kid

joined 1 year ago
MODERATOR OF
cybersecurity
sorted by: new top controversial old
26
New Secure Boot flaw lets attackers install bootkit malware, patch now (www.bleepingcomputer.com)
5
295 Malicious IPs Launch Coordinated Brute-Force Attacks on Apache Tomcat Manager (thehackernews.com)
3
Hackers exploited Windows WebDav zero-day to drop malware (www.bleepingcomputer.com)
9
INTERPOL Dismantles 20,000+ Malicious IPs Linked to 69 Malware Variants in Operation Secure (thehackernews.com)
8
Salesforce Industry Cloud Hit by 20 Vulnerabilities Including 0days (hackread.com)
84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 15 hours ago

Thanks! Corrected

5
Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps (thehackernews.com)
3
84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents (www.globenewswire.com)
submitted 17 hours ago* (last edited 15 hours ago) by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
 

84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents

4
VU#211341 - A vulnerability in Insyde H2O UEFI application allows for digital certificate injection via NVRAM variable (kb.cert.org)
47
40,000 cameras expose feeds to datacenters, health clinics • The Register (www.theregister.com)
0
Eggs in a Cloudy Basket: Skeleton Spider’s Trusted Cloud Malware Delivery - DomainTools Investigations | DTI (dti.domaintools.com)
1
Ivanti Workspace Control hardcoded key flaws expose SQL credentials (www.bleepingcomputer.com)
1
Trove of port agency’s data stolen, hackers claim | Cybernews (cybernews.com)
Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 1 week ago

The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

Coinbase data breach exposes customer info and government IDs in c/cybersecurity@sh.itjust.works
You think ransomware is bad? Wait until it infects CPUs in c/cybersecurity@sh.itjust.works
CISA warns of potential data breaches caused by legacy Oracle Cloud leak in c/cybersecurity@sh.itjust.works
Pay, fight, or stall? The dilemma of ransomware negotiations - Help Net Security in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 2 months ago (1 children)

Leak extortion is the main issue nowadays, not covered by backups, I'm afraid.

DeepSeek found to be sharing user data with TikTok parent company ByteDance in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 6 points 3 months ago

!selfhosted@lemmy.world to the win!

How to scan PDF files for malware? in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 4 points 3 months ago

I didn't know about that tool. Apparently, it is a CDR, which I like very much. I'm not aware of any good open-source implementations.

[Patched 09/02/25] Leaking the email of any YouTube user for $10,000 in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 3 months ago (1 children)

Very nice approach!

Some points about the article:

Nature of the Vulnerability: The vulnerability is a security flaw that allows leaking the email associated with a YouTube channel by exploiting endpoints from both YouTube and Google Pixel Recorder.

Impact: It allows an attacker to obtain the email associated with any YouTube channel, which can lead to phishing attacks, privacy invasion, and other malicious activities. This potentially affects all YouTube users who own a channel.

Fix Status: The vulnerability has been fixed by Google. Both parts of the exploit were resolved by 02/09/2025, and the report was disclosed on 02/12/2025.

Proton Mail still down as Proton recovers from worldwide outage in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 51 points 5 months ago

Apparently was not related to a cyber attack, as stated in status page (https://status.proton.me/)

We have resolved all service outages, and the situation has been stable for some time. We have identified the root cause of the problem, implemented a fix, and are now monitoring the results. Jan 09, 2025 - 19:27 CET

Researcher Details CVE-2024-44131 - A Critical TCC Bypass in macOS and iOS in c/cybersecurity@sh.itjust.works
Deloitte UK Hacked - Brain Cipher Group Claim to Have Stolen 1 TB of Data in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 1 points 6 months ago (1 children)

For now, the threat actor is just claiming that they hacked BT. No prove whatsoever. Groups usually post a sample of the data when they claim a victim, but that is not the case, for now.

view more: next ›