Cybersecurity - cybersecurity@sh.itjust.works - https://sh.itjust.works/c/cybersecurity

About

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

  • Be respectful. Everyone should feel welcome here.
  • No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
  • No Ads / Spamming.
  • No pornography.

Community Rules

  • Idk, keep it semi-professional?
  • Nothing illegal. We’re all ethical here.
  • Rules will be added/redefined as necessary.

If you ask someone to hack your “friends” socials you’re just going to get banned so don’t do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

Ancient TP-Link Backdoor Discovered by Attackers (isc.sans.edu)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 17 Nov 09:22
comments (0)
Simple Include Statement Hides Casino Spam (blog.sucuri.net)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 15 Nov 12:59
comments (0)
Inside Intelligence Center: Financially Motivated Chinese Threat Actor SilkSpecter Targeting Black Friday Shoppers (blog.eclecticiq.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 15 Nov 08:12
comments (0)
Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack (unit42.paloaltonetworks.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 15 Nov 08:10
comments (0)
ChatGPT allows access to underlying sandbox OS, “playbook” data (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 14 Nov 18:28
comments (0)
Malware being delivered by mail, warns Swiss cyber agency (therecord.media)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 18:27
comments (2)
Hungary confirms hack of defense procurement agency (therecord.media)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 18:16
comments (0)
Strela Stealer: Today's invoice is tomorrow's phish (securityintelligence.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 15:15
comments (0)
CVE-2024-43451: A New Zero-Day Vulnerability Exploited in the wild (www.clearskysec.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 15:11
comments (0)
Advertisers are pushing ad and pop-up blockers using old tricks (www.malwarebytes.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 15:04
comments (0)
Evaluating Synthetic Command Attacks on Smart Voice Assistants (arxiv.org)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 13:47
comments (1)
Chipmaker Patch Tuesday: Intel Publishes 44 and AMD Publishes 8 New Advisories (www.securityweek.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 14 Nov 11:49
comments (0)
Hive0145 Targets Europe with Advanced Strela Stealer Campaigns (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 14 Nov 11:49
comments (0)
Embargo ransomware claims breach of US pharmacy network (www.theregister.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 14 Nov 11:48
comments (0)
New PXA Stealer targets government and education sectors for sensitive information (blog.talosintelligence.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 11:37
comments (0)
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 14 Nov 11:37
comments (0)
Leaked info of 122 million linked to B2B data aggregator breach (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 14 Nov 11:34
comments (0)
New Zero-Detection Variant of Melofee Backdoor from Winnti Strikes RHEL 7.9 (blog.xlab.qianxin.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 11:33
comments (0)
Crimeware and financial predictions for 2025 (securelist.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 14 Nov 09:39
comments (0)
Joint Statement from FBI and CISA on the People's Republic of China (PRC) Targeting of Commercial Telecommunications Infrastructure (www.cisa.gov)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 23:51
comments (7)
NIST says exploited vulnerability backlog cleared but end-of-year goal for full list unlikely (therecord.media)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 23:39
comments (0)
SecEncoder: Logs are All You Need in Security (arxiv.org)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 21:02
comments (0)
ShrinkLocker (+Decryptor): From Friend to Foe, and Back Again (www.bitdefender.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 20:11
comments (0)
Zoom addressed two high-severity issues in its platform (securityaffairs.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 13 Nov 17:17
comments (0)
New ShrinkLocker ransomware decryptor recovers BitLocker password (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 13 Nov 17:16
comments (0)
Inside the DemandScience by Pure Incubation Data Breach (www.troyhunt.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 12:07
comments (0)
HawkEye Malware: Technical Analysis (any.run)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 11:44
comments (0)
Global Companies Are Unknowingly Paying North Koreans: Here’s How to Catch Them (unit42.paloaltonetworks.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 11:43
comments (0)
Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 13 Nov 11:28
comments (0)
Emmenhtal Loader Uses Scripts to Deliver Lumma and Other Malware (hackread.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 13 Nov 11:26
comments (0)
