All posts tagged news

■■■■□ #UnitedStates 🇺🇸 blocks Chinese 🇨🇳 drone manufacturer DJI. Reasons: ▪︎Cyber espionage and spying fort #China. ▪︎DJI coordinates with China which is helping repressive regimes bypass US forced sanctions. ▪︎DJI / China has human rights violations (#Uyghur). https://t.me/cKure/6411

■■■□□ New AirTel #India #DataLeak includes Aadhaar Card (National ID) details among other data. https://t.me/cKure/6410

■■□□□ #Russia 🇷🇺 denies hack allegations by #UnitedStates 🇺🇸 attributed to APT29 cyber espionage group. https://www.ehackingnews.com/2020/12/putin-us-state-department-and-us.html https://t.me/cKure/6407

■■■■□ 5M WordPress sites running ‘Contact Form 7’ plugin which has an unrestricted file upload bug that allows an unauthenticated visitor to take over a site. https://threatpost.com/contact-form-7-plugin-bug/162383/ https://t.me/cKure/6406

■■■□□ #Ghidra team pushed a preview debugger on @GitHub, a long awaited feature. https://github.com/NationalSecurityAgency/ghidra/tree/debugger https://t.me/cKure/6405

■■■■■ 40 Microsoft customers have been breached in SolarWinds’ #CyberAttack by APT29, #Russia 80% of these victims belong to #UnitedStates https://www.zdnet.com/article/microsoft-says-it-identified-40-victims-of-the-solarwinds-hack/ https://t.me/cKure/6402

■■■■■ Microsoft denies that hackers pivoted to production systems and abused its software to attack customers. https://www.zdnet.com/article/microsoft-was-also-breached-in-recent-solarwinds-supply-chain-hack-report/ Victims include: The US Treasury Department The US Department of Commerce’s National Telecommunications and Information Administration (NTIA) The Department of Health’s National Institutes of Health (NIH) The Cybersecurity and Infrastructure Agency (CISA) The Department of Homeland Security (DHS)…

■■■■■ Microsoft Systems Were Also Breached in Massive SolarWinds Hack. https://thehackernews.com/2020/12/microsoft-says-its-systems-were-also.html | #DataLeak https://t.me/cKure/6399

■■■■■ OAuth 2.0 authentication vulnerabilities. https://portswigger.net/web-security/oauth https://t.me/cKure/6398

■■■■■ Technical Details: SolarWinds signed binary based supply chain (3rd party) attacks. https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html https://t.me/cKure/6397