#tinyshell

[zerosecurity]

China-Linked APT Group Velvet Ant Exploits Cisco Zero-Day (CVE-2024-20399) Vulnerability

Cybersecurity researchers at Sygnia have discovered that the China-linked Advanced Persistent Threat (APT) group known as Velvet Ant has successfully exploited a recently disclosed zero-day vulnerability in Cisco switches to compromise network appliances. The Zero-Day Vulnerability: CVE-2024-20399 In July 2024, Cisco addressed a critical security flaw, identified as CVE-2024-20399, in its NX-OS software. This vulnerability, with a CVSS score of 6.0, allowed authenticated attackers to execute arbitrary commands as root on the underlying operating system of affected devices. The vulnerability stems from insufficient validation of arguments passed to specific configuration CLI commands. Exploiting this flaw requires administrator credentials, highlighting the importance of robust credential management practices. Velvet Ant's Sophisticated Attack Strategy Sygnia researchers observed Velvet Ant exploiting CVE-2024-20399 as a zero-day vulnerability in April 2024. The APT group leveraged valid administrator credentials to escape the NX-OS command line interface (CLI) and execute arbitrary commands on the underlying Linux operating system. Following the initial exploit, Velvet Ant deployed a custom malware dubbed "VELVETSHELL" by Sygnia. This malware operates on the underlying OS and remains undetected by typical security tools, demonstrating the group's advanced capabilities. VELVETSHELL: A Hybrid Malware Threat Sygnia managed to reconstruct the VELVETSHELL malware from device memory, despite the threat actor's attempts to delete it. The malware is a sophisticated hybrid of two open-source tools: TinyShell and 3proxy. VELVETSHELL's capabilities include: - Executing arbitrary commands - Downloading and uploading files - Establishing network traffic tunnels These functionalities allow Velvet Ant to maintain persistent access and control over compromised systems, facilitating data exfiltration and ongoing espionage activities. Impacted Cisco Devices The vulnerability affects several Cisco device families, including: - MDS 9000 Series Multilayer Switches - Nexus 3000 Series Switches - Nexus 5500 Platform Switches - Nexus 5600 Platform Switches - Nexus 6000 Series Switches - Nexus 7000 Series Switches - Nexus 9000 Series Switches in standalone NX-OS mode Mitigation and Response Cisco recommends that customers monitor the use of credentials for administrative users, particularly network-admin and vdc-admin accounts. The company has also provided the Cisco Software Checker to help customers determine if their devices are vulnerable to this flaw. In response to the severity of the threat, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-20399 to its Known Exploited Vulnerabilities (KEV) catalog. Evolving Tactics of APT Velvet Ant Sygnia's research reveals a clear evolution in Velvet Ant's tactics over time. The group has progressed from operating on ordinary endpoints to targeting legacy servers, and now focusing on network appliances using zero-day exploits. This shift towards compromising network appliances presents unique challenges for defenders. These devices typically prevent users from accessing the underlying operating system, making it extremely difficult to scan for indicators of compromise using traditional methods. The sophisticated nature of Velvet Ant's operations underscores the ongoing threat posed by state-sponsored APT groups. Their ability to leverage zero-day vulnerabilities and develop custom malware tailored for network appliances demonstrates a high level of resources and expertise. Read the full article

[quintessentialarts]

Beach Finds Lockets It's only taken me about four years to start listing these and my forest finds in my Etsy shop 😶😅 This is a stainless steel tear-shaped locket with magnetic closure. Inside are tiny treasures my mother and I collected on the Arnes Beach in Kingston, Wa. Itty bitty shells, little tiny pebbles smoothed by the surf. Carry a little bit of the ocean with you wherever you may go~

https://www.etsy.com/listing/670538417/beach-finds-teardrop-glass-locket

[edreamworld]

#tinyshell #tinyshells #shellcollection #wylliesbeach #wylliesbeachkauai #aninibeach #aninibeachkauai #northshorekauai #springbreak2022 #lihue #lihuehawaii #hawaiianairlines #hawaii #hawaiiisland #gardenisland #dreamamericausa #dreamamerica #edreamamerica #da #thegardenisland #aloha #princeville #princevillekauai (at Wyllie's Beach) https://www.instagram.com/p/Cc3gQM2vxU1/?igshid=NGJjMDIxMWI=

[ballandchainjewelry]

Finally added this guy to my store today. #dendriticagate #seashelljewelry #beachcomber #treeagate #seaweedagate #oceaninspiredjewelry #tinyshells #katrinaballingstudio https://www.instagram.com/p/B-VHhNahuJU/?igshid=csdu86izg98z

[jerilynnportraits]

Left in my pocket by a tiny mermaid🧜🏼‍♀️ #tinymermaid #tinyshell #love #empathchick (at Coral Springs, Florida) https://www.instagram.com/p/BnAsIKHHjh9/?utm_source=ig_tumblr_share&igshid=d1q9mvroc6wb

[thetravelingtotoros]

Oh bother...we looked for pearl couscous everywhere but couldn’t find it! I guess these will have to do #tinyshells #pasta #totoro #substitute https://www.instagram.com/p/B195N9NgLg5/?igshid=1bia8knrf7te1

[nail-salon-anela]

