Produced by Grimey L
Featuring Riddlore of CVE/Project Blowed

UNDERGROUND ft. RIDDLORE (PROD BY GRIMEY L)

🎙️Au programme aujourd’hui :

🔍 Vulnérabilité critique CVE-2019-1821
Cette vulnérabilité affecte Cisco Prime Infrastructure et Cisco Evolved Programmable Network, avec un score CVSSv3 de 9.8, permettant une exécution de code à distance. Bien que publiée il y a plus de cinq ans, elle continue d’être exploitée par des ransomwares et outils DDoS.
Source : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-rce

🛠️ Détections de RedLine via Splunk
Deux événements récents ont mis en évidence l’activité du malware RedLine, impliquant des attaques par brute force (MITRE ATT&CK T1110) et l’exécution de commandes Windows Management Instrumentation (T1047).
Source 1 : https://research.splunk.com/stories/redline_stealer/
Source 2 : https://www.infosecinstitute.com/resources/malware-analysis/redline-stealer-malware-full-analysis/?utm_source=chatgpt.com

🇷🇺 Le groupe hacktiviste XakNet Team
XakNet Team s’illustre par des activités de hacktivisme, des attaques DDoS, de l’exfiltration de données et des collaborations avec des entités russes comme le GRU. Ils utilisent Telegram pour coordonner leurs opérations et diffuser leurs campagnes de désinformation.
Sources :
https://thehackernews.com/2023/10/pro-russian-hackers-exploiting-recent.html
https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-16-5/
https://www.mandiant.com/resources/blog/gru-disruptive-playbook

🛡️ Focus sur APT29, alias Cozy Bear
Ce groupe de cyberespionnage, lié aux services de renseignement russes, cible des institutions gouvernementales et organisations politiques via des campagnes sophistiquées. Leurs tactiques incluent le spear-phishing, des malwares personnalisés, et des attaques sur la chaîne d’approvisionnement.

🌐 Analyse de BreachForums
Plateforme anglophone du dark web, BreachForums facilite des échanges sur les attaques DDoS, la compromission-fuite de données, et le commerce de données volées.
Sources :

https://www.bleepingcomputer.com/news/security/fbi-seize-breachforums-hacking-forum-used-to-leak-stolen-data/
https://krebsonsecurity.com/2024/09/the-dark-nexus-between-harm-groups-and-the-com/
https://therecord.media/breachforums-seized-by-fbi-months-after-arrest-of-alleged-administrator-dark-web-marketplace
🛠️ Vulnérabilité critique CVE-2024-12828 dans Webmin
Cette faille permet une exécution de code à distance avec des privilèges root, due à un défaut de validation des chaînes utilisateur dans les requêtes CGI. Le correctif est disponible sur GitHub.
Sources :
https://www.zerodayinitiative.com/advisories/ZDI-24-1725/
https://vuldb.com/?id.289119

📞 Questions ou suggestions ?
Laissez-moi un message sur RadioCSIRT : 07 68 72 20 09

🎧 Écoutez-nous et abonnez-vous sur vos plateformes préférées :
Apple Podcasts, Deezer, Spotify, SoundCloud, YouTube, Amazon Music

🌐 Site officiel RadioCSIRT :
https://www.radiocsirt.org



RadioCSIRT #133 – Vos actualités quotidiennes en cybersécurité du Dimanche 22 décembre 2024

🎙️ Au programme aujourd'hui :
🔓 Trio de vulnérabilités SQL Injection dans les pilotes Amazon Redshift
Trois failles critiques d’injection SQL (CVE-2024-12744, CVE-2024-12745, CVE-2024-12746) ont été découvertes dans les pilotes Amazon Redshift. Ces vulnérabilités permettent une escalade de privilèges et une compromission des données sensibles. 
Source : https://www.cysecurity.news/2024/12/trio-of-sql-injection-vulnerabilities.html

🌐 Neuvième brèche télécom liée aux hackers chinois selon la Maison Blanche
La Maison Blanche a identifié une neuvième entreprise télécom américaine touchée par la campagne de cyberespionnage chinoise menée par le groupe Salt Typhoon. 
Source : https://www.bleepingcomputer.com/news/security/white-house-links-ninth-telecom-breach-to-chinese-hackers/

🚨 Exploitation active d’une faille DoS dans les pare-feu Palo Alto Networks
Des attaquants exploitent la vulnérabilité CVE-2024-3393 pour redémarrer les pare-feu Palo Alto Networks, provoquant des interruptions critiques. Un correctif est disponible pour les versions supportées, et des solutions de contournement sont recommandées pour limiter les risques.
Source : https://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/

🛠️ Multiples vulnérabilités dans le greffon Security QRadar Log Management AQL de IBM
L’ANSSI met en garde contre plusieurs vulnérabilités critiques dans le greffon Security QRadar Log Management AQL de IBM. Ces failles peuvent permettre à un attaquant distant d'exécuter des commandes arbitraires ou d'exfiltrer des données sensibles. IBM recommande l’installation immédiate des correctifs disponibles pour sécuriser vos systèmes.
Source : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1110/

📱 Hameçonnage ciblant les informations bancaires
Les tentatives de phishing augmentent pendant les fêtes, avec des campagnes ciblant les données bancaires des utilisateurs. Une campagne récente usurpe l’identité de la Banque de Montréal (BMO) via un faux site web et des SMS frauduleux.
Source : https://isc.sans.edu/diary/rss/31548

📞 Questions ou suggestions ?
Laissez-moi un message sur RadioCSIRT : 07 68 72 20 09
🎧 Écoutez-nous et abonnez-vous sur vos plateformes préférées :
Apple Podcasts, Deezer, Spotify, SoundCloud, YouTube, Amazon Music
🌐 Site officiel RadioCSIRT :
https://www.radiocsirt.org


