kid

joined 2 years ago
MODERATOR OF
cybersecurity
sorted by: new top controversial old
8
Hackers drain $320M in Bitcoin from Liquid Network, claim they're the good guys (www.theregister.com)
4
N-able Releases Hotfix for Critical Remote Code Execution Flaw - Infosecurity Magazine (www.infosecurity-magazine.com)
4
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released (thehackernews.com)
4
Modified ScreenConnect Clients Used in Worm-Like Campaign - SecurityWeek (www.securityweek.com)
17
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution (thehackernews.com)
10
Berlin investigates new data leak after hackers publish stolen login credentials | The Record from Recorded Future News (therecord.media)
5
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild (www.rapid7.com)
13
Krybit Ransomware Strikes Instituto de Cancerología, Guatemala's Premier Cancer Hospital - DeXpose (www.dexpose.io)
17
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability - SecurityWeek (www.securityweek.com)
26
US and Canadian court data exposed in Thomson Reuters breach | The Record from Recorded Future News (therecord.media)
27
Google fixes the sixth actively exploited Chrome zero-day of 2026 (securityaffairs.com)
21
Attackers are going after prominent individuals through OAuth phishing, FBI warns - Help Net Security (www.helpnetsecurity.com)
Seems Udemy got hacked, but hasn't told anyone yet in c/cybersecurity@sh.itjust.works
ShinyHunters leak 12.4M CarGurus records after ransom threat in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 1 points 6 months ago

Done, thanks!

Bloody Wolf: A Blunt Crowbar Threat To Justice in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 1 points 9 months ago

Edited. Thanks!

Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works
Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 3 points 1 year ago

Sorry. It was not paywalled for me when I first saw. More info from different source: https://feedly.com/cve/CVE-2025-6545

Google Cloud incident report in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 4 points 1 year ago

The incident occurred on June 12, 2025, due to a policy change that contained blank fields, causing 503 errors in Google Cloud and Google Workspace APIs. The root cause was:

  1. A new feature added to Service Control on May 29, 2025, without adequate error handling.
  2. The policy change with blank fields was globally replicated and caused Service Control binaries to crash.
84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 1 year ago

Thanks! Corrected

Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 1 year ago

The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

Coinbase data breach exposes customer info and government IDs in c/cybersecurity@sh.itjust.works
You think ransomware is bad? Wait until it infects CPUs in c/cybersecurity@sh.itjust.works
CISA warns of potential data breaches caused by legacy Oracle Cloud leak in c/cybersecurity@sh.itjust.works
Pay, fight, or stall? The dilemma of ransomware negotiations - Help Net Security in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 2 years ago (1 children)

Leak extortion is the main issue nowadays, not covered by backups, I'm afraid.

view more: next ›