TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.79K
Photos
73
Videos
71
Links
483

Showing posts older than #59 · Back to latest

Older Posts 20 shown
Post #58 1.1K
cKure Red Photo
Sample data share by the Moses-Staff group.
Post #57 1.07K
Post #56 1.09K
Data-Leak: Breaking from Israel 🇮🇱 as Unit-8200 (the elite cyber espionage, intelligence agency) of the government is listed on the Moses Staff hacking group's website under breached organizations. If true, this could mean leakage of possible state secrets and international deals. This group is believed to be affiliated to Iran 🇮🇷, possibly state sponsored. Iran never denied these claims.

For reference purposes: Unit-8200 has 10K employees.
Post #55 707
CVE-2021-30869: Cyber-Attack by China 🇨🇳 as a macOS Zero-Day, exploited in watering hole attacks on users in Hong Kong 🇭🇰

Google revealed that threat actors recently exploited a zero-day vulnerability in macOS to deliver malware to users in Hong Kong.

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/
Google How we protect users from 0-day attacks Google’s Threat Analysis Group (TAG) actively works to detect hacking attempts and influence operations to protect users from digital attacks, this includes hunting for 0-day vulnerabilities because they can be particularly dangerous when exploited and have…
Post #53
cKure Red pinned «Pwn2own Austin, United States 🇺🇸 with ~1.1M USD 💵 rewarded in 4 days with 61 Zero-Day vulnerabilities. Day 1 results (21 Zero-Day bugs): https://youtu.be/jAckZAL5Dos Day 2 results (14 Zero-Day bugs): https://youtu.be/V3Xoo8IK0-I Day 3 results (14 Zero-Day…»
Post #52 699
cKure Red Pwn2own Austin, United States 🇺🇸 with ~750K USD 💵 rewarded in 2 days. Day 1 results (21 Zero-Day bugs): https://youtu.be/jAckZAL5Dos Day 2 results (14 Zero-Day bugs): https://youtu.be/V3Xoo8IK0-I
Pwn2own Austin, United States 🇺🇸 with ~1.1M USD 💵 rewarded in 4 days with 61 Zero-Day vulnerabilities.

Day 1 results (21 Zero-Day bugs):
https://youtu.be/jAckZAL5Dos

Day 2 results (14 Zero-Day bugs):
https://youtu.be/V3Xoo8IK0-I

Day 3 results (14 Zero-Day bugs):
https://youtu.be/5ap_6F5hxwg

Day 4 results (12 Zero-Day bugs):
https://youtu.be/bURfbHHmMZI
Post #51 656
Apparently a zero-day exploit being circulated online that can takeover Instagram accounts.

The phishing link contains ig.me (a lookalike which is not owned by Instagram). The hack allows the attacker to takeover the victims account.

More details as they arrive.
Post #49
cKure Red pinned «Pwn2own Austin, United States 🇺🇸 with ~750K USD 💵 rewarded in 2 days. Day 1 results (21 Zero-Day bugs): https://youtu.be/jAckZAL5Dos Day 2 results (14 Zero-Day bugs): https://youtu.be/V3Xoo8IK0-I»
Post #45 847
cKure Red CVE-2021-42574 Researchers devised a new attack method called ‘Trojan Source’ that allows hide vulnerabilities into the source code of a software project. https://www.trojansource.codes/ Details: https://securityaffairs.co/wordpress/124081/hacking/trojan…
trojan-source.pdf3.4 MB
CVE-2021-42574 - Code generator.

https://github.com/js-on/CVE-2021-42574
Post #44
cKure Red pinned «CVE-2021-42574 Researchers devised a new attack method called ‘Trojan Source’ that allows hide vulnerabilities into the source code of a software project. https://www.trojansource.codes/ Details: https://securityaffairs.co/wordpress/124081/hacking/trojan…»
Post #43 790
CVE-2021-42574

Researchers devised a new attack method called ‘Trojan Source’ that allows hide vulnerabilities into the source code of a software project.

https://www.trojansource.codes/

Details: https://securityaffairs.co/wordpress/124081/hacking/trojan-source-attack.html
Security Affairs Trojan Source attack method allows hiding flaws in source code Researchers devised a new attack method called 'Trojan Source' that allows hide vulnerabilities into the source code of a software project.
Post #42 708
All Windows versions impacted by new LPE zero-day vulnerability.

A public proof-of-concept (PoC) exploit and technical details for an unpatched Windows zero-day privilege elevation vulnerability has been disclosed that allows users to gain SYSTEM privileges under certain conditions.

https://www.bleepingcomputer.com/news/security/all-windows-versions-impacted-by-new-lpe-zero-day-vulnerability/
BleepingComputer All Windows versions impacted by new LPE zero-day vulnerability A security researcher has disclosed technical details for a Windows zero-day privilege elevation vulnerability and a public proof-of-concept (PoC) exploit that gives SYSTEM privileges under certain conditions.
Post #41 837
cKure Red Data-Leak of ~20K personnel of Israel 🇮🇱 defence forces (regular army) leaked by a Cyber-Crime group called Moses-Staff including names, ID, phone number, personal photographs, address and similar. Refer: https://t.me/cKure/9860
Data-Leak from Israel 🇮🇱 as threat actor from unknown origin has posted tens of GBs of leaked data from the ministry of defense, Israel.
Post #40 1.03K
Data-Leak of ~20K personnel of Israel 🇮🇱 defence forces (regular army) leaked by a Cyber-Crime group called Moses-Staff including names, ID, phone number, personal photographs, address and similar.

Refer: https://t.me/cKure/9860
Post #39 764
Breaking from Iran 🇮🇷 as Nationwide Cyber-Attack shuts down "smart fuel network," gas stations across the country rendering them dysfunctional as per state media.
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →