All posts in Uncategorized

■■□□□ Likely Ginghis Khan revenge by #China: Chinese APT suspected of supply chain attack on Mongolian government agencies. https://www.zdnet.com/article/chinese-apt-suspected-of-supply-chain-attack-on-mongolian-government-agencies/ https://t.me/cKure/6320

■■■□□ Fireeye TTPs used by the red team tools: https://www.picussecurity.com/resource/blog/techniques-tactics-procedures-utilized-by-fireeye-red-team-tools https://t.me/cKure/6319

■■■■□ Site wide CSRF affecting both job seeker and Employer account on glassdoor.com https://hackerone.com/reports/790061 https://t.me/cKure/6318

■■■■□ Portable Data exFiltration: XSS for PDF files. https://portswigger.net/research/portable-data-exfiltration https://t.me/cKure/6317

■□□□□ 85,000 MySQL Servers Hit in Active Ransomware Campaign. https://www.darkreading.com/threat-intelligence/85000-mysql-servers-hit-in-active-ransomware-campaign/d/d-id/1339673 https://t.me/cKure/6316

■■■□□ #Europe 🇪🇺: #CyberAttack on the European Medicines Agency (EU Vaccine Regulator for #COVID19). Potential #DataLeak. https://www.ema.europa.eu/en/news/cyberattack-european-medicines-agency https://t.me/cKure/6315

■■■■□ #Zeroday: Cisco fixes new Jabber for Windows critical code execution bug. https://www.bleepingcomputer.com/news/security/cisco-fixes-new-jabber-for-windows-critical-code-execution-bug/ https://t.me/cKure/6314

■■■□□ The server-client communication in certain versions of the WinZip file compression tool is insecure and could be modified to serve malware or fraudulent content to users. https://www.bleepingcomputer.com/news/security/hackers-can-use-winzip-insecure-server-connection-to-drop-malware/ https://t.me/cKure/6313

■□□□□ https://www.trendmicro.com/en_us/research/20/l/investigating-the-gootkit-loader.html https://t.me/cKure/6312

■■■□□ Trace Labs Kali Linux build configuration for OSINT. The repository includes a recipe file to build a Linux #OSINT Distribution for Trace Labs based on the Kali Linux live-build-config. https://gitlab.com/kalilinux/build-scripts/live-build-config/-/tree/master https://t.me/cKure/6311