RadioCSIRT #139 - Vos actualités quotidiennes en cybersécurité Samedi 28 décembre 2024

new Banga more music coming soon like,share,follow 

Tre'Banga - Get It In (@slapboyfranco8beats)

HEAL Security Dispatch Daily Digest is a cybersecurity-focused podcast hosted by Richard Simmons and produced by HEAL Security, delivering daily insights into the dynamic intersection of cybersecurity and healthcare. Broadcasting from London, the podcast provides timely and expert-driven analysis of major cyber threats and developments impacting global security landscapes. With coverage of high-profile breaches like the Fortinet symlink backdoor incident, state-sponsored cyberattacks such as China’s “Brickstorm” malware campaign in Europe, and the risks posed by AI companies like DeepSeek, the show offers a comprehensive look at pressing digital security issues. The podcast also highlights critical infrastructure threats, including concerns over budget cuts to the CVE program and sophisticated campaigns targeting nations and industry sectors. Through expert commentary and real-time updates, HEAL Security Dispatch Daily Digest equips listeners with the knowledge needed to stay informed and prepared in an increasingly complex cyber environment. 
https://healsecurity.com/

Fortinet Breach, DeepSeek Threats, and Microsoft Malware Alerts Dominate Cybersecurity Headlines

In this special in-studio episode, we’re joined by Adham Elmosalamy — a computer science and engineering student at the American University of Sharjah who recently made global cybersecurity headlines. Adham uncovered a major vulnerability in PyCel, an open-source Python library used to process Excel files — a discovery so significant it was officially recognized in the global CVE database maintained by MITRE in the U.S.

Most people on that list are seasoned professionals or academic researchers. Adham? He’s still a student.
We dive into how he found the flaw, why it matters, and what it means for the future of cybersecurity.


#Cybersecurity #TechPodcast #HackingEthical #PythonDev #AUS #AdhamElmosalamy #WhiteHatHacker #CVE #MITRE #OpenSourceSecurity #StudentSuccess #TechNews #EngineeringStudent #DigitalSecurity #PyCel #VulnerabilityResearch #CyberAwareness #Infosec #PodcastInterview #SharjahTech

Adham Elmosalamy on Discovering a Global Cybersecurity Vulnerability

In this episode, Edd Hall discusses the latest cybersecurity developments, including CISA’s malware analysis report on exploited SharePoint vulnerabilities, Microsoft’s urgent warning about CVE-2025-53786 in hybrid Exchange environments, and new additions to the KEV catalog. He also covers critical flaws found in Dell laptops, a clever evasion technique used by Akira ransomware, and recent data breaches affecting Air France and KLM. Plus, a deep dive into the alarming exposure of over 1.2 million healthcare systems online. Stay tuned for expert insights and actionable takeaways to keep your organization secure.

Patch Now or Pay Later: Today’s Critical Cyber Threats

if you about yo money come join on the winning team

TreBanga - Winning Team (Prod by Cuddie C)

In this episode, Mark and Diana discuss the latest wave of cybersecurity developments, from the emergence of HybridPetya ransomware that bypasses Secure Boot to Akira’s exploitation of a SonicWall flaw. They cover the critical Cursor editor vulnerability, CISA’s warning about active attacks on Dassault’s manufacturing software, and new patches from Cisco and Samsung. The conversation also explores Microsoft’s fresh security challenges—including political scrutiny and new Teams protections—alongside a major UK train operator breach, the appearance of a mysterious Chinese AI pentesting tool, and the growing cyber risks facing the pharmaceutical industry.

Ransomware Evolves, Zero-Days Exploited, and Microsoft Under Fire

In this episode, Edd Hall discusses how hackers are exploiting Windows Hyper-V to hide malware, Google’s warning about self-modifying AI threats, and Cisco’s alert on active firewall exploits. He also covers CISA’s new industrial control system advisories, a ransomware attack on Central Jersey Medical Center, and the growing problem of weak passwords. Plus, Edd explores how generative AI is fueling applicant fraud in healthcare and how three major cybercrime groups—Scattered Spider, LAPSUS$, and ShinyHunters—have joined forces under the new alliance Scattered LAPSUS Hunters.

Hyper-V Exploits, AI-Powered Malware, and Rising Cybercrime Alliances

Noah23 is a Canadian/ American Artist, Occultist and MC. He released his debut album in 2001 and since then has toured the world performing at Scribble Jam, SXSW, Sonar in Barcelona and Low End Theory in Los Angeles. He battled at the very first King of the Dot event and has been featured on Mishka Bloglin, Exclaim, URB Magazine, Worldstar Hip Hop and more. He is known for his diverse songwriting, melodies, chopping as well as occult and psychedelic themes. Noah has worked with and performed alongside many Hip Hop legends including Myka 9, $uicideBoy$, Dark Time Sunshine, 2Mex, Shady Blaze, Goth Boi Clique, Pictureplane, Eligh, Sortahuman, EarthGang, 2Mex, Kool Keith, Ceschi, Shad K, AJ Suede, Lil B, Awol One, Main Attrakionz & many more.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

new songs coming soon mixtape coming soon
For any: bookings/photoshoots/hooks
Email : trebanga_cve@yahoo.com
follow the group page on instagram @clear_vision_empire
Instagram/Twitter:@trebanga_
snapchat:bigboss_trebang

Robots, Artificial Intelligence, and the Internet are the talk of the hour with Omnia Al Saleh & Hanny Balkis on ‘Future Talk.’ Catch the latest information on gadgets, science, and computer gaming devices weekdays from 2:00 PM - 3:00 PM. Updating listeners with the latest tech news; the show will also help you make the best use of technology to improve your lifestyle.

New tracks tagged #CVE