All posts in Uncategorized

■■■□□ #DataLeak: Over Three Million US Drivers Exposed in Data Breach. https://www.infosecurity-magazine.com:443/news/over-three-million-us-drivers/ https://t.me/cKure/6768

■■□□□ Mozilla expected to launch its VPN service in Germany and France in Q1 2021. https://t.me/cKure/6767

■■■□□ New Example of XSL Script Processing aka “Mitre T1220” https://isc.sans.edu/diary/rss/27056 https://t.me/cKure/6766

■■■■■ Hezbollah’s cyber unit hacked into telecoms and ISPs. https://www.zdnet.com/article/hezbollahs-cyber-unit-hacked-into-telecoms-and-isps/ https://t.me/cKure/6765

**■■■■■ Google Chrome blocks 7 more ports to stop NAT Slipstreaming attacks. https://www.bleepingcomputer.com/news/security/google-chrome-blocks-7-more-ports-to-stop-nat-slipstreaming-attacks/** https://t.me/cKure/6764

■■■■■ Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication https://www.fireeye.com/blog/threat-research/2021/01/phishing-campaign-woff-obfuscation-telegram-communications.html https://t.me/cKure/6763

■■■■■ Test payload for CVE-2021-3156. sudoedit -s ‘\’ `perl -e ‘print “A” x 65536’ https://t.me/cKure/6762

■■■■□ AWS statement on CVE-2021-3156. https://aws.amazon.com/security/security-bulletins/AWS-2021-001/ https://t.me/cKure/6760

■■■■■ #Zeroday in sudo command. #0day. Technical details. https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://t.me/cKure/6759

■■■■■ 📢 CVE-2021-3156 | Buffer overflow in command line unescaping. https://www.sudo.ws/alerts/unescape_overflow.html https://t.me/cKure/6757