Public posts with this hashtag.
CVE-2024-39930 is a critical argument injection vulnerability in the built-in SSH server of Gogs, allowing authenticated users to execute arbitrary commands on the host.
Versions through 0.13.0 are affected; Windows installations are not. Gogs fixed the flaw in version 0.13.1.
A public proof-of-concept exploit exists per CISA.
Google Chrome introduces powerful new anti-scam features, including Gemini analysis and ClickFix interception, to protect users from evolving web threats.
Daily Tech NowGoogle Chrome Security Updates Add New Anti-Scam FeaturesGoogle Chrome introduces powerful new anti-scam features, including Gemini analysis and ClickFix interception, to protect users from evolving web threats.
Possible Phishing 🎣
on: ⚠️hxxps[:]//googlelogos[.]com
🧬 Analysis at: https://urldna.io/scan/6ad79e4f3b775000091c1cd3
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
When it comes to protecting food & beverage environments, Claroty xDome provides comprehensive visibility and business context for all cyber-physical systems.
👉 See a demo and explore how xDome helps you protect your supply chain and keep critical operations running. https://demohub.claroty.com/share/cdfx9fnayx0s
#FoodAndBeverage #OTsecurity #CPSprotection #cybersecurity #ClarotyClaire
Reward: You've received a Chargeback Coupon — void where applicable, which is everywhere.
#Cybersecurity #APIsecurity #OpenCode #AccountCompromise #AITools #IncidentResponse (3/3)
TechCrunchHackers hit AI coding tool OpenCode, running up charges on users’ AI accounts | TechCrunchOpenCode is an open source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
Possible Phishing 🎣
on: ⚠️hxxps[:]//jnvfywgscznzg[.]web[.]app/
🧬 Analysis at: https://urldna.io/scan/6ad82aed3b77500003e34963
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Lapsus and ShinyHunters claimed finding security flaw at Stripe and threatened to drain money from Stripe accounts if they don't want to transfer 1 million USD to a specific cryptowallet, they give 72 hours for Stripe to respond.
The PHP team issued an urgent advisory for critical PHP vulnerabilities CVE-2026-109618 and 109619, threatening millions of exposed web servers.
Possible Phishing 🎣
on: ⚠️hxxps[:]//docs[.]google[.]com/presentation/d/e/2PACX-1vT1CknRnSHwKgtZIUL1f_-AeKluk7nagATjwaxjw4wUnC5AAQLlgyKb6xU4VijPqM1bmQp0eM22NS1F/pub?start=false&loop=false&delayms=3000
🧬 Analysis at: https://urldna.io/scan/6ad832883b77500003e349c6
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Six Apache CouchDB vulnerabilities, including CVSS 9.3 CVE-2026-86471, are fixed in 3.5.3. Retired Apache Cocoon gets four unpatched flaws.
#ApacheCouchDB #ApacheCocoon #CVE202686471 #CVE202690800 #CVE2026108089 #CommandInjection #DatabaseSecurity #CyberSecurity
#cybersecurity people working day and night and literally the whole thing is built on sand.
Possible Phishing 🎣
on: ⚠️hxxps[:]//google4d[.]net
🧬 Analysis at: https://urldna.io/scan/6ad7f2853b77500003e34768
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
PH4NTXM has been through a lot, especially over the past six months.
I've been working on it for 10-12 hours a day, every single day, without taking a single day off.
I think the developer (me) deserves some rest and travel around.
So, I'm officially approving and signing my own vacation request, haha.
See you after the reboot, by the way, for more about PH4NTXM check the link:
https://github.com/PH4NTXMOFFICIAL/PH4NTXM
#PH4NTXM #Linux #OpenSource #Cybersecurity #Security #Privacy #Hacking #Tor #OpSec #InfoSec #Technology
🚨New ransom group blog post!🚨
Group name: Bavacai
Post title: BAKANAI
Organization: RUEEGSEGGERAG
Location: 🇨🇭 CH
Info: https://cti.fyi/#disclosure/Bavacai/BAKANAI
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
PH4NTXM has been through a lot, especially over the past six months.
I've been working on it for 10-12 hours a day, every single day, without taking a single day off.
I think the developer (me) deserves some rest and travel around.
So, I'm officially approving and signing my own vacation request, haha.
See you after the reboot, by the way, for more about PH4NTXM check the link:
https://github.com/PH4NTXMOFFICIAL/PH4NTXM
#PH4NTXM #Linux #OpenSource #Cybersecurity #Security #Privacy #Hacking #Tor #OpSec #InfoSec #Technology
PH4NTXM has been through a lot, especially over the past six months.
I've been working on it for 10-12 hours a day, every single day, without taking a single day off.
I think the developer (me) deserves some rest and travel around.
So, I'm officially approving and signing my own vacation request, haha.
See you after the reboot, by the way, for more about PH4NTXM check the link:
https://github.com/PH4NTXMOFFICIAL/PH4NTXM
#PH4NTXM #Linux #OpenSource #Cybersecurity #Security #Privacy #Hacking #Tor #OpSec #InfoSec #Technology
CVE-2026-105941 affects Red Hat Streams for Apache Kafka 3. The Kroxylicious Azure Key Vault KMS provider accepts an unvalidated vaultName, enabling server-side request forgery that exfiltrates the proxy Azure bearer token.
