All posts in Uncategorized

■■■■■ 40 Microsoft customers have been breached in SolarWinds’ #CyberAttack by APT29, #Russia 80% of these victims belong to #UnitedStates https://www.zdnet.com/article/microsoft-says-it-identified-40-victims-of-the-solarwinds-hack/ https://t.me/cKure/6402

■■■■■ Microsoft denies that hackers pivoted to production systems and abused its software to attack customers. https://www.zdnet.com/article/microsoft-was-also-breached-in-recent-solarwinds-supply-chain-hack-report/ Victims include: The US Treasury Department The US Department of Commerce’s National Telecommunications and Information Administration (NTIA) The Department of Health’s National Institutes of Health (NIH) The Cybersecurity and Infrastructure Agency (CISA) The Department of Homeland Security (DHS)…

■■■■■ Microsoft Systems Were Also Breached in Massive SolarWinds Hack. https://thehackernews.com/2020/12/microsoft-says-its-systems-were-also.html | #DataLeak https://t.me/cKure/6399

■■■■■ OAuth 2.0 authentication vulnerabilities. https://portswigger.net/web-security/oauth https://t.me/cKure/6398

■■■■■ Technical Details: SolarWinds signed binary based supply chain (3rd party) attacks. https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html https://t.me/cKure/6397

■■□□□ Facebook pulls the plug of #CyberWar via #Disinformation between #France and #Russia over Africa . https://www.ehackingnews.com/2020/12/facebook-shuts-down-fake-accounts.html https://t.me/cKure/6396

■■■■■ FireEye Identifies Killswitch for SolarWinds Malware as Victims Scramble to Respond. https://www.bleepingcomputer.com/news/security/fireeye-microsoft-create-kill-switch-for-solarwinds-backdoor/ https://www.darkreading.com/attacks-breaches/fireeye-identifies-killswitch-for-solarwinds-malware-as-victims-scramble-to-respond/d/d-id/1339746 Sinkholes have been created by Microsoft. The backdoor is officially considered dead. https://t.me/cKure/6395

■■□□□ Three million users installed 28 malicious Chrome or Edge extensions. https://www.zdnet.com/article/three-million-users-installed-28-malicious-chrome-or-edge-extensions/ https://t.me/cKure/6393

■■□□□ #DataLeak: California Hospital Notifies 67k Patients of Data Breach. https://www.infosecurity-magazine.com:443/news/svh-notifies-67k-patients-of-data/ https://t.me/cKure/6392

■■□□□ #DataLeak: ckure received the leaked data of AirTel #India users from threat actor CyberDragons via protonmail. The content is being analysed. https://t.me/cKure/6390