{"uuid": "6d719bdd-dd82-448c-adbc-83cc3918cc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38465", "type": "seen", "source": "https://t.me/cissp/6217", "content": "Red Team Tactics\n1. Pivoting Over TTLS-PAP WPA Enterprise Networks\nhttps://tbhaxor.com/pivoting-over-ttls-pap-wifi-network\n\n2. Active Directory data collector for BloodHound\nhttps://github.com/OPENCYBER-FR/RustHound\n\nMicrosoft's Patch Tuesday updates this month fix 85 vulnerabilities, including an actively exploited Windows Zero Day vulnerability, but no \ud83d\ude33patches yet for in-the-wild exploited Exchange Server vulnerabilities.\nRead: https://thehackernews.com/2022/10/microsoft-patch-tuesday-fixes-new.html\n\nOT:\nA critical vulnerability (CVE-2022-38465 / CVSS \ud83d\ude059.3) in Siemens Simatic programmable logic controllers (PLCs) can enable attackers to access hard-coded private cryptographic keys and bypass access controls.\nRead: https://thehackernews.com/2022/10/critical-bug-in-siemens-simatic-plcs.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-02T01:04:07.933233Z"}