Are Fake COVID Testing Sites Harvesting Data?

Over the past few weeks, Ive seen a bunch of writing about what seems to be fake COVID-19 testing sites. They take your name and info, and do a nose swab, but you never get test results. Speculation centered around data harvesting, but that didnt make sense because it was far too labor intensive...

CVE-2022-22170

creationtimestamp| type| source ---|---|--- 2022-01-19 07:31:34+00:00| seen| https://t.me/cibsecurity/35770...

CVE-2022-22154

creationtimestamp| type| source ---|---|--- 2022-01-19 07:31:33+00:00| seen| https://t.me/cibsecurity/35768...

CVE-2022-22164

creationtimestamp| type| source ---|---|--- 2022-01-19 07:31:28+00:00| seen| https://t.me/cibsecurity/35764...

CVE-2022-22178

creationtimestamp| type| source ---|---|--- 2022-01-19 07:31:27+00:00| seen| https://t.me/cibsecurity/35763...

realpower.de Cross Site Scripting vulnerability OBB-2339526

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-21692

creationtimestamp| type| source ---|---|--- 2022-01-19 02:25:09+00:00| seen| https://t.me/cibsecurity/35759...

CVE-2022-21695

creationtimestamp| type| source ---|---|--- 2022-01-19 00:25:06+00:00| seen| https://t.me/cibsecurity/35755...

CVE-2022-21673

creationtimestamp| type| source ---|---|--- 2022-01-19 00:25:01+00:00| seen| https://t.me/cibsecurity/35752...

CVE-2021-21661

creationtimestamp| type| source ---|---|--- 2022-01-18 20:10:50+00:00| published-proof-of-concept| Telegram/e6LCK5GJSK0xKVwHawAhTv7tZ7kQmDa1Okv4UYIPNzkjPxmz 2022-01-19 15:33:14+00:00| published-proof-of-concept| https://t.me/hackertrick/641 2022-12-05 04:44:42+00:00| published-proof-of-concept|...

CVE-2021-46195

creationtimestamp| type| source ---|---|--- 2022-01-14 22:23:59+00:00| seen| https://t.me/cibsecurity/35615 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2021-23566

creationtimestamp| type| source ---|---|--- 2022-01-14 22:19:43+00:00| seen| https://t.me/cibsecurity/35586...

CVE-2021-30970

creationtimestamp| type| source ---|---|--- 2022-01-11 08:13:09+00:00| seen| https://t.me/thehackernews/1780 2022-01-11 14:14:01+00:00| seen| https://t.me/NeKaspersky/1664 2022-01-11 15:43:55+00:00| seen| https://t.me/xakepru/11794 2022-01-12 10:34:18+00:00| seen| https://t.me/alexmakus/4497...

North Korean Hackers Start New Year with Attacks on Russian Foreign Ministry

A North Korean cyberespionage group named Konni has been linked to a series of targeted attacks aimed at the Russian Federation's Ministry of Foreign Affairs MID with New Year lures to compromise Windows systems with malware. "This activity cluster demonstrates the patient and persistent nature o...

NIST Cybersecurity Framework: A Quick Guide for SaaS Security Compliance

When I want to know the most recently published best practices in cyber security, I visit The National Institute of Standards and Technology NIST. From the latest password requirements NIST 800-63 to IoT security for manufacturers NISTIR 8259, NIST is always the starting point. NIST plays a key...

CVE-2019-8702

creationtimestamp| type| source ---|---|--- 2021-12-23 22:19:33+00:00| seen| https://t.me/cibsecurity/34581...

CVE-2021-40161

creationtimestamp| type| source ---|---|--- 2021-12-23 22:19:30+00:00| seen| https://t.me/cibsecurity/34579...

alicomm.com Cross Site Scripting vulnerability OBB-2307672

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

val-de-loire-41.com Cross Site Scripting vulnerability OBB-2307320

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blog.my-take.com Cross Site Scripting vulnerability OBB-2307034

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...