We wrapped ourselves in ourselves, like closing a cocoon. Will we become butterflies? 🫥
Anyway,

More Zero-Days !!!
✅ Citrix fixes critical RCE flaws (CVE-2023-6548, CVE-2023-6549) exploited in wild.
✅ VMware Aria Automation bug (CVE-2023-34063) allows attacker control.
✅ Atlassian issues fixes for 24+ flaws, including RCE.
Patch, Update ASAP:
https://thehackernews.com/2024/01/citrix-vmware-and-atlassian-hit-with.html

DFIR
Infographics
"Log Sources v.1.1", 12.2023.
https://github.com/Neo23x0/Talks

—— Hackstack Security ——
@hackstacksecurity

Follow Us On Twitter: https://twitter.com/hackstacksec

Contact Us: https://hackstacksecure.com/contact

Exploring FBot: Python-Based Malware Targeting Cloud and Payment Services
https://www.sentinelone.com/labs/exploring-fbot-python-based-malware-targeting-cloud-and-payment-services

—— Hackstack Security ——
@hackstacksecurity

Follow Us On Twitter: https://twitter.com/hackstacksec

Contact Us: https://hackstacksecure.com/contact

—— Hackstack Security ——
@hackstacksecurity

Contact Us: https://hackstacksecure.com/contact

By living deeply in the present moment we can understand the past better and we can prepare for a better future

Top 10 Vulnerabilities of 2023:

1. CVE-2023-34362: MOVEit Vulnerability

2. CVE-2023-23397: MS Outlook PE

3. CVE-2023-43641: 1-Click RCE on GNOME

4. CVE-2023-28252: Windows CLFS PE

5. CVE-2023-2868: Barracuda ESG CI

6. CVE-2023-26360: Adobe ColdFusion

7. CVE-2023-4966: Citrix Bleed

8. CVE-2023-22952: SugarCRM RCE

9. CVE-2023-24880: Win Smart Screen Bypass
https://www.vicarius.io/vsociety/posts/windows-smartscreen-security-feature-bypass-cve-2023-24880

10. CVE-2022-42475:
FortiOS heap-based buffer overflow in sslvpnd
https://bishopfox.com/blog/exploit-cve-2022-42475
https://github.com/scrt/cve-2022-42475


—— Hackstack Security ——

@hackstacksecurity

Follow Us On Twitter: https://twitter.com/hackstacksec
Follow Our Page On LinkedIn: https://www.linkedin.com/company/hackstack-security/
Follow Us On Instagram: https://www.instagram.com/hackstacksecurity/
Contact Us: https://hackstacksecure.com/contact

Are you looking for FREE cybersecurity certifications?

1. Vulnerability Management: https://lnkd.in/g64maMet

2. Global IT Asset Inventory: https://lnkd.in/gXR5bD5N

3. Scanning Strategies: https://lnkd.in/g6cQjQuh

4. Reporting Strategies: https://lnkd.in/gs6Vn-DA

5. Patch Management: https://lnkd.in/gnWVDCNp

6. Policy Compliance: https://lnkd.in/g5SXKncJ

7. PCI Compliance: https://lnkd.in/gZns6Xdf

8. Endpoint Detection & Response: https://lnkd.in/gw22Y__E

9. Vulnerability Management: https://lnkd.in/gYAFfAuT

10. Cloud Security Assessment & Response: https://lnkd.in/grrHivcW

11. API Fundamentals: https://lnkd.in/gngVxhbu

12. Cloud Agent: https://lnkd.in/gngVxhbu

13. Container Security: https://lnkd.in/gYNCGY8A

14. File Integrity Monitoring: https://lnkd.in/gYNCGY8A

15. Web Application Scanning: https://lnkd.in/ggpJ-vG6

Here are 15 FREE courses provided by the Qualys.

https://www.linkedin.com/posts/hackstack-security_cybersecurity-freecourses-infosec-activity-7154837232141402112-4kjb

—— Hackstack Security ——

@hackstacksecurity

Contact Us: https://hackstacksecure.com/contact/

236 - Bypassing Chromecast Secure-Boot and Exploiting Factorio

https://dayzerosec.com/podcast/236.html

1. CVE-2023-5347, CVE-2023-5376:
Korenix JetNet Series Unauthenticated Access
https://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

2. CVE-2023-51252:
XSS vulnerability caused by file uploads in PublicCMS V4.0
https://github.com/sanluan/PublicCMS/issues/79

3. CVE-2023-50643:
Arbitrary code execution in MacOS Evernote
https://github.com/V3x0r/CVE-2023-50643

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install Metasploit without proper Bluetooth pairing (CVE-2023-45866). It still affects Android 10 and bellow.
https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/