All posts tagged telegram

■■■■■ Header Enrichment: A technique used by Telco operators to acquire MSISDN (phone number) through a website (HTTP-GET is enough). It can be used to trace users and target them for ads by the ISP or their associated vendors. And if the API key is leaked through a vendor or ISP itself. Scenarios: 1. The…

■■■■■ CVE-2024-38021: Critical Zero-click RCE Vulnerability Impacts Microsoft Outlook Applications. https://cybersecuritynews.com/outlook-zero-click-rce-vulnerability/ https://t.me/cKure/14391

■■□□□ Google cloud listed as sponsor of Israeli military conducting an ongoing genocide in the Middle East. Google’s logo was later removed from the sponsor list of “IT for IDF 2024,” but is still listed as a client of the conference organizer. https://www.404media.co/google-cloud-listed-then-removed-as-sponsor-of-israeli-military-tech-conference/ https://t.me/cKure/14390

■■■■■Spyware attributed to pro-Houthi hackers used against militaries across Middle East. https://therecord.media/pro-houthi-hackers-yemen-spyware-middle-east-militaries https://www.lookout.com/threat-intelligence/article/guardzoo-houthi-android-surveillanceware https://www.recordedfuture.com/research/oilalpha-spyware-used-to-target-humanitarian-aid-groups https://t.me/cKure/14388

■■■■□ Kimsuky Hackers Attacking Organizations Using Weaponized EXE & DOCX Files. https://cybersecuritynews.com/kimsuky-hackers-exe-docx-attacks/ https://t.me/cKure/14387

■□□□□ A possible cyber-attack on BAE systems as their weapons depot explodes. It could be due to kinetic weapons though. https://t.me/cKure/14379

■■■■□ Interesting thread on Russian Disinformation accounts on Twitter (𝕏). https://x.com/BratvaCorp/status/1810712160768496121 https://t.me/cKure/14378

BlastRADIUS Critical vulnerability in the RADIUS protocol leaves networking equipment open to attack. https://www.helpnetsecurity.com/2024/07/09/blastradius-radius-protocol-vulnerability/ https://t.me/cKure/14376

■■□□□ Government in Pakistan authorises ISI (secret service) to trace, intercept calls, messages in a privacy violation law by state. https://www.geo.tv/latest/553339-govt-empowers-isi-to-intercept-trace-calls-after-cabinets-approval https://t.me/cKure/14375

■■□□□ Cybersecurity Agencies Warn of China-linked APT40’s Rapid Exploit Adaptation. https://thehackernews.com/2024/07/cybersecurity-agencies-warn-of-china.html https://t.me/cKure/14374