All posts in January 2021

**■■■■■ Google Chrome blocks 7 more ports to stop NAT Slipstreaming attacks. https://www.bleepingcomputer.com/news/security/google-chrome-blocks-7-more-ports-to-stop-nat-slipstreaming-attacks/** https://t.me/cKure/6764

■■■■■ Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication https://www.fireeye.com/blog/threat-research/2021/01/phishing-campaign-woff-obfuscation-telegram-communications.html https://t.me/cKure/6763

■■■■■ Test payload for CVE-2021-3156. sudoedit -s ‘\’ `perl -e ‘print “A” x 65536’ https://t.me/cKure/6762

■■■■□ AWS statement on CVE-2021-3156. https://aws.amazon.com/security/security-bulletins/AWS-2021-001/ https://t.me/cKure/6760

■■■■■ #Zeroday in sudo command. #0day. Technical details. https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://t.me/cKure/6759

■■■■■ 📢 CVE-2021-3156 | Buffer overflow in command line unescaping. https://www.sudo.ws/alerts/unescape_overflow.html https://t.me/cKure/6757

■■■■□ VisualDoor: SonicWall SSL-VPN Exploit https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/ https://t.me/cKure/6756

■■■■■ Duf – Disk Usage/Free Utility (Linux, BSD, macOS & Windows). https://github.com/muesli/duf https://www.kitploit.com/2021/01/duf-disk-usagefree-utility-linux-bsd.html https://t.me/cKure/6755

■■□□□ Google: North Korean hackers have targeted security researchers via social media. https://www.zdnet.com/article/google-north-korean-hackers-have-targeted-security-researchers-via-social-media | # NorthKorea https://t.me/cKure/6754