All posts tagged news

■■■□□ Zodiac Killer Cipher Is Cracked After Eluding Sleuths For 51 Years. https://arstechnica.com/information-technology/2020/12/zodiac-killer-cipher-is-cracked-after-eluding-sleuths-for-51-years/ https://t.me/cKure/6358

■■■■■ PoC exploits for CVE-2020-17143 and CVE-2020-17141 the XXE bugs against Exchange Server. – Low privileged authentication only – CVE-2020-17141 is in the EWS API. https://srcincite.io/pocs/cve-2020-17143.py.txt https://srcincite.io/pocs/cve-2020-17141.py.txt https://t.me/cKure/6357

■■■■□ #DataLeak, #Pakistan : ckmc.edu.pk hacked. Actor claimed that the entire site has been backed up and data was dropped (as per the queries shared with @ckure). https://t.me/cKure/6356

■■■□□ Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor. http://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html https://t.me/cKure/6354

■■■□□ Alleged #DataLeak of Airtel #India . https://mobile.twitter.com/cyberblackmagic/status/1338466070303297537 https://t.me/cKure/6353

■■■■□ US agencies and FireEye were gacked via SolarWinds software vulnerability. https://t.me/cKure/6352

■■■■□ US agencies and FireEye were gacked via SolarWinds software vulnerability. https://t.me/cKure/6351

■■■□□ #DataLeak: Sensitive data of around two million members of the Communist Party of China (CPC) have been leaked, highlighting their positions in major organizations, including government agencies, throughout the world. https://m.economictimes.com/news/international/world-news/data-leak-reveals-members-of-chinas-communist-party-working-in-global-firms-consulates-report/articleshow/79721469.cms https://t.me/cKure/6350

■■■□□ #CyberAttack by #Russia on #UnitedStates’ assets. Reportedly, the Russian government-backed hackers APT29 aka Cozy Bear also managed to spy on the emails of the National Telecommunications and Information Administration (NTIA). Hackers backed by the Russian government hacked into several US government departments including the National Telecommunications and Information Administration (NTIA) and U.S. Treasury and…

■■■□□ Security vendor SolarWinds says product updates were subverted by nation-state (#Russia ). Supply chain exploit linked to attacks on major US government agencies and FireEye, Russia’s Cozy Bear attack gang in the frame for the job. https://go.theregister.com/feed/www.theregister.com/2020/12/14/solarwinds_fireeye_cozybear/ https://t.me/cKure/6348