■■□□□ Israel 🇮🇱

elector.co.il suffers alleged #DataLeak as actor sells data online for 300 USD.

■■■□□ Actor who has the data of elector.co.il (Israel 🇮🇱) was contacted and following are the key details shared:

》Records: 6.5 million
》511 MB (zipped in 3 files)
》Motivation: Money 💰

■■■□□ Massive #DataLeak, if true.

Actor claiming to have admin access + full db(22,000,000) lines for biggest Airline company in UAE 🇦🇪.

■■■□□ BleedingTooth: Exploiting Bluetooth RCE in the Linux kernel.

BleedingTooth is a set of zero-click vulnerabilities in the Linux Bluetooth subsystem that can allow an unauthenticated remote attacker in short distance to execute arbitrary code with kernel privileges on vulnerable devices.

https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup

■□□□□ OSCP writeup.

https://infosecwriteups.com/how-i-passed-oscp-with-100-points-in-12-hours-without-metasploit-in-my-first-attempt-dc8d03366f33

■□□□□ Correction: The DataLeak information posted here (https://t.me/cKure/7479) was from a booking website and not airline.

Threat actor share incorrect information.

■■□□□ Belgium 🇧🇪: Belgian police seize 28 tons of cocaine after 'cracking' Sky ECC's chat app encryption.

https://go.theregister.com/feed/www.theregister.com/2021/04/08/sky_ecc_drugs/

■■■■□ AMD Admits Ryzen 5000 CPU Exploit Could Leave Your PC Open to Hackers.

https://www.ehackingnews.com/2021/04/amd-admits-ryzen-5000-cpu-exploit-could.html

■■■■□ PHP Site's User Database Was Hacked In Recent Source Code Backdoor Attack.

http://feedproxy.google.com/~r/TheHackersNews/~3/__u9zz5iI6c/php-sites-user-database-was-hacked-in.html

■■□□□ 📢 Attackers are actively exploiting the CVE-2018-13379 flaw in Fortinet VPN to deploy the Cring ransomware to organizations in the industrial sector.

https://securityaffairs.co/wordpress/116480/cyber-crime/cring-ransomware-fortinet-vpn-flaw.html

■□□□□ 📢 Global payments processor VISA warns that threat actors are increasingly deploying web shells on compromised servers to exfiltrate credit card information stolen from online store customers. 

■□□□□ Alleged 400k http://www.mappery.com/ Email:Hash combination being sold online.

■■■■□ Threat actor (Islamic Army) has compromised multiple websites of Israel 🇮🇱.

Source: @ANONYMOUS_KGT
However, screenshots were sent to @ckure by the actor.