Israel tried to keep sensitive spy tech under wraps. It leaked abroad

https://www.haaretz.com/israel-news/security-aviation/2024-04-11/ty-article/.premium/israel-tried-to-keep-sensitive-spy-tech-under-wraps-it-leaked-abroad/0000018e-c948-d480-a99e-cf5f24900000

عجیب ولی واقعی 🤔

sandworm==APT44

The #MITRE Corporation says that a state-backed hacking group breached its systems in January 2024 by chaining two #Ivanti VPN zero-days.
https://www.bleepingcomputer.com/news/security/mitre-says-state-hackers-breached-its-network-via-ivanti-zero-days/

۱ میلیون ۸۰۰ هزار رکود دیتابیس وزارت بهداشت فقط ۴۰ دلار🤔

مایتر اتک ۱۵ 👇

https://attack.mitre.org/resources/updates/updates-april-2024/index.html

https://medium.com/mitre-attack/attack-v15-26685f300acc

Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms
https://www.cisa.gov/news-events/alerts/2024/04/24/cisco-releases-security-updates-addressing-arcanedoor-vulnerabilities-cisco-firewall-platforms

https://github.com/W01fh4cker/CVE-2023-20198-RCE

vulnerable: https://en.fofa.info/result?qbase64=Ym9keT0iPHNjcmlwdD53aW5kb3cub25sb2FkPWZ1bmN0aW9uKCl7IHVybCA9Jy93ZWJ1aSc7d2luZG93LmxvY2F0aW9uLmhyZWY9dXJsO308L3NjcmlwdD4i

How can attackers bypass UAC?
https://posts.specterops.io/fileless-uac-bypass-using-sdclt-exe-3e9f9ad4e2b3

vx:
BreachForum has been seized again.

The current display page states the forum is now in control of the United States Federal Bureau of Investigation and is being reviewed.

It also displays a photo of the current administrators Telegram profile pictures, but behind bars.

The 471 cti report 2024