All posts by cK-bot

■■■□□ Cyber-War: Russia launches ‘massive’ overnight attack on Ukraine power grid. https://www.bbc.com/news/articles/czvvj4j4p8ro https://t.me/cKure/14323

■■■■□ Reverse Engineering and Exploiting Augentix System on Chip Unicorn Binary. https://www.somersetrecon.com/blog/2024/6/5/reversing-the-unicorn https://t.me/cKure/14322

■■■■■ wstunnel: Tunnel all your traffic over Websocket or HTTP2 – Bypass firewalls/DPI (Static binary available). https://github.com/erebe/wstunnel https://t.me/cKure/14320

■■■■□ Sansec researchers are warning of a critical CosmicSting vulnerability that affects almost 75% of sites using Adobe Commerce and Magento. Despite the release of emergency fixes, nine days later the situation remains unchanged: millions of sites are at risk of serious XML external entity injection (XXE) and RCE attacks. CosmicSting is also tracked as…

■□□□□ United Kingdom Data-Leak: London hospitals hackers publish stolen blood test data. https://www.bbc.com/news/articles/c9ww90j9dj8o https://t.me/cKure/14317

■■■■□ Execute commands by sending JSON! How unsafe deserialization vulnerabilities work in Ruby projects. https://github.blog/2024-06-20-execute-commands-by-sending-json-learn-how-unsafe-deserialization-vulnerabilities-work-in-ruby-projects/ https://t.me/cKure/14316

■□□□□ More than 1,000 students pledge not to work at Google and Amazon due to Project Nimbus. https://au.finance.yahoo.com/news/more-than-1000-students-pledge-not-to-work-at-google-and-amazon-due-to-project-nimbus-042439081.html https://t.me/cKure/14315

■■■■□ Recovering an ECU firmware using disassembler and branches. https://blog.quarkslab.com/recovering-an-ecu-firmware-using-disassembler-and-branches.html https://t.me/cKure/14314

■■■■□ Voidgate : bypass AV/EDR memory scanners (This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page). https://github.com/vxCrypt0r/Voidgate https://t.me/cKure/14313

■■■□□ SolarWinds Serv-U Vulnerability Under Active Attack – Patch Immediately. https://thehackernews.com/2024/06/solarwinds-serv-u-vulnerability-under.html https://t.me/cKure/14312