All posts tagged hacker

■■■□□  United States cracks down on spyware vendor Intellexa with more sanctions Today, the U.S. Department of the Treasury has sanctioned five executives and one entity linked to the Intellexa Consortium for developing and distributing Predator commercial spyware. https://www.bleepingcomputer.com/news/security/us-cracks-down-on-spyware-vendor-intellexa-with-more-sanctions/ https://t.me/cKure/14695

■■■□□ Cybersecurity experts have flagged a new phishing method that manipulates HTTP refresh headers to deliver spoofed login pages and steal credentials. https://thehackernews.com/2024/09/cybercriminals-exploit-http-headers-for.html https://t.me/cKure/14694

■■■■□ Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE. https://darkwebinformer.com/exploit-for-cve-2024-8504-cve-2024-8503-sqli-and-rce/ https://t.me/cKure/14693

GAZEploit: Remote Keystroke Inference Attack by Gaze Estimation from Avatar Views in VR/MR Devices. https://sites.google.com/view/Gazeploit/ PDF: https://arxiv.org/pdf/2409.08122 https://t.me/cKure/14691

■■■□□ Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS. https://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b https://t.me/cKure/14689

■■■■■ Privacy: Meta fed its AI on almost everything you’ve posted publicly since 2007 / Unless you’re in the EU, there’s no ability to opt out of AI training settings that keep Facebook or Instagram posts public. Meta has revealed that it has used all publicly shared texts and photos from Facebook and Instagram users…

■■■■■ Data-Leak: Fortinet confirms data breach after hacker claims to steal 440GB of files. https://www.bleepingcomputer.com/news/security/fortinet-confirms-data-breach-after-hacker-claims-to-steal-440gb-of-files/ https://t.me/cKure/14686

■■■■□ A disclosure for an OpenSSH keystroke obfuscation bypass affecting current OpenSSH versions after 9.4. https://crzphil.github.io/posts/ssh-obfuscation-bypass/ https://t.me/cKure/14685

Exploiting New Attack Surfaces in Radio Layer 2 for Baseband RCE on Samsung Exynos. https://labs.taszk.io/articles/post/there_will_be_bugs/ https://t.me/cKure/14683

■■■■□ Cyber-Criminal group ‘NSO group’ lawsuit amid Pegasus virus creation and use (spyware). https://www.nsogroup.com/wp-content/uploads/2024/09/In-Response-to-Amicus-Curiae-Brief.pdf https://x.com/yingcheep/status/1833313052302954932 https://t.me/cKure/14682