良い組み合わせ #mac #TRAX #ADDICTION #tinyshell #makeup #eyemakeup #サイコー #さり気なくキラキラする

[damedarcy]

https://www.patreon.com/damedarcy #mermaid #moonwater #necklaces with #spellbottles containing #seawater charged by the #fullmoon #sand from our local beach here in #savannah , #tinyshells and some have #starfish but all have #magic! And bonus #mermagic 🌊💦⭐️ Here are some pics of the #sketchtember #colorillustration #spell #postcard this months #painting and #minizine. Welcome to the patron family new patrons ⭐️Mette FernSpirit And ⭐️Molly Roberts! ⭐️Welcome back to the patron family ⭐️Donna Kirby! And ⭐️Niki Sugar! Thank you for upping your support ⭐️Tasha Waddell And welcome new patrons ⭐️Gimmi More ⭐️Judy Silver ⭐️Vanessa Hastings and ⭐️Garfield Hearts Lasagna Thank you for joining the patron family! 🙏😍 Your support means the world !! 🌏 The patrons are contributing to being able to get a lawyer to put a stop to everyone on the internet stealing all my downloadable books and music. I currently have to get 2 jobs on top of my jobs running etsy and Pateron plus commissions so I truly love you and the freedom you are helping me to attain. I see some of you are from Canada, Europe and Japan … Thanks for the long distance love! You will all receive postcards, but we cant afford larger envelopes due to overseas shipping expense. But! you can message me through pateron for palm-reading / tarot and crystal-ball divination. And all patrons will be entered in the monthly raffle to win this months september painting! (Seen above) Tune into my @damedarcy insta channel on Aug 30th at 12:00 noon est to see who wins and get your tarot read live! ❤️@damedarcy https://www.instagram.com/p/ChmwAmFuTpL/?igshid=NGJjMDIxMWI=

[lunarseadesigns]

Fresh Salty jewels dropping next week Mermaids!!!⠀ .⠀ .⠀ .⠀ .⠀ .⠀ .⠀ .⠀ .⠀ . #lunarseadesigns #surfjewels #saltyjewels #oceanlove #oceanluxe #mermaidjewels #mermaidjewelry #saltwaterjewels #handmadesaltyjewels #mermaidlife #scallopshellnecklace #shellnecklace #tinyshells #beachlife #ocean #oceanjewels #saltlife #islandlife #paradise #tropical #saltwater #sterlingsilver #reflections #instabeach #oceanjewellery #lovelife https://www.instagram.com/p/BpwPb0RgUUS/?utm_source=ig_tumblr_share&igshid=g12vgipz5vj0

[jerseygirlrachael]

[thecreakingdoor]

Receiving small parcels in the mail is up there for me with “...a few of my favourite things”. Today I had the joy of receiving a lovely gift from an IG friend which really raised a smile. While I was sick a few months back another friend thoughtfully sent me a crafted rainbow window charm in the post and it really helped my feel better. There definitely be power in the gesture of sending a gift in the mail. Here’s a new listing from my shop which works well with my newly designed gift boxes. It’s a tiny real limpet shell ring in grey featuring miniature shells and seaweed encased in crystal clear resin. Limpet shells make such great natural frames for pendants. . . . #smallparcelsbiglove #goodthingscomeinsmallpackages #limpetringnecklace #limpetshell #beachcombing #mermaidtreasure #mermaidgift #sendjoy #cheerupgift #tinyshells #beautifulseaweed (at Harrowby, Lincolnshire) https://www.instagram.com/p/CE689lNh3Tw/?igshid=7aey6q07zsiu

[gotinybefree]

Gluing and screwing the #roofsheathing down on the #TaHOW #tinyhouseonwheels and then taping all the seams to get the house #driedin and #watertight (once windows and doors go in anyway). Now it's a #tinyhouseshell. #gotinybefree #diytinyhouse #tinyhousediy #tinyhousebuild #barnraiser #tinyshell #zipwall #goosenecktrailer #goosenecktinyhouse #tinyhousenation #huntsvillealabama #thow #tinyhousemovement (at Huntsville, Alabama)

[ballandchainjewelry]

Coming soon to a website near you... #katrinaballingstudio #seashellcollage #tidepooltreasures #drusyquartz #sapphirerough #dendriticagate #oceaninspired #fossilshell #slippershell #clamshell #tinyshells #sundaystudiotime https://www.instagram.com/p/B8E73cWBI7f/?igshid=1iq4hwf4b5ui4

[yieldingtides]

In the final stretch now! Here's the postcard I've designed for our Illustration BFA Show featuring the works of @tali_illustrations, @tinyshel, and me! I'm keeping most of my work offline till the reception. Hope to see you there! (at NOMAD Gallery by Richard App) https://www.instagram.com/p/B43oAgGh0PR/?igshid=fjvvivp8pv2n

[kdlacette]

for us there is only one wish to be adventurous pioneers and find ourselves in the end Tyler Knott Gregson . . . #tinyshells #favoritepoems and #water (at Rowena, Oregon)

[wan-hsuan]

想當初#ADDICTION 轟轟烈烈來台設櫃時 我多麽冷靜的只買了一顆美翻了的Shangri-La後就此心如止水😤 結果昨天只是陪逛就瞬間凑成一盤了XDD ADDICTION的眼影真的是❤ 有日系彩妝一貫的粉質細👍 又有歐美彩妝的顯色度👍 不虧是NARS前總監的品牌~ 一直不懂再大熱什麼的腮紅液只是為新鮮而買 結果今天自己上妝被自己美到😗 #打底萬能又不會白一塊的ToeShoes #女人必須有的玫瑰金TinyShell #分明是在瞹昧勾引我的ShanghaiBreakfast #人生就是在等這顆藕紫色請叫我GypsyQueen #終於見識到什麼叫作眼皮上的波光粼粼Mariage #一見鍾情再見還是最愛這就是我的顏色Shangri-La #2017夏季新色超美珊瑚杏桃11腮紅液 昨天也順便看好周年慶要買的NARS限定組合 ya周年慶熱身完畢!✌