All posts tagged Cyber Security

■■■■□ PoC Exploit Released for Windows Task Scheduler Zero-day Flaw, Exploited in Wild. https://cybersecuritynews.com/poc-exploit-windows-task-scheduler/ https://t.me/cKure/14981

■■■■□ A comprehensive process of digital forensics. https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume https://t.me/cKure/14980

Prolific cyber security professional, Dr. Reza Avazeh, architect at Hizbollah and many hacktivist groups was executed by Israel in a drone strike. In a message by the hacker group, ‘Handala’: following statement of threat was made: Reza Avazeh Operation is coming! Next Week Destructive Week Dr. Reza Avazeh, the former cyber commander of Hezbollah, the…

■■□□□ FTC Bans Location Data Company That Powers the Surveillance Ecosystem. Venntel is a primary provider of location data to the government or other companies that sell to U.S. agencies. The FTC is banning Venntel from selling data related to health clinics, refugee shelters, and much more. https://www.404media.co/ftc-bans-location-data-company-that-powers-the-surveillance-ecosystem/ https://t.me/cKure/14976

■■■■□ CVE-2024-20132: Out of Bounds Write Escalates Privileges in Modem. There is a possible out-of-bounds write in Modem. This happens because of a missing bounds check. It could lead to local privilege escalation. No extra execution privileges are required. User interaction is not needed to exploit this vulnerability. https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-20132 https://t.me/cKure/14975

■■■□□  Korea arrests CEO for adding DDoS feature to satellite receivers. South Korean police have arrested a CEO and five employees for manufacturing over 240,000 satellite receivers pre-loaded or later updated to include DDoS attack functionality at a purchaser’s request. https://www.bleepingcomputer.com/news/security/korea-arrests-ceo-for-adding-ddos-feature-to-satellite-receivers/ https://t.me/cKure/14974

 ■■□□□ Russia sentences Hydra dark web market leader to life in prison. Russian authorities have sentenced the leader of the criminal group behind the now-closed dark web platform Hydra Market to life in prison. https://www.bleepingcomputer.com/news/security/russia-sentences-hydra-dark-web-market-leader-to-life-in-prison/ https://t.me/cKure/14973

■■■■□ Linux >=6.6: race between mremap (move_normal_pmd) and MADVISE_COLLAPSE (retract_page_tables). https://project-zero.issues.chromium.org/issues/371047675 https://t.me/cKure/14972

■■■■□ Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks. https://thehackernews.com/2024/11/phishing-as-service-rockstar-2fa.html https://t.me/cKure/14970

■■■■□ Zero-Day: Windows Warning As New 0-Click Backdoor Russian Cyber Attack Confirmed. https://www.forbes.com/sites/daveywinder/2024/11/29/windows-warning-as-new-0-click-backdoor-russian-cyber-attack-confirmed/ https://t.me/cKure/14968