let's talk about Bridgerton tea, my ask is open
Discoholic 🪩
sheepfilms
I'd rather be in outer space 🛸
Jules of Nature
h
No title available
★
No title available
Game of Thrones Daily
Sweet Seals For You, Always
NASA
No title available
RMH
hello vonnie
we're not kids anymore.
macklin celebrini has autism
Cosimo Galluzzi
Fai_Ryy
Origami Around
seen from Netherlands
seen from Mexico
seen from United States
seen from Spain
seen from Austria
seen from United States
seen from United States
seen from Saudi Arabia
seen from Canada
seen from United Kingdom
seen from United States
seen from United Kingdom
seen from Malaysia
seen from Australia
seen from Türkiye
seen from United Kingdom
seen from Bangladesh
seen from United Kingdom
seen from United States
seen from Netherlands
@cyber-sec
Three Chained Zero-Days Give Attackers Root on Siemens OT Switches
Researchers chained three vulnerabilities in Siemens ROX II industrial switches to escalate from a simple file leak all the way to persistent root access, exposing critical infrastructure networks to full takeover.
Source: Unit 42, Palo Alto Networks
Read more: CyberSecBrief
"The Gentlemen" Seize Ransomware Crown as "Deadlock" Roars Back
Ransomware gang "The Gentlemen" clawed its way to the top of the leaderboard with 300 victims in Q2, while newcomer "Deadlock" resurfaced after eleven months of silence wielding blockchain-based command and control and kernel-level EDR killing.
Source: ReliaQuest
Read more: CyberSecBrief
WordPress Core Bug Lets Anyone Hack a Stock Site, No Login Needed
A pre-authentication remote code execution flaw in WordPress Core means an anonymous attacker can hijack a bare install with zero plugins, putting millions of sites at risk until they update to 7.0.2 or 6.9.5.
Source: Searchlight Cyber
Read more: CyberSecBrief
Scattered Spider Hackers Jailed Over £29m London Transport Hack
Two young members of the Scattered Spider hacking collective were sentenced to five and a half years each after their 2024 cyberattack crippled 148 Transport for London systems and forced 27,000 staff into in-person password resets.
Source: The Record
Read more: CyberSecBrief
This macOS Malware Locks You Out Until You Type Your Password
Newly discovered ClickLock Stealer kills active Mac processes to coerce victims into entering their login password, then raids browsers, crypto wallets, password managers and Keychain, hitting over 100 victims across 33 countries.
Source: Group-IB
Read more: CyberSecBrief
Coca-Cola's Fairlife Dairy Hit by Ransomware, US Production Halted
A ransomware attack forced Coca-Cola's Fairlife subsidiary to suspend production at its US facilities after attackers gained unauthorised access to production-related systems, with no group yet claiming responsibility.
Source: BleepingComputer | U.S. Securities and Exchange Commission
Read more: CyberSecBrief
Cursor's Deeplink Bug Turns One Click Into Full Takeover
A sneaky flaw in the Cursor coding tool lets attackers hide a malicious command inside a fake "review this PR" link, seizing control the moment you click approve.
Source: Adversa AI
Read more: CyberSecBrief
CISA Sounds Alarm on SharePoint Under Active Attack
Hackers are exploiting three on-premises SharePoint flaws right now to seize servers and steal IIS machine keys, prompting an urgent CISA patch order.
Source: CISA
Read more: CyberSecBrief
SonicWall Zero-Days Being Exploited to Seize Root Access
Attackers are actively chaining two SonicWall SMA1000 flaws to hijack appliances, steal credentials and MFA seeds, then pivot straight into Active Directory.
Source: Rapid7
Read more: CyberSecBrief
Poisoned npm Packages Smuggle Miasma Malware Into Developer Pipelines
Attackers hijacked a trusted GitHub Actions workflow to sneak obfuscated malware into popular AsyncAPI npm packages, quietly installing a persistent backdoor capable of remote command execution.
Source: Socket
Read more: CyberSecBrief
SharePoint Auth Bypass Chained Into Full Remote Takeover
A newly disclosed SharePoint flaw lets an unauthenticated attacker impersonate any site user and, when chained with a second bug, seize full remote control of vulnerable servers.
Source: Rapid7
Read more: CyberSecBrief
Microsoft's Record Patch Tuesday Fixes 622 Flaws, Two Under Active Attack
Microsoft rushed out fixes for a record 622 vulnerabilities this month, including two zero-days already being exploited to hijack Active Directory Federation Services and spoof SharePoint Server over a network.
Source: BleepingComputer
Read more: CyberSecBrief
292 Fake GitHub Pages Are Quietly Stealing Your Passwords and Crypto
A sprawling brand-impersonation scheme spanning nearly 300 fake GitHub repositories, including a spoofed Arctic Wolf page, is tricking users into downloading an infostealer that raids browsers, crypto wallets, Discord and Steam accounts.
Source: Arctic Wolf Labs
Read more: CyberSecBrief
One Sloppy Server Blew the Lid Off Three MFA-Bypassing Phishing Gangs
A single misconfigured open directory let researchers unravel three separate hackers running Evilginx-based phishing kits that hijack Microsoft 365 logins and slip right past multi-factor authentication.
Source: Lexfo
Read more: CyberSecBrief
Fake OAuth Apps Are Letting Hackers Sneak Past Microsoft's Security Logs
Attackers are spoofing OAuth client IDs to silently test millions of Microsoft accounts and passwords without ever tripping a sign-in alert.
Source: Proofpoint
Read more: CyberSecBrief
Zero-Day Exploitation, AI Agent Flaws, and Supply Chain Attacks Define the Week
Adobe ColdFusion and Gitea flaws were exploited within hours of disclosure, while a wave of AI coding assistant vulnerabilities and npm supply chain compromises exposed source code, credentials, and cryptocurrency wallets.
Source: CyberSecBrief – Weekly Briefing
Free Android VPNs Are Leaking the Privacy They Promise
A massive study of 281 free VPN apps, downloaded over 2.4 billion times, found dozens leaking unencrypted traffic and tracking users behind the very shield meant to protect them.
Source: The Hacker News | NDSS Symposium
Read more: CyberSecBrief