All posts in Uncategorized

■■■■□ RCE via CSRF. https://github.com/zadam/trilium/issues/455 https://t.me/cKure/7077

■■■□□ Check if you are vulnerable to Microsoft Exchange Server zero-days using this tool https://github.com/microsoft/CSS-Exchange/tree/main/Security #0day #Zeroday https://t.me/cKure/7076

■■■□□ SSRF: Bypassing hostname restrictions with fuzzing. https://blog.deesee.xyz/fuzzing/security/2021/02/26/ssrf-bypassing-hostname-restrictions-fuzzing.html https://t.me/cKure/7075

■■■□□ Kubestriker – A Blazing Fast Security Auditing Tool For Kubernetes. https://github.com/vchinnipilli/kubestriker https://t.me/cKure/7074

■□□□□ Google is preparing to test a technology called Federated Learning of Cohorts, or FLoC, that it hopes will replace increasingly shunned, privacy-denying third-party cookies. https://t.me/cKure/7072

■■■□□ Microsoft and cybersecurity firm FireEye has identified three new malwares used by SolarWinds hackers in their last year’s attack on highly critical private and government cyberinfrastructure in the United States. https://www.fireeye.com/blog/threat-research/2021/03/sunshuttle-second-stage-backdoor-targeting-us-based-entity.html https://www.hackread.com/microsoft-fireeye-solarwinds-hackers-malware/ https://t.me/cKure/7071

■□□□□ Potential #CyberAttack on #UnitedStates’ weapons. https://threatpost.com/dod-weapons-programs-lack-cybersecurity/164545/ https://t.me/cKure/7070

■■■■■ At Least 30,000 U.S. Organizations Newly Hacked Via zero-days in Microsoft’s Email Software. https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/ #zeroday #0day https://t.me/cKure/7069

■□□□□ New ransomware only decrypts victims who join their Discord server. https://www.bleepingcomputer.com/news/security/new-ransomware-only-decrypts-victims-who-join-their-discord-server/ https://t.me/cKure/7067

■■■■■ Prime-factor mathematical foundations of RSA cryptography ‘broken’, claims cryptographer. https://portswigger.net/daily-swig/prime-factor-mathematical-foundations-of-rsa-cryptography-broken-claims-cryptographer https://t.me/cKure/7064