North Korean hackers create Flutter apps to bypass macOS security (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 13 Nov 11:24
comments (0)
Internet-exposed GNSS receivers pose threat globally in 2024 (securelist.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 11:01
comments (0)
China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload (therecord.media)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 05:40
comments (0)
The Botnet is Back: SSC STRIKE Team Uncovers a Renewed Cyber Threat (securityscorecard.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 05:18
comments (0)
Visionaries Have Democratised Remote Network Access - Citrix Virtual Apps and Desktops (CVE Unknown) (labs.watchtowr.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 13 Nov 05:15
comments (2)
Security Test of Skills
in cybersecurity@sh.itjust.works from Vintage@sh.itjust.works on 13 Nov 02:40
comments (0)
Abusing Ubuntu 24.04 features for root privilege escalation (snyk.io)
in cybersecurity@sh.itjust.works from thomask@lemmy.sdf.org on 13 Nov 02:17
comments (1)
Citrix Zero-Day Bug Allows Unauthenticated RCE (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 19:26
comments (0)
Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 91 flaws (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 19:25
comments (0)
Hamas-affiliated Threat Actor WIRTE Continues its Middle East Operations and Moves to Disruptive Activity (research.checkpoint.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 12 Nov 18:02
comments (1)
Surge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes alliance (therecord.media)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 12 Nov 17:15
comments (0)
New GitLoker-Linked GoIssue Tool Targets GitHub Users for Phishing (hackread.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 14:18
comments (1)
New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 14:10
comments (0)
Palo Alto Networks warns over possible PAN-OS RCE: Says get your blooming interface off the internet (www.thestack.technology)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 12 Nov 12:47
comments (0)
Microsoft Bookings Flaw Enables Account Hijacking and Impersonation (hackread.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 12:28
comments (0)
HIBP notifies 57 million people of Hot Topic data breach (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 12:26
comments (0)
Microsoft Visio Files Used in Sophisticated Phishing Attacks (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 12 Nov 12:24
comments (0)
Exploiting KsecDD through Server Silos (blog.scrt.ch)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 12 Nov 11:57
comments (0)
ModeLeak: Privilege Escalation to LLM Model Exfiltration in Vertex AI (unit42.paloaltonetworks.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 12 Nov 11:30
comments (0)
Dissecting A Multi-Stage PowerShell Campaign Using Chisel (cyble.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 12 Nov 08:45
comments (0)
Halliburton reports $35 million loss after ransomware attack (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 11 Nov 16:49
comments (8)
Tor Network Thwarts IP Spoofing Attack (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 11 Nov 16:44
comments (0)
Release 1.32.4 · dani-garcia/vaultwarden (github.com)
in cybersecurity@sh.itjust.works from Branquinho@lemmy.eco.br on 11 Nov 15:25
comments (1)
Massive MOVEit Vulnerability Breach: Hacker Leaks Employee Data from Amazon, McDonald's, HSBC, HP, and Potentially 1000+ Other Companies (www.infostealers.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 11 Nov 15:08
comments (4)
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT (github.com)
in cybersecurity@sh.itjust.works from jaromil@fed.dyne.org on 11 Nov 12:20
comments (0)
Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out (www.404media.co)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 11 Nov 12:17
comments (19)
Hackers Use Excel Files to Deliver Remcos RAT Variant on Windows (hackread.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 11 Nov 11:54
comments (0)
Kaspersky discovers new Ymir ransomware used together with RustyStealer (securelist.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 11 Nov 10:40
comments (0)
FBI: Spike in Hacked Police Emails, Fake Subpoenas (krebsonsecurity.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 10 Nov 07:53
comments (1)
A New Era of macOS Sandbox Escapes: Diving into an Overlooked Attack Surface and Uncovering 10+ New Vulnerabilities (jhftss.github.io)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 09 Nov 21:04
comments (0)
Hello again, FakeBat: popular loader returns after months-long hiatus (www.malwarebytes.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 09 Nov 21:03
comments (0)
Life on a crooked RedLine: Analyzing the infamous infostealer’s backend (www.welivesecurity.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 09 Nov 18:07
comments (0)
Androxgh0st botnet integrates Mozi payloads to target IoT devices (www.csoonline.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 09 Nov 01:43
comments (0)
D-Link won’t fix critical flaw affecting 60,000 older NAS devices (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 09 Nov 01:42
