All posts tagged telegram

■■■■□ Apple fixes iOS zero-day vulnerability exploited in the wild (iOS and iPadOS 14.4.2) CVE-2021-1879: Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group Vector: uXSS https://www.bleepingcomputer.com/news/security/apple-fixes-ios-zero-day-vulnerability-exploited-in-the-wild/ https://t.me/cKure/7372

■■■■■ #DataLeak: 25 GBs of email:password combos were leaked online. The link was shared with us. The content apparently pertains to more than 1.1K websites. Data as per file properties ranges from November 2017 to August 2018. https://t.me/cKure/7370

■■■■□ Good quality mind-maps. https://github.com/hackerscrolls/SecurityTips/tree/master/MindMaps https://t.me/cKure/7369

■■■□□ Retoolkit – Reverse Engineer’s Toolkit. https://github.com/mentebinaria/retoolkit https://t.me/cKure/7368

■■□□□ An alert from the U.S. Federal Bureau of Investigation about Mamba ransomware reveals a weak spot in the encryption process that could help targeted organizations recover from the attack without paying the ransom. https://www.bleepingcomputer.com/news/security/fbi-exposes-weakness-in-mamba-ransomware-diskcryptor/ https://t.me/cKure/7367

■■■■■ Telco New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between different network slices on a mobile operator’s 5G network. https://thehackernews.com/2021/03/new-5g-flaw-exposes-priority-networks.html https://t.me/cKure/7366

● Sharing is Caring. Thenceforth some of the prominent hacking channels and groups on telegram. The list is ordered as per content quality. However, there could be inconsistency in a few places. Please note that some of the channels are owned by individuals, semi-state sponsored actors, other threat actors, commercial organisations or governments. Viewer discretion…

■■■■□ Another Critical RCE Flaw Discovered in SolarWinds Orion Platform via insecure JSON de-serialization. However the flaw RCE requires authentication. https://thehackernews.com/2021/03/solarwinds-orion-vulnerability.html https://t.me/cKure/7363

■□□□□ Insurance giant CNA has suffered a ransomware attack using a new variant called Phoenix CryptoLocker that is possibly linked to the Evil Corp hacking group. https://t.me/cKure/7362

■■□□□ BurpSuite Pro 2021.3.2 binary publicly available. https://t.me/cKure/7361