PandoraFMS 755 - Chained XSS + .htaccess RCE.

https://k4m1ll0.com/chained_exploit_htaccess.html

Latest FinFisher spyware upgrades 'particularly worrying,' says Kaspersky.

Eight-month analysis finds four-layer obfuscation, two-stage loader, and a new UEFI attack

https://go.theregister.com/feed/www.theregister.com/2021/09/28/kasperky_finfisher_spyware_report/

● One of the android devices used to administer this channel was accessed remotely, a few hours ago by an unknown entity.

No modifications to data were noticed on the device.

🔧 Tool: TrevorC2 - Command and Control via Legitimate Behavior over HTTP

https://github.com/trustedsec/trevorc2

PANDORA PAPERS

The largest investigation in journalism history exposes a shadow financial system that benefits the world’s most rich and powerful.

https://www.icij.org/investigations/pandora-papers/

Updated list of Hacking channels on telegram: https://t.me/cKure/7364

● Yet another website: aaqeel01.wordpress.com (Malware Research Website)

☆ Breaking: Phrack 72 has been released.

http://phrack.org/issues/70/1.html

Twitch Data-Leak original post copy and link.

Archived at https://sizeof.cat/

Zero-Day Exploit code: Cisco RV110W UPnP 0day 分析.

https://github.com/badmonkey7/CVE-2021-34730

Breaking: India 🇮🇳: Activists in Togo 🇹🇬 attacked by Indian made spyware.

OSINT report by Amnesty International of a Cyber-Crime apparently by an Indian company that has been linked to the infrastructure used by Donot Group and an Indian cybersecurity company Innefu Labs.

Report: https://github.com/blackorbird/APT_REPORT/blob/master/Donot/Donot%20Group%20%26%20Innefu%20Labs.pdf

Deepfence ThreatMapper helps you to monitor and secure your running applications, in Cloud, Kubernetes, Docker, and Fargate Serverless.

https://github.com/deepfence/ThreatMapper

Old but Gold: Bypassing the Air-Gap system for sensitive info.

Your body reveals your password by interfering with Wi-Fi

https://dl.acm.org/doi/10.1145/2976749.2978397

http://www.theregister.co.uk/2016/11/13/researchers_point_finger_at_handy_smartphone_exploit/

CVE-2021-35052: WinRar remote code execution.

WinRAR’s vulnerable trialware: when free software isn’t free.

https://swarm.ptsecurity.com/winrars-vulnerable-trialware-when-free-software-isnt-free/

https://thehackernews.com/2021/10/bug-in-free-winrar-software-could-let.html

CVE-2021-30573 PoC for Google Chrome

Google Chrome Use After Free vulnerability reported by S4E Team.

https://github.com/s4e-lab/CVE-2021-30573-PoC-Google-Chrome

Breaking from Iran 🇮🇷 as Nationwide Cyber-Attack shuts down "smart fuel network," gas stations across the country rendering them dysfunctional as per state media.

Data-Leak of ~20K personnel of Israel 🇮🇱 defence forces (regular army) leaked by a Cyber-Crime group called Moses-Staff including names, ID, phone number, personal photographs, address and similar.

Refer: https://t.me/cKure/9860

Data-Leak from Israel 🇮🇱 as threat actor from unknown origin has posted tens of GBs of leaked data from the ministry of defense, Israel.

All Windows versions impacted by new LPE zero-day vulnerability.

A public proof-of-concept (PoC) exploit and technical details for an unpatched Windows zero-day privilege elevation vulnerability has been disclosed that allows users to gain SYSTEM privileges under certain conditions.

https://www.bleepingcomputer.com/news/security/all-windows-versions-impacted-by-new-lpe-zero-day-vulnerability/

CVE-2021-42574

Researchers devised a new attack method called ‘Trojan Source’ that allows hide vulnerabilities into the source code of a software project.

https://www.trojansource.codes/

Details: https://securityaffairs.co/wordpress/124081/hacking/trojan-source-attack.html