All posts tagged telegram

■■□□□ Solution for YesWeHack’s #8 DOJO Challenge. https://holme-sec.medium.com/solution-for-yeswehacks-8-dojo-challenge-c1044d1ab586 https://t.me/cKure/7405

■■■■■ php hacked viz. a supply chain attack. On 28th March, 2021 two malicious commits were pushed to the php-src repo from the names of Rasmus Lerdorf and myself. We don’t yet know how exactly this happened, but everything points towards a compromise of the git.php.net server (rather than a compromise of an individual git…

■□□□□ Actor selling data allegedly of multiple organisations spread across Arabian peninsular / GCC incl. UAE , KSA , Qatar , Kuwait . We requested for a sample and found the data to be inconsistent. Apparently another fraudster. https://raidforums.com/Thread-SELLING-GCC-Countries-Big-Company-Base-UAE-Saudi-Arabia-Qatar-Kuveyt https://t.me/cKure/7402

■■■■□ Intigriti — XSS Challenge 0321 XSS with CSRF Bypass https://fh4ntke.medium.com/intigriti-xss-challenge-0321-472ae0a48254 https://t.me/cKure/7401

■■■■□ A critical flaw in the official Facebook for WordPress plugin could be abused exploited for remote code execution attacks. https://securityaffairs.co/wordpress/116063/social-networks/facebook-wordpress-plugin-attacks.html https://t.me/cKure/7400

■■■□□ #CyberAttack | Australia A cyber attack has hit the Australian Channel Nine’s live broadcasts causing the disruption of its operations. The broadcaster was unable to air its Sunday morning news program, which runs from 7:00 am to 1:00 pm from Sidney.  https://hackademicus.nl/hackers-disrupted-live-broadcasts-at-channel-nine-is-it-a-russian-retaliation/ https://t.me/cKure/7399

■■■■■ CVE-2021-21123 https://www.rapid7.com/db/vulnerabilities/google-chrome-cve-2021-21123/ https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html https://t.me/cKure/7398

■■■□□ New data suggests someone has compromised more than 21,000 Microsoft Exchange Server email systems worldwide and infected them with malware that invokes both KrebsOnSecurity and Yours Truly by name. https://krebsonsecurity.com/2021/03/no-i-did-not-hack-your-ms-exchange-server/ https://t.me/cKure/7397

■□□□□ Britain named Russia as the main threat in cyberspace. https://t.me/cKure/7396

■■■■□ Emba: analyzer for Linux-based firmware of embedded devices. https://securityonline.info/emba-analyzer-for-linux-based-firmware-of-embedded-devices/ https://t.me/cKure/7395