All posts tagged cyber

■■□□□ Cisco announced this week that several of its products are exposed to denial-of-service (DoS) attacks due to a vulnerability in the Snort detection engine. https://hackademicus.nl/multiple-cisco-products-exposed-to-dos-attack-due-to-a-snort-issue/ https://t.me/cKure/7080

■■■■□ Data from the Russian cybercriminal forum Maza (Mazafaka) leaked. The data belonged to more than 2,000 cyber attackers. https://www.ehackingnews.com/2021/03/data-from-russian-cybercriminal-forum.html https://t.me/cKure/7079

■■■■□ Stored XSS in Google Ads Android Application— $3133.70 https://ashketchum.medium.com/stored-xss-in-google-ads-android-application-3133-70-373f6c361ff3 https://t.me/cKure/7078

■■■■□ RCE via CSRF. https://github.com/zadam/trilium/issues/455 https://t.me/cKure/7077

■■■□□ Check if you are vulnerable to Microsoft Exchange Server zero-days using this tool https://github.com/microsoft/CSS-Exchange/tree/main/Security #0day #Zeroday https://t.me/cKure/7076

■■■□□ SSRF: Bypassing hostname restrictions with fuzzing. https://blog.deesee.xyz/fuzzing/security/2021/02/26/ssrf-bypassing-hostname-restrictions-fuzzing.html https://t.me/cKure/7075

■■■□□ Kubestriker – A Blazing Fast Security Auditing Tool For Kubernetes. https://github.com/vchinnipilli/kubestriker https://t.me/cKure/7074

■□□□□ Google is preparing to test a technology called Federated Learning of Cohorts, or FLoC, that it hopes will replace increasingly shunned, privacy-denying third-party cookies. https://t.me/cKure/7072

■■■□□ Microsoft and cybersecurity firm FireEye has identified three new malwares used by SolarWinds hackers in their last year’s attack on highly critical private and government cyberinfrastructure in the United States. https://www.fireeye.com/blog/threat-research/2021/03/sunshuttle-second-stage-backdoor-targeting-us-based-entity.html https://www.hackread.com/microsoft-fireeye-solarwinds-hackers-malware/ https://t.me/cKure/7071

■□□□□ Potential #CyberAttack on #UnitedStates’ weapons. https://threatpost.com/dod-weapons-programs-lack-cybersecurity/164545/ https://t.me/cKure/7070