□□ $1000 Bounty: How I scaled a Self-Redirect to an XSS in a web 3.0 system at Hackenproof. https://erickfernandox.medium.com/1000-bounty-how-i-scaled-a-self-redirect-to-an-xss-in-a-web-3-0-system-at-hackenproof-37380f701892 https://t.me/cKure/14019

■□□□□ Stego-toolkit : Collection of steganography tools – helps with CTF challenges. https://github.com/DominicBreuker/stego-toolkit https://t.me/cKure/14018