{"uuid": "cbe1e66b-3068-41b6-9f74-23514462e656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30660", "type": "seen", "source": "https://t.me/cissp/3328", "content": "Cloud Security\n1. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://github.com/champtar/blog/blob/main/Metadata_MITM_root_EKS_GKE/README.md\n2. Detecting Obfuscated Attacker IPs in AWS\nhttps://www.hunters.ai/blog/hunters-research-detecting-obfuscated-attacker-ip-in-aws\n\nMalware analysis\n1. Malicious PowerShell Hosted on script-google-com\nhttps://isc.sans.edu/forums/diary/Malicious+PowerShell+Hosted+on+scriptgooglecom/27468\n2. Threat Actors Use Mockups of Popular Apps to Spread Teabot and Flubot Malware on Android\nhttps://labs.bitdefender.com/2021/06/threat-actors-use-mockups-of-popular-apps-to-spread-teabot-and-flubot-malware-on-android\n\nRed Team Tactics\n1. Step-by-step how to deanonymize emails on LinkedIn\nhttps://www.gosecure.net/blog/2021/05/27/step-by-step-how-to-deanonymize-emails-on-linkedin\n2. Python AV Evasion Tools\nhttps://github.com/G1ft3dC0d3/MsfMania\n\nexploit\n1. CVE-2021-30660:\nXNU Kernel Memory Disclosure\nhttps://alexplaskett.github.io/CVE-2021-30660\n\n2. CVE-2021-31440:\nAn Incorrect Bounds Calculation in the Linux Kernel EBPF Verifier (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/5/26/cve-2021-31440-an-incorrect-bounds-calculation-in-the-linux-kernel-ebpf-verifier", "creation_timestamp": "2026-09-02T01:04:37.424109Z"}