All posts by cK-bot

■■□□□ Hackers abused swap files in e-skimming attacks on Magento sites. https://securityaffairs.com/166073/malware/threat-actors-abused-swap-files-e-skimming.html https://t.me/cKure/14472

■■■■□ WhatsApp for Windows lets Python, PHP scripts execute with no warning. https://www.bleepingcomputer.com/news/security/whatsapp-for-windows-lets-python-php-scripts-execute-with-no-warning/ https://t.me/cKure/14470

■■■■■ Cyber-Crime: How a North Korean Fake IT Worker Tried to Infiltrate. https://www.wired.com/story/north-korean-hacker-hired-ecurity-company-malware/ https://blog.knowbe4.com/how-the-whole-world-now-knows-about-fake-north-korean-it-workers https://t.me/cKure/14469

Abusing RCU callbacks with a Use-After-Free read to defeat KASLR. https://anatomic.rip/abusing_rcu_callbacks_to_defeat_kaslr/ https://t.me/cKure/14467

■■■□□ New OpenSecurityTraining2 mini-class : “Debuggers 1102: Introductory Ghidra”. https://p.ost2.fyi/courses/course-v1:OpenSecurityTraining2+Dbg1102_IntroGhidra+2024_v2/about https://t.me/cKure/14466

■■■■□ Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets. https://t.me/cKure/14465

■■■□□ PKfail Secure Boot bypass lets attackers install UEFI malware. https://www.bleepingcomputer.com/news/security/pkfail-secure-boot-bypass-lets-attackers-install-uefi-malware/ https://t.me/cKure/14463

■■■□□ Secure Boot BIOS security has been compromised on hundreds of PC models from big brands because firmware engineers used four-letter passwords. https://www.pcgamer.com/hardware/hard-to-believe-but-secure-boot-bios-security-has-been-compromised-on-hundreds-of-pc-models-from-big-brands-because-firmware-engineers-used-four-letter-passwords/ https://t.me/cKure/14462

■■■■□ Privacy: Apple giving governments access to your camera and photo album is certain to end well. https://www.theverge.com/2024/7/24/24205177/apple-iphone-ios-18-emergency-sos-live-video-chat-911 https://t.me/cKure/14461

■□□□□ Cyber Security Job Application for Indian Army in offensive security. Applicable for Indian citizens. Applications are open. https://defencedirecteducation.com/2024/07/24/territorial-army-notification-2024-cyber-tasks/ https://t.me/cKure/14460