TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.78K
Photos
73
Videos
69
Links
480

Showing posts older than #511 · Back to latest

Older Posts 17 shown
Post #509 2.64K
🚨 China 🇨🇳 breaks RSA using quantum supercomputer.

Catch: They used 50 bit integer as their key instead of standard 1024 or 2048 bit keys 🔑
Post #508 2.69K
❄ Escaping the Chrome Sandbox Through DevTools.

https://ading.dev/blog/posts/chrome_sandbox_escape.html

📱 A POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension.

https://github.com/ading2210/CVE-2024-6778-POC
ading.dev Escaping the Chrome Sandbox Through DevTools This blog post details how I found CVE-2024-6778 and CVE-2024-5836, which are vulnerabilities within the Chromium web browser which allowed for a sandbox escape from a browser extension.
Post #507 2.24K
🧠 ByteDance recently terminated an intern for sabotaging an AI model training project within its commercial technology team. The intern was accused of malicious interference, leading to their dismissal in August 2024. Despite reports suggesting significant financial damage, ByteDance clarified that the sabotage did not impact formal commercial projects or their broader AI operations. The company has informed the intern's university and relevant industry bodies. This incident highlights growing concerns around AI security and insider threats in the tech industry.
Post #506 2.52K
🇷🇺💎💎 Two never-before-seen tools, from same group, infect air-gapped devices.

https://arstechnica.com/security/2024/10/two-never-before-seen-tools-from-same-group-infect-air-gapped-devices/

https://securelist.com/goldenjackal-apt-group/109677/

https://www.welivesecurity.com/en/eset-research/mind-air-gap-goldenjackal-gooses-government-guardrails/
Ars Technica Two never-before-seen tools, from same group, infect air-gapped devices It's hard enough creating one air-gap-jumping tool. GoldenJackal did it 2x in 5 years.
Post #505 2.01K
💎Interesting thread on CSRF CTF.

🧵
https://x.com/J0R1AN/status/1842139861295169836

👩‍💻
https://gist.github.com/JorianWoltjer/b9163fe616319db8fe570b4ef9c02291
X (formerly Twitter) Jorian (@J0R1AN) on X During a recent CTF, one participant found a particularly interesting solution to my challenge. The goal was to send multiple CSRF requests with SameSite=Lax from 1 visit. Normally, a form sends you to the page you are posting to and you cannot send any…
Post #504 2.18K
⚡️Someone Put Facial Recognition Tech onto Meta's Smart Glasses to Instantly Dox Strangers.

https://www.404media.co/someone-put-facial-recognition-tech-onto-metas-smart-glasses-to-instantly-dox-strangers/
404 Media Someone Put Facial Recognition Tech onto Meta's Smart Glasses to Instantly Dox Strangers The technology, which marries Meta’s smart Ray Ban glasses with the facial recognition service Pimeyes and some other tools, lets someone automatically go from face, to name, to phone number, and home address.
Post #503 1.81K
☄️ 🐧 Linux kernel Netfilter Use-After-Free leads to LPE.

https://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md
GitHub security-research/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md at master · google/security-research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. - google/security-research
Post #502 2.09K
🤍Working zero-day exploits for all apple mobile phones (aka iPhones) and all Samsung phones (android ones) are available with major phone hacking companies from Israel 🇮🇱 in their hot¹ state. In a cold state, access may be hindered based on device type and model.

¹ Unlike cold state where the phone is unlocked or recently locked where keys 🔑 are in memory.


Characteristics:
🥇The exploit(s) does allow full device access (Kernel) in both smartphone brands.

🥈The exploit(s) requires physical access to the device.

🥉The exploit may work on future device models without chance.
  • 👍 1
Post #496 2.23K
😍Zero-Day: Israel 🇮🇱 conducted a kinetic cyberattack using power surge to target handheld pager systems used by Lebabnon's resistance members (aka Hizbollah) in Beirut's southern suburbs leading to dozens of injuries in Lebanon 🇱🇧

The attack was executed in civilian areas of a sovereign nation.

Around 1K cases have been reported.
Post #492 2.16K
🕯 WhenFS turns your Google Calendar into a FUSE filesystem. It whimsically supports the following features:

➡️Create a filesystem out of existing Google Calendars, or create a new one from scratch
➡️Read and write files and directories.
➡️Mount your friends' WhenFS calendar file systems to share files in the silliest way possible

https://github.com/lvkv/whenfs
GitHub GitHub - lvkv/whenfs: A FUSE filesystem for your Google calendar A FUSE filesystem for your Google calendar. Contribute to lvkv/whenfs development by creating an account on GitHub.
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →