cKure Red

🗞 State-sponsored terrorism by Israel 🇮🇱 caught by OpenAI.

OpenAI bans accounts of the mercenaries. Facebook (Meta) follows suit.

Disrupting deceptive uses of AI by covert influence operations.

We have terminated accounts linked to covert influence operations; no significant audience increase due to our services.
-OpenAI

Official statement:
https://openai.com/index/disrupting-deceptive-uses-of-AI-by-covert-influence-operations/

Supporting article by journalists in Israel: https://www.timesofisrael.com/openai-says-it-disrupted-covert-influence-operation-by-israeli-firm-stoic/

Stoic also acted to meddle with elections in India 🇮🇳

https://www.business-standard.com/elections/lok-sabha-election/openai-report-on-lok-sabha-polls-zero-zeno-what-is-israeli-firm-stoic-and-how-it-tried-to-disrupt-lok-sabha-polls-2024-124060100518_1.html

Please open Telegram to view this post

VIEW IN TELEGRAM

1.22K views14:48

0:30

Israel 🇮🇱 Palestine 🇵🇸 conflict
Title: Disinformation campaign

Company name: Stoic (Tel Aviv).
Subtitle: The lying Jew ✡️

The company's goal is to spread lies and form a narrative that supports the criminal state; starting at home in Israel.

The company created bots that mimicked African American students and Jewish students as if they were concerned. These accounts commented on Facebook and Instagram in favor of genocide in the Muslim lands (Gaza, Palestine 🇵🇸).

1.45K viewsedited 14:50

GitHub - seyedhojjathosseini/Advanced-Methods-for-Extracting-Information-from-Isolated-Systems: Advanced Methods for Extracting…

ℹ️

Air-Gap Bypass: Various Methods for Extracting Information from Isolated Systems.

https://github.com/seyedhojjathosseini/Advanced-Methods-for-Extracting-Information-from-Isolated-Systems

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

Advanced Methods for Extracting Information from Isolated Systems - seyedhojjathosseini/Advanced-Methods-for-Extracting-Information-from-Isolated-Systems

1.49K views05:46

Hacking Millions of Modems (and Investigating Who Hacked My Modem)

👑

Hacking Millions of Modems (owned by an ISP). A story by Sam Curry.

https://samcurry.net/hacking-millions-of-modems

Please open Telegram to view this post

VIEW IN TELEGRAM

samcurry.net

Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive…

1.77K views15:52

CVE-2024-4577 - Yet Another PHP RCE: Make PHP-CGI Argument Injection Great Again!

🌏

PHP just fixed RCE vulnerability, which affects XAMPP by default.

CVE-2024-4577: Make PHP-CGI Argument Injection Great Again!

https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html

Please open Telegram to view this post

VIEW IN TELEGRAM

Orange Tsai

📌 [ 繁體中文 | English ] This is a side story/extra bug while I’m preparing for my Black Hat USA presentation. I believe most of the details have already been covered in the official advisory (sh

1.83K viewsedited 08:36

PoC Exploit Published For SharePoint XML eXternal Entity (XXE) Injection Vulnerability

⚡️

PoC Exploit published for SharePoint XXE injection 💉

https://cybersecuritynews.com/poc-exploit-xxe-injection-vulnerability/

Please open Telegram to view this post

VIEW IN TELEGRAM

Cyber Security News

A new XXE (XML eXternal Entity) Injection has been discovered to affect SharePoint on both on-prem and cloud instances.

2.13K views08:23

Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762

⚔️

Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762

https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762

Please open Telegram to view this post

VIEW IN TELEGRAM

www.assetnote.io

Early this February, Fortinet released an advisory for an "out-of-bounds write vulnerability" that could lead to remote code execution. The issue affected the SSL VPN component of their FortiGate network appliance and was potentially already being exploited…

1.95K views15:14

1:47

⚠️

CVE-2024-0044 (Android LPE) impacting Android 12 and 13.

Source: https://www.linkedin.com/posts/lukasstefanko_whatsapp-vulnerability-activity-7208453738829598720-5Px4

Please open Telegram to view this post

VIEW IN TELEGRAM

2.34K views20:40

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution

✔️

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution.

https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup.html

Please open Telegram to view this post

VIEW IN TELEGRAM

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

2.17K views17:09

cKure Red pinned «✔️ BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution. https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup.html»

17:09

HTML entities that create ASCII characters inside a JavaScript URL - Shazzer

⚡️

HTML entities that create ASCII characters inside a JavaScript URL.

https://shazzer.co.uk/vectors/667b4120d631543fa1c420a5

Please open Telegram to view this post

VIEW IN TELEGRAM

shazzer.co.uk

This vector loops through all entities and assigns them to a JavaScript URL and checks if they decode to ASCII characters.

1.92K views22:28

The Poll Lady (@ThePollLady) on X

🇺🇦

An interesting thread on Top 10 Williams exposé.

https://x.com/ThePollLady/status/1805912910687793244

Please open Telegram to view this post

VIEW IN TELEGRAM

X (formerly Twitter)

10 most controversial exposé by WikiLeaks founded by Julian Assange.

Thread🧵

1.85K views21:59

🇺🇦 An interesting thread on Top 10 Williams exposé. https://x.com/ThePollLady/status/1805912910687793244

0:36

Statement on disinformation and lies by Mr. Julian Assange

2.34K views22:04

0:41

✔️

Zero-Day: Breaking BitLocker via MitM between CPU and TPM chip.

Please open Telegram to view this post

VIEW IN TELEGRAM

11.9K views10:03

cKure Red pinned a video

10:05

🤍

Rockyou-2024 has been released on July 4, 2024, in a 45 GB zip file.

Previous Rockyou-2021 had 8.4 billion passwords, and the new version has 1.5 billion (added by hacker 'ObamaCare'), making it a 10 billion word-list.

Please open Telegram to view this post

VIEW IN TELEGRAM

2.35K views09:28

🤍Rockyou-2024 has been released on July 4, 2024, in a 45 GB zip file. Previous Rockyou-2021 had 8.4 billion passwords, and the new version has 1.5 billion (added by hacker 'ObamaCare'), making it a 10 billion word-list.

https://s3.timeweb.cloud/fd51ce25-6f95e3f8-263a-4b13-92af-12bc265adb44/rockyou2024.zip

2.7K views17:35

Critical vulnerability in the RADIUS protocol leaves networking equipment open to attack

BlastRADIUS

Critical vulnerability in the RADIUS protocol leaves networking equipment open to attack.

https://www.helpnetsecurity.com/2024/07/09/blastradius-radius-protocol-vulnerability/

Help Net Security

A critical vulnerability in the RADIUS protocol, dubbed BlastRADIUS, leaves most networking equipment open to Man-in-the-Middle attacks.

1.82K views17:30