All posts tagged hack

■■■■□ Israel Palestine Cyber-War: Iranian hackers attempt to damage critical infrastructure through Israeli Unitronics products. According to a joint warning from American and Israeli cyber security agencies, since November 22, a group linked to the Iranian Revolutionary Guards has attacked Israeli company Unitronics devices which are used to control and automate machines. https://www.calcalistech.com/ctechnews/article/sjcrycyb6 https://t.me/cKure/13297

■■■□□ RPC Investigator. https://blog.trailofbits.com/2023/01/17/rpc-investigator-microsoft-windows-remote-procedure-call/ https://t.me/cKure/13296

■■■□□ Organizations in the Middle East, Africa, and the U.S. have been targeted by an unknown threat actor to distribute a new backdoor called Agent Racoon. https://thehackernews.com/2023/12/agent-racoon-backdoor-targets.html https://t.me/cKure/13295

■■■□□ Zero-Day: Researcher Uncovers Critical Bluetooth Vulnerabilities Impacting Versions 4.2 to 5.4. https://www.guru3d.com/story/researcher-uncovers-critical-bluetooth-vulnerabilities-impacting-versions-42-to-54/ https://t.me/cKure/13294

■■■■□ Researchers Expose Passive Methods Allowing RSA Keys Extraction From SSH Connections. https://www.blackhatethicalhacking.com/news/researchers-expose-passive-methods-allowing-rsa-keys-extraction-from-ssh-connections/ https://t.me/cKure/13293

■■□□□ Crypto Country: North Korea’s targeting of cryptocurrency. https://github.com/blackorbird/APT_REPORT/blob/master/International%20Strategic/Korea/Crypto%20Country%20North%20Korea%E2%80%99s%20Targeting%20of%20Cryptocurrency.pdf https://t.me/cKure/13292

■■■□□ Google has released an update to Chrome which includes seven security fixes including one for a vulnerability which is known to have already been exploited. https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html https://www.malwarebytes.com/blog/news/2023/11/update-now-chrome-fixes-actively-exploited-zero-day-vulnerability/amp https://t.me/cKure/13291

■■■■□ Delefriend: A proof-of-concept redteam tool to automatically find and abuse existing GCP service accounts with domain-wide delegation (DWD) on Google Workspace by smartly fuzzing all of the existing JWT combinations that are relevant to the initial GCP identity. A compromised GCP service account key with DWD enabled can be used to perform API calls…

■■■■■ CVE-2023-33466 – Exploiting Healthcare Servers with Polyglot Files. https://www.shielder.com/blog/2023/10/cve-2023-33466-exploiting-healthcare-servers-with-polyglot-files/ https://t.me/cKure/13289

Google Researchers’ Attack Prompts ChatGPT to Reveal Its Training Data. https://www.404media.co/google-researchers-attack-convinces-chatgpt-to-reveal-its-training-data/ https://t.me/cKure/13287