All posts in Uncategorized

■■□□□ SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack. https://thehackernews.com/2020/12/solarwinds-issues-second-hotfix-for_15.html https://t.me/cKure/6377

■□□□□ 95% of Organizations Admit To at Least One Successful Application Exploit in Past Year. https://securityboulevard.com/2020/12/95-of-organizations-admit-to-at-least-one-successful-application-exploit-in-past-year/ https://t.me/cKure/6376

■□□□□ Gmail is suffering its second outage in 24 hours, with users able to access their email but unable to send to other Gmail users or are experiencing unexpected behavior. https://t.me/cKure/6375

■■□□□ FTP password of SolarWinds ‘leaked on GitHub in plaintext’ a year ago. It was solarwinds123. https://go.theregister.com/feed/www.theregister.com/2020/12/16/solarwinds_github_password/ https://t.me/cKure/6374

■□□□□ Microsoft to quarantine SolarWinds apps linked to recent hack starting tomorrow. https://t.me/cKure/6373

■■□□□Automating SSRF. https://dant0x65.medium.com/bug-bounty-tip-automating-ssrf-ea344ec59962 https://t.me/cKure/6372

■■■■■ Academics at Ben Gurion University, Tel Aviv, #Israel turn RAM into Wi-Fi cards to steal data from air-gapped systems. Named AIR-FI, the technique is the work of Mordechai Guri, the head of R&D at the Ben-Gurion University of the Negev, in Israel. https://www.zdnet.com/article/academics-turn-ram-into-wifi-cards-to-steal-data-from-air-gapped-systems https://t.me/cKure/6369

■■□□□ #CyberAttack on #UnitedStates : Russian hackers also hacked Department of Homeland Security – Report. The known list of targets hit by hackers is now five. Here is which department was hacked and what you should about the attack. https://www.hackread.com/russian-hackers-hacked-homeland-security/ https://t.me/cKure/6367

■□□□□ Google’s global outage from yesterday was due to a bug that restricted storage space to the Identity Management System and caused the system to fail.  https://t.me/cKure/6366

■■□□□ CVE-2020-29395: XSS in WordPress plugin EventON. https://securityboulevard.com/2020/12/cve-2020-29395-xss-in-wordpress-plugin-eventon/ https://t.me/cKure/6364