comments (5)
Unpatched Mazda Connect bugs let hackers install persistent malware (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 09 Nov 01:41
comments (4)
Getting a Nitrokey 3A work with usbguard (support.nitrokey.com)
in cybersecurity@sh.itjust.works from boredsquirrel@slrpnk.net on 09 Nov 00:38
comments (2)
GodFather Malware Now Targets 500+ Banking and Crypto Apps (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 14:30
comments (0)
CISA warns of critical Palo Alto Networks bug exploited in attacks (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 13:51
comments (0)
Texas-based oilfield supplier faces disruptions following ransomware attack (therecord.media)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:40
comments (2)
Interlock Ransomware Targets US Healthcare, IT and Government Sectors (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:40
comments (0)
Evasive ZIP Concatenation: Trojan Targets Windows Users (perception-point.io)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:14
comments (0)
Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:14
comments (4)
VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:13
comments (0)
Cisco Identity Services Engine Flaw Bypass Authorization Mechanisms (cybersecuritynews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:13
comments (0)
North Korean hackers use new macOS malware against crypto firms (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 08 Nov 12:10
comments (0)
An Effective Ensemble Approach for Preventing and Detecting Phishing Attacks in Textual Form (www.mdpi.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 08 Nov 11:57
comments (1)
Threat Campaign Spreads Winos4.0 Through Game Application (www.fortinet.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 08 Nov 10:54
comments (0)
QSC: new modular framework in CloudComputating campaigns (securelist.com)
in cybersecurity@sh.itjust.works from Joker@sh.itjust.works on 08 Nov 10:53
comments (0)
Hackers increasingly use Winos4.0 post-exploitation kit in attacks (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 07 Nov 18:47
comments (0)
German Law Could Protect Researchers Reporting Vulns (www.darkreading.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 07 Nov 18:02
comments (0)
An encrypted and anti-forensic public web chat server
in cybersecurity@sh.itjust.works from Super_gamer46861@lemmy.world on 07 Nov 16:45
comments (0)
CISSP Practice Question (docs.google.com)
in cybersecurity@sh.itjust.works from johnboscow@sh.itjust.works on 07 Nov 13:11
comments (2)
Researcher Discloses 36 Vulnerabilities Found in IBM Security Verify Access (www.securityweek.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 06 Nov 11:33
comments (0)
Android Botnet ToxicPanda Bashes Banks Across Europe, LatAm (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 06 Nov 11:32
comments (0)
A Massive Hacking Toolkit From "You Dun" Threat Group Developed To Lauch Massive Cyber Attack (gbhackers.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:12
comments (0)
Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:11
comments (0)
Android flaw may be under limited, targeted exploitation (securityaffairs.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:07
comments (1)
Crooks bank on Microsoft's search engine to phish customers (www.malwarebytes.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:06
comments (0)
Stealthy Process Injection: New Kernel Callback Table Technique Exposed (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:05
comments (1)
Windows infected with backdoored Linux VMs in new phishing attacks (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:04
comments (1)
Google Researchers Claim First Vulnerability Found Using AI (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 11:00
comments (0)
Cybercriminals Exploit DocuSign APIs to Send Fake Invoices (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 05 Nov 10:59
comments (0)
Hundreds of code libraries posted to NPM try to install malware on dev machines (arstechnica.com)
in cybersecurity@sh.itjust.works from neme@lemm.ee on 05 Nov 00:19
comments (0)
Hackers Claim Access to Nokia Internal Data, Selling for $20,000. (hackread.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 04 Nov 16:02
comments (3)
Cyberattack disrupts classes at Irish technology university. (therecord.media)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 04 Nov 15:11
comments (0)
Attackers Abuse DocuSign API to Send Authentic-Looking Invoices At Scale. (lab.wallarm.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 04 Nov 14:35
comments (0)
Supply Chain Attack Using Ethereum Smart Contracts to Distribute Multi-Platform Malware. (checkmarx.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 04 Nov 13:54
comments (0)
Microsoft SharePoint RCE bug exploited to breach corporate network (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 04 Nov 12:06
comments (0)
Interlock Ransomware Puts FreeBSD Servers in Critical Danger Worldwide (www.secureblink.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 04 Nov 12:05
comments (2)
