Are you looking at a non GDPR complaint ASN for the first time
19.10.2025 05:20
👍 0
🔁 0
💬 1
📌 0
Are you looking at a non GDPR complaint ASN for the first time
Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks #cybersecurity #infosec #privacy #news thehackernews.com/20...
#LockBit ransomware secretly building next-gen encryptor before takedown
#PotatoSecurity #Ransomware
www.bleepingcomputer.com/news/securit...
Slowly, steadily!
A Threat Actor operating under the name "Poopingman" has compromised "JoinTheRealWorld" also known as "Hustler's University". It is a website owned by Andrew Tate.
Well that sure is a collection of words isn’t it
🚨 After the FBI shut down the KV-botnet network, the malware operators attempted to bounce back by restructuring their operations and engaging with thousands of IP addresses.
themashernews.com/2024/02/afte...
#potatosecurity #malware #informationsecurity
Heads-up to anyone running a Wordpress site. If you get a very convincing looking email from “The Wordpress Security Team about a vulnerability and the message: “We urge you to install the CVE-2024-46188 Patch without any delay”
DO NOT INSTALL!
It’s a scam. The download is malware. DO NOT INSTALL.
"we believe this attack was performed by a nation state with the goal of obtaining persistent and widespread access to Cloudflare global network"
#Okta #cloudflare #Atlassian #Confluence #jira #Bitbucket #software #breach #security #cybersecurity #hacking
www.bleepingcomputer.com/news/securit...
Proof of concept code for thread pool based process injection in Windows.
A php-based webshell. The code has been obfuscated to bypass static malware scans.
Useful websites collecting Linux kernel syscall tables for various architectures and kernel versions
arm64.syscall.sh
syscalls.mebeim.net
#Linux #infosec
Unsurprisingly lots of Fortra GoAnywhere MFT CVE-2024-0204 related exploit attempts (based on public PoC exploit) happening. Over 120 IPs seen so far ... However, we think unlikely these will be successful on larger scale as not many admin portals exposed (only ~50, most patched)
Russian advanced persistent threat (APT) #ColdRiver has expanded its phishing campaign against Western officials and allies of #Ukraine via deployment of a new custom backdoor, #Spica, while Google's Threat Analysis Group pushes back against #hackers. #cybersecurity #malware #Russia bit.ly/4b9WxI3
Wyden Releases Documents Confirming the NSA Buys Americans' Internet Browsing Records
TweetFeed
List of IOCs shared today by the #infosec community at Twitter:
- domains
- URLs
- IPs
- SHA256/MD5 hashes
tweetfeed.live
Creator twitter.com/0xDanielLopez
OpenAl be like, "Ight imma head out".
Would be interesting to see how that trains Linkedin's AI algorithm 🤣
On the other hand, I have also seen people who intentionally mess with the algorithm by adding the wildest contributions.
For instance, a question about how SOC teams can manage certain alerts was answered by someone with "Delete the internet. That's the cause of all our problems. "
Apart from the collaborative article thingy, yes.
It's fun watching people pour in decades of experience in a collaborative article, which linkedin will subsequently use to train its own AI 😆
Ngl, silverblue is nice
You gotta tune the algo. Every time I see "inspiration porn", my reflex is to click on "Not Interested".
Took a few weeks, but linkedin gets me now.
Yes! Even though the concept has been around for ages, we haven't seen a mass adoption among corps.
The attack is ongoing for unpatched servers, with the most used commands being "whoami" and "cat /etc/shadow".
We are detecting activity for CVE-2023-22527, which relates to a critical Atlassian Confluence Template Injection RCE vulnerability. So far, commands are focused on `id` `whoami` and `cat /etc/shadow` - Patch before it's too late!
viz.greynoise.io/tag...
We are seeing Atlassian Confluence CVE-2023-22527 pre-auth template injection RCE attempts since 2024-01-19. Over 600 IPs seen attacking so far (testing callback attempts and 'whoami' execution).
Vulnerability affects out of date versions of Confluence:
confluence.atlassian.com/security/cve...
Data Science and Cybersecurity are hot topics that pay well.
Astounding(Blackforums admin) is working on developing a new C++ ransomware known as "TerrorLocker".
