Public posts with this hashtag.
MalwarebytesMillions of California students’ sensitive data stolen in breachThe California Department of Education notified students about a data breach at contractor Educational Testing Service.
CVE-2026-112302 is a path traversal vulnerability in the ZIP extraction function of the kiwilan php-archive PHP library. Versions up to 2.3.02 are affected.
A public exploit is circulating per VulDB. No vendor fix is available, and kiwilan has not responded to the disclosure.
Cybersecurity is a leadership problem: Why the management model needs to catch up
Cybersecurity fails when treated as just a tech problem. The real issue? Leadership. CISOs can't do it alone—organizations need clear accountability, cross-level collaboration, and board involvement. Better tools mean nothing without proper governance and sustained management discipline. It's time to break the cycle.
CSO OnlineCybersecurity is a leadership problem: Why the management model needs to catch upWe keep buying better security tech, but the real gaps are ownership and follow-through, so cybersecurity can’t stay the CISO’s problem alone.
Plex shipped fixes in 1.43.3 by Sep 1, yet one researcher's honeypot running a vulnerable version was exploited on Oct 17, a day after the Plex2Shell chain (CVE-2026-96652, -96654, -96655, -96656) went public. He saw an XMRig miner and a proxy tool dropped. Plex's Sep 1 notice listed no CVEs, and Plex did not immediately respond to Ars Technica.
https://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html
www.boredhackerblog.infoPlex vulnerabilities being exploited in the wild to drop a cryptominerIntro: (No AI was involved in writing, research, etc...) If you see weird fonts and spacing, blame Blogger. Skip to "In the wild exploitati...
Possible Phishing 🎣
on: ⚠️hxxps[:]//bradesco-validacao[.]digital
🧬 Analysis at: https://urldna.io/scan/6ad64cb13b77500009d2816d
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
🛡 THREAT INTEL | Patriot Maritime
🟢 Actor "Storm" claims Undisclosed
Allegedly exposed
• Contracts
• Employee data
⚠️ Unverified claim
https://www.yazoul.net/intel/claim/2026-10-19-patriot-maritime-ransomware-claim-by-storm-oct-2026
by Yazoul AI
Yazoul SecurityPatriot Maritime Ransomware Claim by Storm (Oct 2026)Storm ransomware group allegedly claims Patriot Maritime as a victim, threatening sensitive maritime contractor data. Read our unverified threat intel analysis now.
🧪 NEW BETA RELEASES 🧪
📱 iOS 27.2 RC (24B115)
📱 iPadOS 27.2 RC (24B115)
💻 macOS 27.2 RC (26B118)
📺 tvOS 27.2 RC (24K120)
🥽 visionOS 27.2 RC (24N118)
⌚ watchOS 27.2 RC (24S116)
🔨 Xcode 27.2 RC (27B48)
Possible Phishing 🎣
on: ⚠️hxxps[:]//sites[.]google[.]com/view/webmaillogin09/home
🧬 Analysis at: https://urldna.io/scan/6ad5d5cb3b77500008d7e84e
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
The 7 biggest issues CISOs and security teams face today
Security leaders face mounting pressure as AI-driven cyberattacks surge. 68% of CISOs report increased stress, with 73% unprepared for major breaches. The shift from prevention to resilience is critical—78% view generative AI as a security risk. Key priorities: close the 95% skills gap, strengthen AI infrastructure security, align programs with org needs, and maintain foundational practices.
CSO OnlineThe 7 biggest issues CISOs and security teams face todayFrom escalating AI-enabled threats to persistent skills gaps, security leaders are reshaping their agendas to address several key long-standing and emerging concerns.
🟠 New security advisory:
CVE-2026-83531 affects multiple systems.
• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-83531-apache-camel-code-injection-attacker-controlled-poc
by Yazoul AI
Yazoul SecurityApache Camel code injection, attacker-controlled (CVE-2026-83531) [PoC]CVE-2026-83531: Apache Camel 4.4.0-4.18.4 and 4.19.0-4.22.0 lets network senders inject expression language code via dynamic-router-control (CVSS 8.8). Update to 4.23.0, 4.22.1 or 4.18.5.
This dumb password rule is from Crédit Agricole Centre-Est.
You have to enter your 6-digit password using this Frenchy keypad.
https://dumbpasswordrules.com/sites/credit-agricole-centre-est/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
dumbpasswordrules.comCrédit Agricole Centre-Est - Dumb Password RulesYou have to enter your 6-digit password using this Frenchy keypad.