Privilege escalation through TPM Sniffing when BitLocker PIN is enabled. (blog.scrt.ch)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 03 Nov 15:08
comments (1)
Popular Chrome Extension to Hide YouTube Shorts Turned Malicious (cyberinsider.com)
in cybersecurity@sh.itjust.works from neme@lemm.ee on 03 Nov 14:04
comments (19)
OSINT with ChatGPT Search Engine (fosstodon.org)
in cybersecurity@sh.itjust.works from sv1sjp@lemmy.world on 02 Nov 20:57
comments (0)
RCE Vulnerability in QBittorrent – Sharp Security (sharpsec.run)
in cybersecurity@sh.itjust.works from fox@lemm.ee on 02 Nov 11:50
comments (0)
Thousands of hacked TP-Link routers used in years-long account takeover attacks (arstechnica.com)
in cybersecurity@sh.itjust.works from Alphane_Moon@lemmy.world on 02 Nov 10:51
comments (2)
Booking.com Phishers May Leave You With Reservations. (krebsonsecurity.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 02 Nov 00:39
comments (1)
Fake Web Store Reviews Attempting to Steal Customer Data. (blog.lastpass.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 01 Nov 18:15
comments (0)
DDoS site Dstat.cc seized and two suspects arrested in Germany (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 01 Nov 17:55
comments (0)
Ransomware attack hits German pharmaceutical wholesaler, disrupts medicine supplies. (therecord.media)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 01 Nov 16:34
comments (0)
Los Angeles housing agency confirms another cyberattack after 2023 ransomware incident. (therecord.media)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 01 Nov 16:33
comments (0)
Young people’s data feared stolen in cyberattack on French government contractor. (therecord.media)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 01 Nov 13:04
comments (1)
North Korea's Andariel Pivots to 'Play' Ransomware (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 01 Nov 11:48
comments (0)
Sophos reveals 5-year battle with Chinese hackers attacking network devices (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 01 Nov 11:48
comments (0)
New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 01 Nov 11:46
comments (0)
Strela Stealer Targets Europe Stealthily Via WebDav (cyble.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 01 Nov 11:41
comments (0)
Chinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network. (www.microsoft.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 01 Nov 02:48
comments (0)
GreyNoise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI. (www.greynoise.io)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 01 Nov 00:02
comments (1)
[PDF] New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad. (www.ic3.gov)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 20:55
comments (0)
Cybercriminals Are Stealing Cookies to Bypass Multifactor Authentication. (www.fbi.gov)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 20:50
comments (11)
Cyble Sensors Detect New Attacks On LightSpeed, GutenKit WordPress Plugins. (cyble.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 17:32
comments (0)
Suspected pro-Ukraine cyberattack knocks out parking enforcement in Russian city. (therecord.media)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 16:46
comments (1)
Privilege escalation through TPM Sniffing when BitLocker PIN is enabled (blog.scrt.ch)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 31 Oct 16:43
comments (0)
14-Year Vulnerability in qBittorrent Leaves Millions Exposed to RCE Attacks (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 31 Oct 16:38
comments (10)
Phish ’n’ Ships Fakes Online Shops to Steal Money and Credit Card Information. (www.humansecurity.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 16:19
comments (0)
Every Doggo Has Its Day: Unleashing the Xiū Gǒu Phishing Kit. (www.netcraft.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 16:17
comments (0)
Threat actors use copyright infringement phishing lure to deploy infostealers. (blog.talosintelligence.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 14:17
comments (0)
Large Peruvian bank warns of data theft after dark web post emerges. (therecord.media)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 13:00
comments (0)
Animation Tool Lottie Player Hit by Supply Chain Attack, Causes $723K Bitcoin Theft. (decrypt.co)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 31 Oct 12:37
comments (0)
Hackers steal 15,000 cloud credentials from exposed Git config files (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 31 Oct 11:43
comments (0)
North Korean govt hackers linked to Play ransomware attack (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 31 Oct 11:42
comments (0)
Cryptocurrency Enthusiasts Targeted in Multi-Vector Supply Chain Attack. (checkmarx.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 30 Oct 23:37
comments (1)
Android Trojan that intercepts voice calls to banks just got more stealthy (arstechnica.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 30 Oct 21:53
comments (0)
Windows Themes 0-day opens door to NTLM credential theft. (www.theregister.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 30 Oct 21:50
comments (0)
