■■■□□ Archives

Wordpress' sensitive data leak via search query.

■■□□□ Top 10 Tips for BurpSuite.

https://medium.com/r3d-buck3t/top-10-tips-for-burp-suite-72212d22328f

■□□□□ CVE-2021-23888 - McAfee ePolicy Orchestrator HTML Injection

https://ricardojba.github.io/CVE-2021-23888-McAfee-ePolicy-Orchestrator-HTML-Injection/

■■□□□ OSINT tactics.

https://www.hackers-arise.com/amp/2019/05/31/open-source-intelligenceosint-part-4-google-hacking-to-find-unsecured-web-cams

■□□□□ A Windows hacker has found a never-before-seen Easter egg in the Windows 95 Internet Mail application, fifteen years after the software was released.

https://www.bleepingcomputer.com/news/microsoft/windows-95-easter-egg-discovered-after-being-hidden-for-15-years/

■□□□□ #DataLeak: On March 9th, 2021, a database seemingly belonging to Guns.com was dumped on the popular dark web site ‘Raid Forums’.

https://www.ehackingnews.com/2021/03/threat-actor-targets-gunscom-spills.html

■■■■■ Advanced Android Malware Posing as “System Update”.

https://blog.zimperium.com/new-advanced-android-malware-posing-as-system-update/

■■■□□ IPED Digital Forensic Tool.

https://securityonline.info/iped-digital-forensic-tool/

■□□□□ Clop Ransomware group now contacts victims’ customers to force victims into pay a ransom.

■□□□□ US 🇺🇸 Gov Executive Order would oblige to disclose security breach impacting gov users

■■■■□ CallObfuscator - Obfuscate Specific Windows Apis With Different APIs.

https://github.com/d35ha/CallObfuscator

■■■■□ Emba: analyzer for Linux-based firmware of embedded devices.

https://securityonline.info/emba-analyzer-for-linux-based-firmware-of-embedded-devices/

■□□□□ Britain 🇬🇧 named Russia 🇷🇺 as the main threat in cyberspace.

■■■□□ New data suggests someone has compromised more than 21,000 Microsoft Exchange Server email systems worldwide and infected them with malware that invokes both KrebsOnSecurity and Yours Truly by name.

https://krebsonsecurity.com/2021/03/no-i-did-not-hack-your-ms-exchange-server/

■■■■■ CVE-2021-21123

https://youtu.be/Mr95IeGiTj0

https://www.rapid7.com/db/vulnerabilities/google-chrome-cve-2021-21123/

https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html

■■■□□ #CyberAttack | Australia 🇦🇺

A cyber attack has hit the Australian Channel Nine’s live broadcasts causing the disruption of its operations. The broadcaster was unable to air its Sunday morning news program, which runs from 7:00 am to 1:00 pm from Sidney. 

https://hackademicus.nl/hackers-disrupted-live-broadcasts-at-channel-nine-is-it-a-russian-retaliation/

■■■■□ A critical flaw in the official Facebook for WordPress plugin could be abused exploited for remote code execution attacks.

https://securityaffairs.co/wordpress/116063/social-networks/facebook-wordpress-plugin-attacks.html

■■■■□ Intigriti — XSS Challenge 0321
XSS with CSRF Bypass

https://fh4ntke.medium.com/intigriti-xss-challenge-0321-472ae0a48254

■□□□□ ⚠️ Actor selling data allegedly of multiple organisations spread across Arabian peninsular / GCC incl. UAE 🇦🇪, KSA 🇸🇦, Qatar 🇶🇦, Kuwait 🇰🇼.

We requested for a sample and found the data to be inconsistent; in one instance the mail did not exist. Apparently another fraudster.

https://raidforums.com/Thread-SELLING-GCC-Countries-Big-Company-Base-UAE-Saudi-Arabia-Qatar-Kuveyt

■■■■■ php hacked viz. a supply chain attack.

On 28th March, 2021 two malicious commits were pushed to the php-src repo from the names of Rasmus Lerdorf and myself. We don't yet know how exactly this happened, but everything points towards a compromise of the git.php.net server (rather than a compromise of an individual git account).

https://news-web.php.net/php.internals/113838