🔴 #python-libarchive, Directory Traversal, #CVE-TBD (High)

https://dailycve.com/python-libarchive-directory-traversal-cve-tbd-high/

@Daily_CVE

🔴 XWiki, Remote Code Execution (RCE), #CVE-TBD (Critical)

https://dailycve.com/xwiki-remote-code-execution-rce-cve-tbd-critical/

@Daily_CVE

🔴 XWiki Remote Code Execution Vulnerability (#CVE-TBD) - Critical

https://dailycve.com/xwiki-remote-code-execution-vulnerability-cve-tbd-critical/

@Daily_CVE

🟠 XWiki Scheduler Vulnerability (#CVE-2024-XXXX) (Moderate)

https://dailycve.com/xwiki-scheduler-vulnerability-cve-2024-xxxx-moderate/

@Daily_CVE

🔴 Apache Superset SQL Injection Vulnerability (High Severity)

https://dailycve.com/apache-superset-sql-injection-vulnerability-high-severity/

@Daily_CVE

🔴 NanoProxy: Potential Vulnerabilities Due to Outdated golangorg/x/#crypto Dependency (High)

https://dailycve.com/nanoproxy-potential-vulnerabilities-due-to-outdated-golangorg-x-crypto-dependency-high/

@Daily_CVE

🔴 XWiki Remote Code Execution via Extension Sheet (#CVE-TBD) - Critical

https://dailycve.com/xwiki-remote-code-execution-via-extension-sheet-cve-tbd-critical/

@Daily_CVE

🔵 SimpleXLSX, Cross-site Scripting (XSS) Vulnerability (#CVE-2024-XXX)

https://dailycve.com/simplexlsx-cross-site-scripting-xss-vulnerability-cve-2024-xxx/

@Daily_CVE

🦑 𝐅𝐑𝐄𝐄 𝐜𝐥𝐚𝐬𝐬𝐞𝐬 𝐟𝐨𝐫 𝐚 𝐩𝐚𝐭𝐡𝐰𝐚𝐲 𝐢𝐧𝐭𝐨 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐧𝐝 𝐞𝐭𝐡𝐢𝐜𝐚𝐥 𝐡𝐚𝐜𝐤𝐢𝐧𝐠 𝐅𝐨𝐮𝐧𝐝𝐚𝐭𝐢𝐨𝐧𝐬:
Help Desk
➡️TCM Security Academy – Practical Help Desk (https://lnkd.in/geDEvt6d)
➡️Professor Messer – 220-1101 and 220-1102 A+ Courses (https://lnkd.in/gKjJsSPz & https://lnkd.in/gMW3hMsv)

Networking
➡️Professor Messer – N10-009 Network+ Course (https://lnkd.in/g8mYZaMm)
➡️Cisco Networking Academy – Packet Tracer (https://lnkd.in/guGibYx6)

Linux
➡️TCM Security Academy – Linux 100: Fundamentals (https://lnkd.in/gEGHzxw3)
➡️Linux Journey (https://linuxjourney.com/)
➡️OverTheWire – Bandit (https://lnkd.in/gRwPsump)

Programming
➡️TCM Security – Programming 100: Fundamentals (https://lnkd.in/gWZe2JRj)
➡️FreeCodeCamp (https://lnkd.in/gbaHhV34)
➡️Codecademy (https://lnkd.in/gxAHnTFD)

Security Essentials
➡️Professor Messer – SY0-701 Security+ Course (https://lnkd.in/gfCCMJqQ)

Hacking Essentials
➡️Ethical Hacking in 15 Hours Part 1 (https://lnkd.in/gWump_cZ)
➡️Ethical Hacking in 15 Hours Part 2 (https://lnkd.in/gH9_Ap7F)
➡️TryHackMe (https://tryhackme.com/)

Active Directory Hacking
➡️How to Build an Active Directory Hacking Lab (https://lnkd.in/g_9wjzhz)
➡️Hacking Active Directory for Beginners (https://lnkd.in/gaewN7nU)

Web Application Hacking
➡️PortSwigger Web Security Academy (https://lnkd.in/gvx6NgcZ)
➡️Hacker101 (https://www.hacker101.com/)
➡️Bugcrowd University (https://lnkd.in/g_aPUcD8)


