All posts tagged telegram

■■■■□ CVE-2021-1782: Hackers release a new jailbreak tool for almost every iPhone. https://techcrunch.com/2021/03/01/hackers-unc0ver-jailbreak-iphone/ https://t.me/cKure/7009

■■■■□ Working Windows and Linux Spectre exploits found on VirusTotal. https://www.bleepingcomputer.com/news/security/working-windows-and-linux-spectre-exploits-found-on-virustotal/ https://t.me/cKure/7008

■■□□□ CVE-2021-27215 #1Day: Cybersecurity firm Genua fixes a critical flaw in its GenuGate High Resistance Firewall, allowing attackers to log in as root users. Authentication Bypass via HTTP parameter tampering. Firewall Vendor Patches Critical Auth Bypass Flaw https://t.me/cKure/7007

■■□□□ #India / #China Malware attack that crippled Mumbai’s power system came from China, claims infosec firm Recorded Future. https://go.theregister.com/feed/www.theregister.com/2021/03/01/statesponsored_chinese_group_attacked_india/ https://t.me/cKure/7006

■■□□□ #DataLeak: Gab hacked – DDoSecrets leak profiles, posts, DMs, passwords online. In total, DDoSecrets has leaked 70 GB worth of sensitive data belonging to registered Gab users. https://www.hackread.com/gab-hacked-ddosecrets-leak-profiles-posts-dms-passwords-online/ https://t.me/cKure/7004

■■■■□ Covid-19 Contact Tracing System 1.0 – Unauthenticated Remote Code Execution. https://www.exploit-db.com/exploits/49604 https://t.me/cKure/7003

■■□□□ Data analytics agency Polecat held to ransom after server exposed 30TB of records. https://portswigger.net/daily-swig/data-analytics-agency-polecat-held-to-ransom-after-server-exposed-30tb-of-records #DataLeak https://t.me/cKure/7001

■■■□□ Hackers exploit websites to give them excellent SEO before deploying malware. https://www.zdnet.com/article/hackers-exploit-websites-to-give-them-excellent-seo-before-deploying-malware/ https://t.me/cKure/7000

■■□□□ Posta. Cross-document Messaging security research tool. https://github.com/benso-io/posta https://t.me/cKure/6999

■■■■□ SolarWinds Blame Intern for Weak Password That Led to Biggest Attack in 2020. The said password “solarwinds123” was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018, before the misconfiguration was addressed on November 22, 2019. https://thehackernews.com/2021/03/solarwinds-blame-intern-for-weak.html https://t.me/cKure/6998