■■□□□ Session monitoring scripts prompt dozens of privacy lawsuits against Big Biz, mainly in California and Florida.

https://go.theregister.com/feed/www.theregister.com/2021/03/30/intel_wiretapping_data/

● Even ckure.xyz has 1 page under video surveillance.

PortScan test video log.

If you are in someone else's property (domain), you abide by its rules of surveillance. As only public information about user is collected.

■■□□□ SolarWinds: SolarWinds Hackers Accessed DHS Chief's Email as several high-level government accounts were also breached in the attack.

Russia 🇷🇺 / United States 🇺🇸

■■□□□ CVE-2021-25160: A remote arbitrary file modification vulnerability exists in some Aruba Instant Access Point (IAP) products.

https://vulmon.com/vulnerabilitydetails?qid=CVE-2021-25160

■■■■■ 8.2 TB #DataLeak from India 🇮🇳.

Popular Mobile payments service MobiKwik on Monday came under fire after 8.2 terabytes (TB) of data belonging to millions of its users began circulating on the dark web in the aftermath of a major data breach that came to light earlier this month.

https://thehackernews.com/2021/03/mobikwik-suffers-major-breach-kyc-data.html

Statement by Mobikwik:
https://mobile.twitter.com/MobiKwik/status/1367489330902675463

Comment by Troy Hunt:
https://mobile.twitter.com/troyhunt/status/1376656147218800641

● cKure has acquired the alleged data of MobiKwik leak. However, verification has not been made.

■■■■■ ⚠️ Following is the list of C2 servers of MetaSploit or CobaltStrike likely used by hackers to attack.

The list was provided via security researcher Michael.

https://gist.github.com/MichaelKoczwara/3a0037ad46c373bc71a6e22daf69d70e

■■■□□ CobaltStrike hunting list.

https://docs.google.com/spreadsheets/d/1bYvBh6NkNYGstfQWnT5n7cSxdhjSn1mduX8cziWSGrw/edit#gid=766378683

■■□□□ Proper compilation of defences against Cobalt Strike.

》Hunting & detection tools
》Yara & Sigma rules
》Indicators
》Research articles
https://mobile.twitter.com/certbund/status/1376556022131658767

https://github.com/MichaelKoczwara/Awesome-CobaltStrike-Defence

■■■■■ Spectre bypass in Linux.

https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/spectre-bypass-linux-vulnerabilities

■■■■□ 📢 Ubiquiti had disclosed earlier this year that a breach involving a third-party cloud provider had exposed customer account credentials. Now a source who participated in the response to that breach alleges Ubiquiti massively downplayed a “catastrophic” incident to minimize the hit to its stock price, and that the third-party cloud provider claim was a fabrication.

https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

■□□□□ IoT security. https://youtu.be/JbHJ4JHlVyA

■■■■□ Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of CMS'.

https://github.com/anouarbensaad/vulnx

■■■■□ #DataLeak | India 🇮🇳: Payment app MobiKwik has denied its security has been breached, and said it it's true, as has been claimed, that its customers' information has appeared on the dark web, then some other platform was totally responsible for that.

"Some users have reported that their data is visible on the dark web," reads a message from the company, dated March 30.

https://blog.mobikwik.com/message-from-the-company/

■■□□□ #DataLeak / United States: Clop ransomware group leaks data from 6 US 🇺🇸 universites.

■■■■■ Tax scammers in China 🇨🇳 turn photos into vids to crack tax dept facial recognition system.

https://go.theregister.com/feed/www.theregister.com/2021/03/31/tax_scammers_fool_ai_facial_recognition/