cKure Red

A consortium of journalists gained access to a leak of more than 50,000 phone numbers entered into a system used for targeting by Pegasus, a sophisticated spyware product made by the Israel 🇮🇱 sponsored company NSO Group. Governments around the world paid the company vast sums of money to gain access to Pegasus and let them use it to attack their targets.

https://cdn.occrp.org/projects/project-p

Critical encryption vulnerability found in secure communications platform Matrix.

https://portswigger.net/daily-swig/critical-encryption-vulnerability-found-in-secure-communications-platform-matrix

Facebook shields millions of "VIP users" from the company’s standard content moderation practices in a program called "XCheck," according to internal documents obtained by the WSJ.

CVE-2021-39115: Template Injection in Email Templates leads to code execution on Jira Service Management Server.

https://github.com/PetrusViet/CVE-2021-39115

CVE-2021-40444 PoC

https://github.com/lockedbyte/CVE-2021-40444

cKure Red pinned a video

CVE-2021-40444; a Half-Click exploit.

Internet Explorer: Incorrect JIT optimization in jscript9.dll leading to memory corruption

https://bugs.chromium.org/p/project-zero/issues/detail?id=2188

RCE-0-day-for-GhostScript-9.50

https://github.com/duc-nt/RCE-0-day-for-GhostScript-9.50

Burp Suite RCE

http://noahblog.360.cn/burp-suite-rce

BRAKTOOTH: Causing Havoc on Bluetooth Link Manager.

https://asset-group.github.io/disclosures/braktooth/

Israel 🇮🇱: A tale of state sponsored cyber terrorism and crime, for financial gains; all in the name of spreading peace ✌

How NSO Group came into existence and how it goes access to someone's device illegally to anyone who is willing to pay. A good piece from Darknet Dairies worth detailed references.

https://darknetdiaries.com/episode/100/

Channel created