Cybersecurity News & Education - The Cyber Post

Authored by Hoa Nguyen, Chloe Chamberland | Site metasploit.com This Metasploit module exploits an arbitrary file upload in the WordPress wpDiscuz plugin versions from 7.0.0...

TangleBot Malware Reaches Deep into Android Device Functions

September 27, 2021

Credit card stealer discovered in social media buttons

December 7, 2020

Crypto crime slows in 2020, but ‘DeFi’ hacks rise

November 10, 2020

Encrypted chat app Signal alleges flaws in Cellebrite equipment

April 22, 2021

Apache Web Server Zero-Day Exposes Sensitive Data

The latest hacker news

Microsoft Office Users Warned on New Malware-Protection Bypass

Phishing The Cyber Post - July 9, 2021 0

Word and Excel documents are enlisted to disable Office macro warnings, so the Zloader banking malware can be downloaded onto systems without security tools...

Safari Zero-Day Used in Malicious LinkedIn Campaign

Phishing The Cyber Post - July 15, 2021 0

Researchers shed light on how attackers exploited Apple web browser vulnerabilities to target government officials in Western Europe. Threat actors used a Safari zero-day...

Largest Attack On health Services firm UHS by Ryuk Ransomware

Attacks The Cyber Post - September 29, 2020 0

The Ryuk ransomware is suspected to be the culprit. A ransomware attack has shut down Universal Health Services, a Fortune-500 owner of a nationwide network...

Learning & Cyber Education

Learning

Kaseya VSA Zero Day Exploit Explained

The Cyber Post - August 3, 2021 0

This article explains the pre-auth remote code execution exploit against Kaseya VSA Server that was used in the mass Revil ransomware attack on July 2nd,...

Breaches & Data Leaks

Breaches

The Biggest Data Breaches In The First Half of 2020

The Cyber Post - September 30, 2020 0

In this blog, we are going to talk about the big data breach that occurred in the first half of 2020. Since the COVID-19 pandemic...

Cybercrime

Attacks

Tracking One Year of Malicious Tor Exit Relay Activities (Part II)

Arrests

Cop-Biting Drug Dealer Awaits Verdict in Germany

Ransomware

Threat profile: Egregor ransomware is making a name for itself

Follow Us and Subscribe to Our Social Media

Cryptocurrency Prices

Name	Price
Bitcoin (BTC)	$56,936.00
Ethereum (ETH)	$4,319.51
XRP (XRP)	$0.97
Litecoin (LTC)	$199.11
Chainlink (LINK)	$24.79
Bitcoin Cash (BCH)	$567.74
Stellar (XLM)	$0.326721
Tezos (XTZ)	$5.05
Monero (XMR)	$235.06
EOS (EOS)	$3.94

Trixbox 2.8.0.4 Remote Code Execution

The Cyber Post - May 30, 2021 0

Authored by Ron Jost Trixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to...

URVE Software Build 24.03.2020 Authentication Bypass / Remote Code Execution

The Cyber Post - December 30, 2020 0

Authored by Erik Steltzner | Site sec-consult.com URVE Software build version 24.03.2020 suffers from an authentication bypass that allows for remote code execution. advisories | CVE-2020-29552 Change...

Ransomware: Even when the hackers are in your network, it might not be too...

The Cyber Post - October 11, 2021 0

Security & Hacking Tools

Adalanche: Active Directory ACL Visualizer and Explorer

The Cyber Post - August 12, 2021 0

I Can Haz Domain Admin? Active Directory security is notoriously difficult. Small organizations generally have no idea what they're doing, and way too many people...

Domhttpx – A Google Search Engine Dorker With HTTP Toolkit Built With Python, Can...

The Cyber Post - August 2, 2021 0

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. Usage Flags This...

Sniffle – A Sniffer For Bluetooth 5 And 4.X LE

The Cyber Post - August 2, 2021 0

Sniffle is a sniffer for Bluetooth 5 and 4.x (LE) using TI CC1352/CC26x2 hardware. Sniffle has a number of useful features, including: Support for BT5/4.2 extended...

Cerbrutus – Network Brute Force Tool, Written In Python

The Cyber Post - August 2, 2021 0

Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB,...

tsharkVM – Tshark + ELK Analytics Virtual Machine

The Cyber Post - August 2, 2021 0

This project builds virtual machine which can be used for analytics of tshark -T ek (ndjson) output. The virtual appliance is built using vagrant, which builds...

Daily Exploits & CVE Vulnerabilites

CMSimple 5.4 Local File Inclusion / Remote Code Execution

The Cyber Post - November 28, 2021 0

Authored by S1lv3r CMSimple version 5.4 local file inclusion to remote code execution exploit. Change Mirror Download # Exploit Title: CMSimple 5.4 - Local file inclusion (LFI)...

HTTPDebuggerPro 9.11 Unquoted Service Path

The Cyber Post - November 28, 2021 0

Authored by Aryan Chehreghani HTTPDebuggerPro version 9.11 suffers from an unquoted service path vulnerability. Change Mirror Download # Exploit Title: HTTPDebuggerPro 9.11 - Unquoted Service Path# Exploit...

Apple ColorSync CMMNDimLinear::Interpolate Uninitialized Memory

The Cyber Post - November 28, 2021 0

Authored by Google Security Research, mjurczyk Apple ColorSync suffers from a use of uninitialized memory in CMMNDimLinear::Interpolate. advisories | CVE-2021-30917

Offensive & Defensive Security Tools

Defensive Security

Retoolkit – Reverse Engineer’s Toolkit

The Cyber Post - August 2, 2021

Offensive Security

Macro Pack- Macro & VBS Obfuscation Automation

The Cyber Post - October 20, 2020

Offensive Security

Domhttpx – A Google Search Engine Dorker With HTTP Toolkit Built With Python, Can Make It Easier For You To Find Many URLs/IPs At...

The Cyber Post - August 2, 2021

The Cyber Post Videos

What is Pegasus Spyware And How Does It Use Zero-Click Vulnerability ?