Unmasking the SYS01 Infostealer Threat: Bitdefender Labs Tracks Global Malvertising Campaign Targeting Meta Business Pages. (www.bitdefender.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 30 Oct 15:49
comments (0)
Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware. (www.zimperium.com)
in cybersecurity@sh.itjust.works from Dot@feddit.org on 30 Oct 15:39
comments (0)
Simpson Garfinkel on Spooky Cryptographic Action at a Distance (www.schneier.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 30 Oct 15:27
comments (0)
'CrossBarking' Attack Exposes Opera Browser Users via APIs (www.darkreading.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 30 Oct 14:25
comments (1)
Google fixed a critical vulnerability in Chrome browser (securityaffairs.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 30 Oct 13:32
comments (0)
Silencing the EDR Silencers (www.huntress.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 30 Oct 13:31
comments (0)
RAT Malware Operating via Discord Bot (asec.ahnlab.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 30 Oct 13:16
comments (1)
HeptaX: Unauthorized RDP Connections For Cyberespionage Operations (cyble.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 30 Oct 11:35
comments (0)
Recurring Windows Flaw Could Expose User Credentials (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 30 Oct 11:28
comments (0)
Russia’s ‘Midnight Blizzard’ hackers target government workers in novel info-stealing campaign (therecord.media)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 30 Oct 11:28
comments (1)
Macron's bodyguards show his location by sharing Strava data (www.theregister.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 29 Oct 11:53
comments (4)
Windows 'Downdate' Attack Makes Patched PCs Vulnerable (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 29 Oct 11:44
comments (1)
New tool bypasses Google Chrome’s new cookie encryption system (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 29 Oct 11:44
comments (0)
Canadian Organizations Targeted by Chinese State-Sponsored Scanning (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 29 Oct 11:42
comments (1)
Free, France’s second largest ISP, confirms data breach after leak (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 29 Oct 11:35
comments (2)
ChatGPT-4o Guardrail Jailbreak: Hex Encoding for Writing CVE Exploits (0din.ai)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 29 Oct 11:34
comments (0)
Can MDM software be used to spy on employee ?
in cybersecurity@sh.itjust.works from BlueMagma@sh.itjust.works on 29 Oct 09:28
comments (14)
Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services (thehackernews.com)
in cybersecurity@sh.itjust.works from AmbiguousProps@lemmy.today on 29 Oct 07:36
comments (0)
Chinese hackers targeted phones affiliated with Harris campaign, source says (www.reuters.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 28 Oct 16:51
comments (1)
Black Basta affiliates used Microsoft Teams in recent attacks (securityaffairs.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 28 Oct 16:48
comments (0)
Mexican airport operator purportedly breached by RansomHub (www.scworld.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 28 Oct 16:46
comments (1)
Grafana Vulnerability CVE-2024-9264: PoC Exploit Released for 9.9-Rated Critical Flaw (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 28 Oct 16:44
comments (0)
Fog ransomware targets SonicWall VPNs to breach corporate networks (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 28 Oct 16:43
comments (1)
US says Chinese hackers breached multiple telecom providers (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 28 Oct 16:43
comments (0)
German MPs and their staff fail simple phishing attack test (www.tomshardware.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 28 Oct 11:03
comments (5)
Cisco is still hard-coding passwords into its products (www.thestack.technology)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 28 Oct 08:26
comments (28)
Hacker attack causes log-in problems for Swiss media (www.bluewin.ch)
in cybersecurity@sh.itjust.works from vovo@lemmy.dbzer0.com on 26 Oct 02:02
comments (0)
Ransomware Threat Escalates as Scattered Spider and RansomHub Combine Forces (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 25 Oct 11:27
comments (0)
AWS CDK flaw exposed accounts to full takeover (www.theregister.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 25 Oct 11:25
comments (0)
North Korean Cyber Espionage Group Tenacious Pungsan Compromises Open-Source Repositories with Backdoored npm Packages (securityonline.info)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 25 Oct 11:22
comments (2)
UnitedHealth says Change Healthcare hack affects over 100 million, the largest-ever US healthcare data breach (techcrunch.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 25 Oct 11:06
comments (3)
Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials (blog.talosintelligence.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 25 Oct 11:04
comments (4)
I've never gotten an SMS scan like this one
in cybersecurity@sh.itjust.works from tapdattl@lemmy.world on 25 Oct 00:48
