{"uuid": "8b19b0bc-9ffe-4e3a-ab27-5ad5cc3bf1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5741", "type": "seen", "source": "https://t.me/cissp/2646", "content": "Malware analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html\n\nBlue Team Techniques\n1. Hunting for Lateral Movement using Event Query Language\ud83d\ude01\nhttps://www.elastic.co/blog/hunting-for-lateral-movement-using-event-query-language\n2. Detection capabilities for recent F5 BIG-IP/BIG-IQ iControl REST API vulnerabilities CVE-2021-22986\ud83e\udd1e\ud83c\udffd\nhttps://research.nccgroup.com/2021/03/18/rift-detection-capabilities-for-recent-f5-big-ip-big-iq-icontrol-rest-api-vulnerabilities-cve-2021-22986\n\nCloud Security\nApproaches for authenticating external applications in a machine-to-machine scenario. Determining the best approach\nhttps://aws.amazon.com/ru/blogs/security/approaches-for-authenticating-external-applications-in-a-machine-to-machine-scenario\n\nRed Team Tactics\n1. How I hacked Facebook, part 2\nhttps://infosecwriteups.com/how-i-hacked-facebook-part-two-ffab96d57b19\n2. Bypass cloudflare with incorrect url encoding \n\nalert() blocked %2sscript%2ualert()%2s/script%2u -xss popup\n\n3. Bypassing VPN MFA During a Pentest via Duo Inline Self-Enrollment\nhttps://infosecwriteups.com/bypassing-vpn-mfa-during-a-pentest-via-duo-inline-self-enrollment-78be6e985b24", "creation_timestamp": "2026-09-01T17:00:57.776635Z"}