ihsan

Good with computers | Thoughts mine.

[ihsan @0xIHSN]

The real security is trusting no one.

[Margot @PetrAndre_ev]

Looks like:

A vulnerability has been discovered in @telegram

When files are auto-downloaded on @Windows,

it may trigger code execution

To safeguard your system,
it's advised to disable auto-downloading of files and avoid downloading files from unknown sources.

Navigate to Settings -> Advanced -> Automatic media download -> Files to adjust your settings by types

A demonstration video illustrates how launching a calculator is possible, highlighting the potential for any third-party code to execute similarly

Please like👍 and share🔄

[Kali Linux @kalilinux]

The xz package, starting from version 5.6.0 to 5.6.1, was found to contain a backdoor. The impact of this vulnerability affected Kali between March 26th to March 29th. If you updated your Kali installation on or after March 26th, it is crucial to apply the latest updates today.

[ihsan @0xIHSN]

@fkadev Burada örneği var ilk başlatan bu sanırım 🙂

https://t.co/jhctuZSttJ

[𝕭𝖏ø𝖗𝖓 𝕾𝖙𝖆𝖆𝖑 @_nonfigurativ_]

Ok, so a lot of people have been asking me for code/writeup of this so I made a stripped down example (works with an infinite amount of windows) so that you can look at to get the basic gist of it (that's all I have time for now, sorry!).

See below for link to repo + testsite

[JS0N Haddix @Jhaddix]

Ok fam. I’m giving away TWO free tickets to my course which takes place in two/three weeks.

All you have to do to win is like, retweet this tweet, and reply with “https://t.co/VnOqGJ5Yyo!”

I’ll pick winners next week!

If you haven’t seen my course, check out the link!

[ihsan @0xIHSN]

#38TB of data accidentally #exposed by #Microsoft AI researchers

https://t.co/W046IwG646

[ihsan @0xIHSN]

Operation Rusty Flag – A Malicious Campaign Against Azerbaijanian Targets https://t.co/9CvRMsuRPc

@DeepInstinctSec

[ihsan @0xIHSN]

#PeachSandstorm password spray campaigns enable #intelligence collection at high-value #targets

https://t.co/FuYyJSbHt4

[ihsan @0xIHSN]

Konni APT uses WinRAR vulnerability (CVE-2023-38831) to attack the digital currency industry #CVE-2023-38831 #winrar #KonniAPT https://t.co/nkQPyOMEoY

[blackorbird @blackorbird]

Free Download Manager backdoored
A DNS-based backdoor
by the way, According to Kaspersky telemetry, 260,000 unique Linux samples appeared in the first half of 2023.😱
https://t.co/BJNizCCflg

[ihsan @0xIHSN]

Mashing Enter to #bypass full disk encryption with #TPM, Clevis, dracut and systemd https://t.co/LIKCRYEUgD

[ihsan @0xIHSN]

Detailed Analysis Report on “Baykar Bayraktar TB2 UAV Data Leak” Allegation https://t.co/4GDE2BsZi8

[BleepingComputer @BleepinComputer]

US govt offers $10 million bounty for info on Clop ransomware - @LawrenceAbrams
https://t.co/It69iojTE6

[BleepingComputer @BleepinComputer]

Microsoft OneDrive down worldwide following claims of DDoS attacks - @serghei
https://t.co/CxMXANtmHU

[Halil Öztürkci @halilozturkci]

1️⃣ FBI, sextortion için sahte videolar oluşturmada yapay zekanın artan kullanımı hakkında bir uyarı yayınladı.

Son zamanlarda FBI, gerçek insanları müstehcen faaliyetlerde gösteriyor gibi görünen deepfake videolar oluşturmak için yapay zeka kullanımında bir artış olduğunu kaydetti. Bu manipüle edilmiş görüntüler veya videolar daha sonra taciz veya sextortion amacıyla sosyal medyada veya pornografik web sitelerinde dolaşıma sokuluyor.

[ihsan @0xIHSN]

Let us serve you, but don’t bring us down | Internet Archive Blogs https://t.co/tC7x8H7G2Y

[BleepingComputer @BleepinComputer]

Microsoft: Notorious FIN7 hackers return in Clop ransomware attacks - @serghei
https://t.co/jOMSreWcj1

[ihsan @0xIHSN]

The Pi-Day Outage https://t.co/ROIqCRCzCP

[ihsan @0xIHSN]

Journalist opens USB letter bomb in newsroom - BBC News https://t.co/MNCp8ofMBa

[ihsan @0xIHSN]

Is Samsung's Galaxy S21 Ultra using AI to fake detailed Moon photos? https://t.co/Wp1ackXWKb

[PRODAFT | Türkiye @PRODAFT_TR]

Afetzedeleri hedef alan her türlü dolandırıcılık ve zorbalık teşebbüsü ile ilgili olarak [email protected] adresine e-posta gönderebilirsiniz. Araştırıp, doğrulayarak, kolluk kuvvetlerimize iletiyor olacağız.