All posts by cK-bot

■■■□□ Nearly 89% of smart device manufacturers fail to disclose how long they will provide software updates for their products, a Federal Trade Commission staff study found this week. The review of 184 connected devices, including hearing aids, security cameras, and door locks, revealed that 161 products lacked clear information about software support duration on…

Brainstorm: A smarter web fuzzing tool that combines local LLM models (via Ollama) and ffuf to optimize directory and file discovery. https://github.com/Invicti-Security/brainstorm https://www.invicti.com/blog/security-labs/brainstorm-tool-release-optimizing-web-fuzzing-with-local-llms/ https://t.me/cKure/14957

Bootkitty: Analyzing the first UEFI bootkit for Linux. ESET researchers analyze the first UEFI bootkit designed for Linux systems. https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/ https://www.bleepingcomputer.com/news/security/researchers-discover-bootkitty-first-uefi-bootkit-malware-for-linux/ https://t.me/cKure/14954

■■■■□ Bjorn is a Raspberry Pi-powered Tamagotchi-like network pen-testing tool. https://www.tomshardware.com/raspberry-pi/bjorn-is-a-raspberry-pi-powered-tamagotchi-like-network-pen-testing-tool https://t.me/cKure/14953

■■■□□ Chinese hackers breached T-Mobile’s routers to scope out network. https://www.bleepingcomputer.com/news/security/chinese-hackers-breached-t-mobiles-routers-to-scope-out-network/ https://t.me/cKure/14952

■■■□□ Mutation XSS 101. https://x.com/therceman/status/1862093437467496722 https://t.me/cKure/14951

● We are now monetizing our channel after over 6 years in existence after a suggestion by an associate. This will not change the frequency of posts, content, or policies. The only change will be that you can share reactions to our posts and related things that telegram may do. https://t.me/cKure/14949

■■□□□ Malicious SSL-VPN server. https://github.com/AmberWolfCyber/NachoVPN https://t.me/cKure/14948

■■■■□ RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks https://thehackernews.com/2024/11/romcom-exploits-zero-day-firefox-and.html https://t.me/cKure/14947

■■■■□ APT-Q-12/APT-C-60 Attack Japan by VHDX. https://blogs.jpcert.or.jp/ja/2024/11/APT-C-60.html https://t.me/cKure/14946