The #MITRE Corporation says that a state-backed hacking group breached its systems in January 2024 by chaining two #Ivanti VPN zero-days.
https://www.bleepingcomputer.com/news/security/mitre-says-state-hackers-breached-its-network-via-ivanti-zero-days/

۱ میلیون ۸۰۰ هزار رکود دیتابیس وزارت بهداشت فقط ۴۰ دلار🤔

مایتر اتک ۱۵ 👇

https://attack.mitre.org/resources/updates/updates-april-2024/index.html

https://medium.com/mitre-attack/attack-v15-26685f300acc

Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms
https://www.cisa.gov/news-events/alerts/2024/04/24/cisco-releases-security-updates-addressing-arcanedoor-vulnerabilities-cisco-firewall-platforms

https://github.com/W01fh4cker/CVE-2023-20198-RCE

vulnerable: https://en.fofa.info/result?qbase64=Ym9keT0iPHNjcmlwdD53aW5kb3cub25sb2FkPWZ1bmN0aW9uKCl7IHVybCA9Jy93ZWJ1aSc7d2luZG93LmxvY2F0aW9uLmhyZWY9dXJsO308L3NjcmlwdD4i

How can attackers bypass UAC?
https://posts.specterops.io/fileless-uac-bypass-using-sdclt-exe-3e9f9ad4e2b3

vx:
BreachForum has been seized again.

The current display page states the forum is now in control of the United States Federal Bureau of Investigation and is being reviewed.

It also displays a photo of the current administrators Telegram profile pictures, but behind bars.

The 471 cti report 2024

کتاب: تیم قرمز حرفه‌ای 📕

فصل پنجم: قوانین تعامل

فهرست مطالب
انواع فعالیت‌ها 81
فیزیکی 82
مهندسی اجتماعی 84
شبکه خارجی 86
شبکه داخلی 87
حرکت در شبکه 88
شبکه بی‌سیم 90
دسته بندی 91
تقویت نیرو 92
مدیریت حادثه 92
ابزارها 93
الزامات مجوز 94
اطلاعات پرسنل 95
خلاصه فصل پنجم 95

Global Threat Report 2024 CROWDSTRIKE

2024 Cyber Threat Report Huntress