kid

joined 2 years ago
MODERATOR OF
cybersecurity
sorted by: new top controversial old
1
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access (thehackernews.com)
5
Crypto e-commerce platform Bitrefill accuses North Korea of stealing 18,500 purchase records | The Record from Recorded Future News (therecord.media)
10
Robotic Surgery Giant Intuitive Discloses Cyberattack - SecurityWeek (www.securityweek.com)
10
CursorJack’ Attack Path Exposes Code Execution Risk in AI Development - Infosecurity Magazine (www.infosecurity-magazine.com)
7
Hackers Target Cybersecurity Firm Outpost24 in 7-Stage Phish (www.darkreading.com)
9
Less Lucrative Ransomware Market Makes Attackers Alter Methods (www.darkreading.com)
20
Android OS-Level Attack Bypasses Mobile Payment Security - Infosecurity Magazine (www.infosecurity-magazine.com)
5
From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures (securityaffairs.com)
9
New font-rendering trick hides malicious commands from AI tools (www.bleepingcomputer.com)
3
UK Agency Exposed Corporate Executive Data - BankInfoSecurity (www.bankinfosecurity.in)
7
Security Flaw in AWS Bedrock Code Interpreter Raises Alarms - Infosecurity Magazine (www.infosecurity-magazine.com)
3
CISA flags Wing FTP Server flaw as actively exploited in attacks (www.bleepingcomputer.com)
ShinyHunters leak 12.4M CarGurus records after ransom threat in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 1 points 3 weeks ago

Done, thanks!

Bloody Wolf: A Blunt Crowbar Threat To Justice in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 1 points 3 months ago

Edited. Thanks!

Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works
Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 3 points 8 months ago

Sorry. It was not paywalled for me when I first saw. More info from different source: https://feedly.com/cve/CVE-2025-6545

Google Cloud incident report in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 4 points 9 months ago

The incident occurred on June 12, 2025, due to a policy change that contained blank fields, causing 503 errors in Google Cloud and Google Workspace APIs. The root cause was:

  1. A new feature added to Service Control on May 29, 2025, without adequate error handling.
  2. The policy change with blank fields was globally replicated and caused Service Control binaries to crash.
84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 9 months ago

Thanks! Corrected

Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 9 months ago

The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

Coinbase data breach exposes customer info and government IDs in c/cybersecurity@sh.itjust.works
You think ransomware is bad? Wait until it infects CPUs in c/cybersecurity@sh.itjust.works
CISA warns of potential data breaches caused by legacy Oracle Cloud leak in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 6 points 11 months ago

Direct link.

Pay, fight, or stall? The dilemma of ransomware negotiations - Help Net Security in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 1 year ago (1 children)

Leak extortion is the main issue nowadays, not covered by backups, I'm afraid.

DeepSeek found to be sharing user data with TikTok parent company ByteDance in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 6 points 1 year ago

!selfhosted@lemmy.world to the win!

view more: next ›