All posts tagged Cyber Security

■■■■■ Zero-Day: 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. https://www.zerodayinitiative.com/advisories/ZDI-24-1532/ https://t.me/cKure/14945

■■■■■ Ruby 3.4 Universal RCE Deserialization Gadget Chain. https://nastystereo.com/security/ruby-3.4-deserialization.html https://t.me/cKure/14944

■■■■■ Zero-Day: CVE-2024-11477: 7-Zip Vulnerability Allows Remote Code Execution. https://securityonline.info/cve-2024-11477-7-zip-vulnerability-allows-remote-code-execution-update-now/ https://t.me/cKure/14942

■■■■■ APT28 in action: Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack. https://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/ https://t.me/cKure/14940

■■■■□ Portable drone jammer uses a Raspberry Pi tactical Software Defined Radio. https://www.tomshardware.com/raspberry-pi/portable-raspberry-pi-tactical-software-defines-radio-doubles-as-a-drone-jammer https://t.me/cKure/14939

■■■□□ Suspected Mysterious Elephant organizations use CHM files to attack many countries in South Asia. https://mp.weixin.qq.com/s/tkOMIHY36TujPKjWKVa6kA https://t.me/cKure/14938

■■■■□ Automatic SSTI detection tool with interactive interface. https://github.com/vladko312/SSTImap https://t.me/cKure/14937

■■■■□ AWS penetration testing: a step-by-step guide. https://www.hackthebox.com/blog/aws-pentesting-guide https://t.me/cKure/14936

■■■■■ The SCADA Hack: From Exploits to Forensics: Deciphering the Unitronics Incident. A hack of a nation state by another nation state amid ongoing genocide by Jews ✡️ of native indigenous population of Palestine 🇵🇸 . https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack https://t.me/cKure/14933 https://t.me/ckuRED/524

■■■■■ Chaining Three Bugs to Access All Your ServiceNow Data. https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data https://t.me/cKure/14932