CyberCureME - Cyber Security Marketplace’s Post

CrushFTP File Transfer Vulnerability Lets Attackers Download System Files

🚨 Urgent: If you use CrushFTP for file transfers, update to the latest version immediately! A critical flaw is being actively exploited, letting attackers escape Virtual File System (VFS) to access system files. Click to learn more: https://lnkd.in/gKP-NU9x

[CVE-2024-47883: CRITICAL] OpenRefine's MIT Simile Butterfly server has a security vulnerability damaging modules via 'file:/' URLs. Versions prior to 1.2.6 allow fetching remote files, leaving systems open to attacks like path traversal and remote code execution. Update to 1.2.6 for a fix. https://lnkd.in/eJQ_CZQt

🛡️ Just completed the PortSwigger Server-Side Vulnerabilities Path! 🚀 Explored Path Traversal, Access Control, Authentication, SSRF, File Upload, OS Command Injection, and SQL Injection. Thanks, PortSwigger, for the insightful journey! 🔐💻 #WebSecurity #PortSwigger

Attackers can abuse a new DLL search order hijacking technique to execute code in applications within the WinSxS folder. The post New DLL Search Order Hijacking Technique Targets WinSxS folder appeared first on SecurityWeek.

Attackers can abuse a new DLL search order hijacking technique to execute code in applications within the WinSxS folder. The post New DLL Search Order Hijacking Technique Targets WinSxS Folder appeared first on SecurityWeek.

CVE-2024-5806 Progress MOVEit Transfer, allows attackers to bypass authentication in Secure File Transfer Protocol (SFTP) module, responsible for file transfer operations over SSH.

Another Easy Challenge just dropped on LetsDefend, on this challenge we were tasked to investigate what happened on compromised endpoint with sysmon log. here is my write-up for this challenge ! #letsdefend #cybersecurity

That’s incredible. We have to put trust into all of our network management systems are firewall intrusion, detection systems, etc. etc. antivirus software, etc.. And then when I post about quantum cryptography or our solution which is a feature rich robust applications platform , quantum protected by pWKD, QRNG, PQC, and soon our quantum security AI sweet consisting of six neural networks to ensure and prevent a cyber attack… It seems like I’m pitching a sales pitch. Instead, it’s a plea for someone to test it try it or even buy try to break it! How many have to get attacked broken into and data stolen? How many have to lose millions and billions of dollars? Before someone has the guts to raise their hand and say I’ll do it I’ll try it. I’ll buy it? https://lnkd.in/eiDeAXaK #vc #cyberthreat #cyberattack #quantumcryptography #angel #familyoffice #investor

DOS-to-NT path conversion process could be exploited by threat actors to achieve rootkit-like capabilities to conceal and impersonate files, directories, and processes.