All posts in Uncategorized

■□□□□ #DataLeak: Apple is suing a former employee who it claims leaked company trade secrets to a media outlet for over a year for his own personal gain. Former advanced materials lead and product design architect Simon Lancaster is accused of abusing his position to access information outside of his job scope. He allegedly exchanged the…

● Currently, there are over 80,000 servers exposed to DearCry ransomware. And exploit code is public (t.me/cKure/7129). I assume that every hacker (black / white) is busy in their own ways. https://t.me/cKure/7151

● Yet another website: RevShells.com [Reverse Shell generator] https://t.me/cKure/7150

● Yet another website: aem1k.com/aurebesh.js [JavaScritp obfuscation utility] https://t.me/cKure/7149

■■■■■ A decent way to bypass XSS filters, rather WAFs. https://mobile.twitter.com/0dayCTF/status/1370187588385058819 https://t.me/cKure/7148

● This exchange fix (https://t.me/cKure/7146) works for Microsoft Defender users and not custom EDR solutions. https://t.me/cKure/7147

■■□□□ Statement from Microsoft’s Security Team wrt. Exchange ransomware DearCry. https://mobile.twitter.com/MsftSecIntel/status/1370236539427459076 https://t.me/cKure/7146

■■■■□ #Russia : A new version of the Darkside ransomware (v2.0) variant which its creators claim will feature faster encryption speeds, VoIP calling and virtual machine targeting. https://mobile.twitter.com/3xp0rtblog/status/1369727242562134017 https://www.infosecurity-magazine.com:443/news/darkside-20-ransomware-fastest/ https://t.me/cKure/7145

■■■■■ Regexploit tool unveiled with a raft of ReDoS bugs already on its resume. https://portswigger.net/daily-swig/regexploit-tool-unveiled-with-a-raft-of-redos-bugs-already-on-its-resume https://t.me/cKure/7144

■■■■□ Giant fire takes Down Government Hacking Infrastructure. https://www.vice.com/en/article/3an9wb/ovh-datacenter-fire-takes-down-government-hacking-infrastructure https://t.me/cKure/7143