All posts tagged cyber

■■□□□ Google fixes fifth Chrome zero-day exploited in attacks this year. https://www.bleepingcomputer.com/news/security/google-fixes-fifth-chrome-zero-day-vulnerability-exploited-in-attacks-in-2024/ https://t.me/cKure/14031

■■■■□Bypassing WAFs to Exploit CSPT Using Encoding Levels. https://matanber.com/blog/cspt-levels https://t.me/cKure/14029

■□□□□ Expected cyber activity by Israel and United States against Iran as it obtains its first nuclear bomb https://t.me/cKure/14028

■■□□□ #Privacy | #Propaganda: An interesting thread. Telegram allegedly defaming Signal , a gold standard in cryptography and security. https://twitter.com/matthew_d_green/status/1789687898863792453 https://t.me/cKure/14027

■■■■□ LLMjacking: Stolen Cloud Credentials Used in New AI Attack. https://sysdig.com/blog/llmjacking-stolen-cloud-credentials-used-in-new-ai-attack/ https://t.me/cKure/14026

■■□□□ Privacy: Meta is using your Instagram and Facebook photos to train its AI models. https://www.businessinsider.com/meta-instagram-facebook-photos-used-in-ai-models-training-2024-5 https://t.me/cKure/14025

■□□□□ Data-Leak: Europol confirms web portal breach, says no operational data stolen. https://www.bleepingcomputer.com/news/security/europol-confirms-web-portal-breach-says-no-operational-data-stolen/ https://t.me/cKure/14024

■■■□□ Git-Rotate: Leveraging GitHub Actions to Bypass Microsoft Entra Smart lockout. https://research.aurainfosec.io/pentest/git-rotate/ https://t.me/cKure/14023

■□□□□ Nmap 7.95 released https://t.me/cKure/14022

■■■■■ POST to XSS : Leveraging Pseudo Protocols to Gain JavaScript Evaluation in SSO Flows. https://security.lauritz-holtmann.de/post/sso-security-redirect-uri-iii/ https://t.me/cKure/14020