⚠️Uno de los dominios de BreaxhForums fue tomado por los amigos del FBI :

https://breachforums.st

⚠️Se cree que quien está (o estaba secuestrado) este video es "kidnapped", administrador de Doxbin . com, en el cual muestran acceso al panel de administración así cómo una fuerte cantidad de dinero que poseían.

🔊Síguenos por Twitter !!

https://x.com/tpx_security 🙏

Con la novedad que ya es gratis … pero creo que siempre ha sido gratis no ? 👀

https://blogs.vmware.com/teamfusion/2024/05/fusion-pro-now-available-free-for-personal-use.html

📣Descubren un keylogger para robar contraseñas en servidores Microsoft Exchange en más de 30 empresas, incluidos bancos

https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/positive-technologies-detects-a-series-of-attacks-via-microsoft-exchange-server/

⚠️CVE-2024-29849 (CVSS 9.8): Veeam’s Backup Nightmare, Full System Access Exposed


CVE-2024-29849 (CVSS 9.8): The most severe of the vulnerabilities, this flaw allows unauthenticated attackers to bypass authentication measures and log in to the Enterprise Manager web interface as any user, granting them full control over the system.

⚠️CVE-2024-29850 (CVSS 8.8): This vulnerability enables a sophisticated attack known as NTLM relay, where attackers can capture and reuse authentication credentials, effectively hijacking user accounts.
⚠️CVE-2024-29851 (CVSS 7.2): In certain configurations, this flaw permits high-privileged users to steal the NTLM hash (a type of password representation) of the Enterprise Manager service account, potentially leading to further compromise of the system.
⚠️CVE-2024-29852 (CVSS 2.7): This vulnerability allows high-privileged users to gain unauthorized access to backup session logs, potentially exposing sensitive information about backup configurations and data.

🚨CVE-2024-21683(CVSS 8.3):RCE (Remote Code Execution) in Confluence Data Center and Server

⚠️It allows an authenticated attacker to execute arbitrary code which has a high impact on confidentiality, integrity, and availability, and requires no user interaction.