Red Hat rates it 8.1 high and ships the fix in Kroxylicious 0.25.1. No exploitation is reported.
Possible Phishing 🎣
on: ⚠️hxxps[:]//adkjcqkuz[.]firebaseapp[.]com
🧬 Analysis at: https://urldna.io/scan/6ad7c2113b7750000595524e
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
KrebsOnSecurity, citing two unnamed sources, reports FBI investigators suspect an executive at a U.S. consulting firm helped run ShinyHunters' Shinywire extortion site (nearly 100 victims listed). No charges so far; the firm is unnamed. Negotiator Edward Dubrovsky is charged with extortion conspiracy (complaint sealed). CyberAcuView's Mark Camillo calls percentage fees for negotiators an inherent conflict of interest.
https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
GitHub says its new package firewall, in public preview for Enterprise Cloud only, screens npm packages for malware at install time. GitHub's docs show limits: npm only, each endpoint must be configured to use it, and direct registry remotes can bypass it. Default minimum package age is 1 day, while GitHub's Dependabot default cooldown is 3 days. Free in preview; metered billing at GA, no rates given.
https://github.blog/changelog/2026-10-20-github-package-firewall-in-public-preview/
The GitHub BlogGitHub package firewall in public preview - GitHub ChangelogAn increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package’s code. To stem this tide…
PHP's notice names no bug type, CVE IDs or affected versions for two critical flaws (CVSS v4.0 9.2 each) due to be fixed Oct 21 at 14:00 UTC, sooner if details go public. A leak says RCE, CVE-2026-109618 and CVE-2026-109619, PHP 5 onward. watchTowr, a security testing vendor, says it confirmed the leak, but its FAQ calls the scope unverified. PHP supports only 8.2 to 8.5.
Possible Phishing 🎣
on: ⚠️hxxps[:]//metamasklskog[.]gitbook[.]io
🧬 Analysis at: https://urldna.io/scan/6ad7a5f33b77500007443e89
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Tor's advisory on hijacked relays gives no count or cause. Researcher Kaba counted 333 of about 3,000 exits redirecting SSH to interception servers from Oct 2 and says attackers tried to install Ebury. An AI-assisted public-data analysis counted 377 relays with changed exit policies, 71 of 101 other-operator FranTech relays vs 13 of 9,054 elsewhere. Operator Quetzalcoatl blames its own reused plaintext password for two rooted servers.
kaba.cxHow I got over 300 Tor exit nodes removed
🚨New ransom group blog post!🚨
Group name: Bavacai
Post title: BAMAHAA
Organization: Rueegseggerag
Location: 🇨🇭 CH
Info: https://cti.fyi/#disclosure/Bavacai/BAMAHAA
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
Major browsers revoked eMudhra intermediate certificates after researchers discovered trivial P-384 private keys vulnerable to brute-force compromise.
Mozilla blocked eight keys in the eMudhra certificate compromise via OneCRL in under three hours, then shipped Firefox 158.0.1 and NSS 3.131.1.
#eMudhra #Mozilla #Firefox #OneCRL #NSS #CertificateAuthority #WebPKI #CyberSecurity
The Chrome 156 security update fixes 353 flaws, including six critical vulnerabilities such as CVE-2026-113341. Update to 156.0.8078.47.
#Chrome #GoogleChrome #Chrome156 #CVE2026113341 #CVE2026113271 #CVE2026113303 #BrowserSecurity #CyberSecurity
Eight Apache Tomcat vulnerabilities, including a JNDIRealm authentication bypass, are fixed in 11.0.27, 10.1.61 and 9.0.123. Upgrade now.
#ApacheTomcat #Tomcat #CVE2026101296 #CVE2026101356 #CVE2026103119 #AuthenticationBypass #Java #CyberSecurity
watchTowr confirmed no exploitation in the wild yet and no workaround exists — patching is your only option. Apply the PHP security release immediately; Thursday's timeline is no longer the plan.
Reward: You've received a Rushed Release Medal — it pairs beautifully with your Unplanned Overtime Trophy.
BleepingComputerPHP warns admins of two critical flaws, emergency patches coming tomorrowThe PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure.
A ransomware attack affected utility billing software at Petersburg Borough in Alaska after a July 11 network intrusion. Officials disclosed the attack more than three months later.
The borough said customer names and utility account numbers were accessible through the software, but it has not confirmed whether attackers viewed or copied them. The duration of the billing disruption and the restoration date remain undisclosed.
https://dysruptionhub.com/petersburg-alaska-ransomware-utility-billing/
#PetersburgBorough #Alaska #Ransomware #UtilityBilling #Cybersecurity
DysruptionHubPetersburg Borough in Alaska discloses ransomware attack affecting utility billingPetersburg Borough disclosed a July ransomware attack affecting utility billing software. Customer names and account numbers were accessible.