comments (7)
Here's What I Would Do If I Could Start Over In Cybersecurity... (www.youtube.com)
in cybersecurity@sh.itjust.works from pantherina@feddit.org on 24 Oct 17:04
comments (3)
New Qilin ransomware encryptor features stronger encryption, evasion (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 15:57
comments (0)
Misconfigured UN Database Exposes 228GB of Gender Violence Victims' Data (hackread.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 14:15
comments (2)
Attackers Target Crypto Wallets Using Codeless Webflow Phishing Pages (www.netskope.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:27
comments (0)
New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:26
comments (0)
New malware family NotLockBit aims ransomware attacks toward macOS (www.scworld.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:25
comments (0)
Xerox Printers Vulnerable to Remote Code Execution Attacks (gbhackers.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:23
comments (0)
'Prometei' Botnet Spreads its Cryptojacker Worldwide (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:23
comments (0)
Embargo Ransomware Gang Deploys Customized Defense Evasion Tools (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:21
comments (0)
New Malware WarmCookie Targets Users with Malicious Links (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:21
comments (0)
Lazarus Group Exploits Chrome Zero-Day in Latest Campaign (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:18
comments (0)
Critical Fortinet vulnerability finds zero-day RCE exploits (www.csoonline.com)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 24 Oct 12:09
comments (0)
Cisco Patches Vulnerability Exploited in Large-Scale Brute-Force Campaign (www.securityweek.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:08
comments (0)
Russia says 'unprecedented' cyber attack hits foreign ministry amid BRICS summit (www.reuters.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 24 Oct 12:02
comments (1)
Critical bug in millions of Samsung Exynos phone processors exploited in the wild (www.thestack.technology)
in cybersecurity@sh.itjust.works from BrikoX@lemmy.zip on 24 Oct 11:57
comments (0)
Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models (thehackernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 13:47
comments (5)
Mallox Ransomware Vulnerability Let Victims Decrypt Files (gbhackers.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 13:44
comments (0)
FortiGate admins report active exploitation 0-day. Vendor isn’t talking. (arstechnica.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 13:42
comments (4)
VMware fixes bad patch for critical vCenter Server RCE flaw (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 13:41
comments (0)
IcePeony Hackers Exploiting Public Web Servers To Inject Webshells (gbhackers.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 13:39
comments (0)
CISA Warns Recent Microsoft SharePoint RCE Flaw Exploited in Attacks (www.securityweek.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 12:37
comments (0)
Latrodectus Malware Increasingly Used by Cybercriminals (www.securityweek.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 11:44
comments (0)
Tricky CAPTCHA Caught Dropping Lumma Stealer Malware (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 11:43
comments (1)
Hacker Advertises "Top Secret US Space Force (USSF) Military Technology Archive" (hackread.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 11:30
comments (0)
Massive data leak hits Mexican healthcare sector with over 5 million at risk (cybernews.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 11:29
comments (0)
Microsoft blocks Windows 11 24H2 update for some PCs following bug onslaught (www.zdnet.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 11:26
comments (2)
Samsung Zero-Day Vuln Under Active Exploit, Google Warns (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 23 Oct 11:26
comments (20)
Exploit released for new Windows Server "WinReg" NTLM Relay attack (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 19:10
comments (0)
Russia-Linked Hacktivists Attack Japan's Govt, Ports (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:46
comments (0)
50,000 Files Exposed in Nidec Ransomware Attack (www.infosecurity-magazine.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:45
comments (0)
Severe flaws in E2EE cloud storage platforms used by millions (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:44
comments (2)
Anti-Bot Services Help Cybercrooks Bypass Google 'Red Page' (www.darkreading.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:42
comments (0)
Bumblebee malware returns after recent law enforcement disruption (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:42
comments (0)
Over 6,000 WordPress hacked to install plugins pushing infostealers (www.bleepingcomputer.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:41
comments (0)
Fortinet releases patches for undisclosed critical FortiManager vulnerability (www.helpnetsecurity.com)
in cybersecurity@sh.itjust.works from kid@sh.itjust.works on 22 Oct 11:39
comments (0)