■□□□□ TLS 1.3 is now supported by about 1 in every 5 HTTPS servers.

■■■■■ #Exclusive

#DataLeak: Hacker group RedRabbit Team have created a website which sends details of AirTel #India 🇮🇳 over the email.

We have tested the data for authenticity. Takes around 10 hours to send details. This will be the most audacious leak as it is available on .com clear-net website.

■■□□□ Apple loses lawsuit against cyber security startup Corellium.

https://www.hackread.com/apple-loses-lawsuit-cyber-security-startup-corellium/

■■■■□ #OSINT: 🕵️‍♂️ Investigate Google Accounts with emails.

github.com/mxrch/GHunt

■■■■■ Responder now supports SMBv2, shows if smb1 is disabled or not, which Os/Build version, if RDP is open, domain joined, last reboot, etc. And.. you get all that information in less than 5 seconds per class C.

https://github.com/lgandx/Responder

● The website was taken down. The attackers created another domain though.

Apparently the domain was posted by the attacker related account in our discussion group (@ckureg). The group is followed by various blue teams and threat intel platforms that can directly take action against such domains.

■■□□□#DataLeak: Emotet campaign hits Lithuania’s National Public Health Center and several state institutions.

https://securityaffairs.co/wordpress/112817/malware/emotet-campaign-hit-lithuania.html

■□□□□ Fines against banks for data breaches and noncompliance more than doubled in 2020.

https://portswigger.net/daily-swig/fines-against-banks-for-data-breaches-and-noncompliance-more-than-doubled-in-2020

■■■■■ Offensive Lateral Movement in Windows.

https://posts.specterops.io/offensive-lateral-movement-1744ae62b14f

■■■■□#DataLeak: SolarWinds hackers accessed some of the source-code of Microsoft.

https://thehackernews.com/2020/12/microsoft-says-solarwinds-hackers.html

■■■□□ GKE Auditor – Detect Google Kubernetes Engine Misconfigurations.

https://www.darknet.org.uk/2021/01/gke-auditor-detect-google-kubernetes-engine-misconfigurations

■■□□□ RogueWinRM - Windows Local Privilege Escalation From Service Account To System.

https://www.kitploit.com/2021/01/roguewinrm-windows-local-privilege.html

■□□□□ City of Cornelia Witnessed Fourth Ransomware Attack.

https://www.ehackingnews.com/2021/01/city-of-cornelia-witnessed-fourth.html

■■■■□ CVE-2020-29583: Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products.

https://thehackernews.com/2021/01/secret-backdoor-account-found-in.html

■■■■□CVE-2020-29583: A hardcoded credential vulnerability was identified in the “zyfwp” user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP.

https://www.zyxel.com/support/CVE-2020-29583.shtml

■■■□□ Video for https://t.me/cKure/6509

■■■■□ #DataLeak: Facebook ads used to steal 615000+ credentials in a phishing campaign.

The campaign targeted users in multiple countries including #Egypt 🇪🇬, #Philippines🇵🇭, #Pakistan 🇵🇰, and #Nepal🇳🇵

https://securityaffairs.co/wordpress/112882/hacking/facebook-phishing-campaign-2.html