Ref: G.M. Ahmad Faruk
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🖥️ Chinese Police Caught Using #Android #Spyware to Track Mobile Devices

https://undercodenews.com/chinese-police-caught-using-android-spyware-to-track-mobile-devices/

@Undercode_News

North Korea's Cyberwarfare: Indictment of 14 IT Workers

https://undercodenews.com/north-koreas-cyberwarfare-indictment-of-14-it-workers/

@Undercode_News

🛒 Takedown of Rydox: Major #Cybercrime Marketplace Shut Down, Admins Arrested

https://undercodenews.com/takedown-of-rydox-major-cybercrime-marketplace-shut-down-admins-arrested/

@Undercode_News

⚠️ Cyberattacks on Critical Infrastructure: Iranian #Malware Targets #IoT and OT Systems

https://undercodenews.com/cyberattacks-on-critical-infrastructure-iranian-malware-targets-iot-and-ot-systems/

@Undercode_News

🦑Bug Bounty Tip : OTP Bypass

Ref: Aswin k v
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

A Flawed Feature: #Windows 11's Suggested Actions Gets the Axe

https://undercodenews.com/a-flawed-feature-windows-11s-suggested-actions-gets-the-axe/

@Undercode_News

Snapdragon X Elite 2: #Qualcomm's Next-Gen Chip Aims to Disrupt the PC Market

https://undercodenews.com/snapdragon-x-elite-2-qualcomms-next-gen-chip-aims-to-disrupt-the-pc-market/

@Undercode_News

⚡️ #Google Cloud Next '25: Your Gateway to the Future of Development

https://undercodenews.com/google-cloud-next-25-your-gateway-to-the-future-of-development/

@Undercode_News

🛒 Rydox Marketplace Busted: International Law Enforcement Takes Down Major #Cybercrime Hub

https://undercodenews.com/rydox-marketplace-busted-international-law-enforcement-takes-down-major-cybercrime-hub/

@Undercode_News

🦑The Silent Saboteurs: Unmasking Cybersecurity Insider Threats

💡 "The biggest threats often come from within."

When it comes to cybersecurity, insider threats are the silent saboteurs that can cause more damage than any external attack. Whether intentional or accidental, these threats are closer than you think.
Let’s explore how insider threats interact with the most common cyberattacks and, more importantly, how to combat them effectively.

🔎 What Are Insider Threats?
Insider threats come in three forms:
1️⃣ Malicious insiders – Those intentionally harming the organization.
2️⃣ Negligent insiders – Carelessly exposing vulnerabilities.
3️⃣ Compromised insiders – Falling prey to external attackers, such as phishing schemes.

🔐 How Do Insider Threats Amplify Cyberattacks?
Here’s how insiders can make common cyberattacks even more dangerous:
Phishing: One wrong click can give attackers access to your systems.
Malware: Unintentional downloads can lead to system-wide infections.
Ransomware: A simple mistake can lock down your entire organization.
Credential Stuffing: Weak or reused passwords make attackers’ jobs easier.
Man-in-the-Middle (MitM) Attacks: Insiders might unknowingly allow sensitive communications to be intercepted.
SQL Injection & Cross-Site Scripting (XSS): Weak development or security practices can leave loopholes.

🚨 How Can Organizations Combat Insider Threats?
1️⃣ Adopt Zero Trust – Verify every user and device before granting access.
2️⃣ Educate Employees – Awareness is the first line of defense.
3️⃣ Implement MFA – Make it harder for attackers to misuse credentials.
4️⃣ Monitor Activity – Track unusual behavior to catch threats early.
5️⃣ Encrypt Data – Protect information from eavesdropping.
6️⃣ Restrict Access – Provide data access on a need-to-know basis.

🌟 Insider Threats: A Wake-Up Call
Insider threats remind us that cybersecurity isn’t just about firewalls; it’s about people. Building a security-first culture and using advanced tools can keep your organization safe.

Ref: Murtuza Lokhandwala
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚠️ Hundreds of Thousands of Prometheus Instances Exposed, Posing Security Risks

https://undercodenews.com/hundreds-of-thousands-of-prometheus-instances-exposed-posing-security-risks/

@Undercode_News