Possible Phishing 🎣
on: ⚠️hxxp[:]//dempiremanagement[.]com/owa[.]auth[.]logo[.]aspx
🧬 Analysis at: https://urldna.io/scan/6ad63eb33b77500002f4d892
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Possible Phishing 🎣
on: ⚠️hxxps[:]//facebookloginnew[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad64cd03b775000039b25ca
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
AI agents are changing the math on software spending
AI agents are reshaping enterprise software pricing. Companies like Microsoft, Salesforce, and SAP are ditching traditional per-seat licensing for hybrid models combining fixed subscriptions with consumption-based charges. CIOs must now budget for workflow complexity and execution frequency, not just user count. Success requires rethinking forecasting strategies and potential budget shifts between IT and business units.
IT StrategyAI agents are changing the math on software spending | TechTargetAI agents add usage-based charges to seat licensing. CIOs must compare workflow costs, forecast consumption and decide who pays for agent activity.
Possible Phishing 🎣
on: ⚠️hxxp[:]//a2zapk[.]co/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z[.]html
🧬 Analysis at: https://urldna.io/scan/6ad654733b77500002f4d97a
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
A critical Laravel authentication bypass (CVSS 9.2) in TokenGuard enables account takeover without a token. Upgrade to 13.29.0 or 12.68.0.
#Laravel #PHP #AuthenticationBypass #AccountTakeover #WebSecurity #OpenSource #PatchNow #CyberSecurity
Possible Phishing 🎣
on: ⚠️hxxps[:]//bit[.]ly/BancoIombiamiSeguro
🧬 Analysis at: https://urldna.io/scan/6ad5c7c03b775000050098c1
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Monitor for updates on ShinyHunters operations and associated ransomware campaigns — this disruption may shake loose affiliates looking for new footing.
Reward: You've received the Scales of Unhinged Justice — a rare cosmetic that glows slightly whenever someone in your party is secretly the villain.
https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
#Ransomware #CyberSecurity #ShinyHunters #Cybercrime #LawEnforcement #BustedIRL (3/3)
CVE-2026-11319: TickTick Limited's TickTick for Android 8.2.2.0 contains a path traversal flaw in its exported ShareReceiveActivity.
A malicious local app can supply a crafted filename to write files outside the attachment directory.
No in-the-wild exploitation is confirmed and no fixed version is listed.
We are seeing suspicious traffic hitting our website and triggering HTTP 503 errors.
IPs observed in the logs:
185.220.100.243
185.220.100.248
141.98.11.62
192.42.116.*
Some of these IPs are associated with Tor exit nodes. Has anyone seen similar traffic recently?
🚨New ransom group blog post!🚨
Group name: incransom
Post title: Seetelhotels.de
Organization: Seetel Hotels
Location: 🇩🇪 DE
Sector: Hospitality & Tourism
Info: https://cti.fyi/#disclosure/incransom/Seetelhotels.de
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
Bullhorn is reporting a cyber incident: https://status.bullhorn.com
Thank you Splunk, a Cisco Company for sponsoring BSides Edmonton 2026. It was a great event thanks to your support.
We’re excited for 2027, our 10th year!
Secure your spot here: https://bsidesyeg.org/SponsorNextYear
https://www.splunk.com
https://www.linkedin.com/company/splunk/
#BSides #BSidesEdmonton #BSidesYEG #YEG #Infosec #informationsecurity #CyberSec #CyberSecurity
Google DocsBSides Edmonton 2027 Sponsor ApplicationBSides Edmonton is back for it's 10th year!
Building on the success of our prior events, we are asking for sponsors to be part of the team to deliver another first-rate cybersecurity conference in Edmonton. Alberta. We are a community-driven, non for profit event.
Date: Monday September 13 & Tuesday September 14, 2027
Location: TBA
If your organization wants to: Connect directly with the cyber
CISA review makes the case for eliminating vulnerability classes
CISA urges software makers to eliminate entire vulnerability classes, not just patch individual flaws. The agency highlights that recurring coding errors (like injection attacks) cause most breaches. Solution: adopt Secure by Design principles, automate security processes, and take ownership. Consumers must also demand better security from vendors to drive industry-wide change.
https://www.helpnetsecurity.com/2026/09/01/cisa-on-eliminating-recurring-security-weaknesses/
Help Net SecurityCISA review makes the case for eliminating vulnerability classes - Help Net SecurityCISA makes the case for eliminating recurring security weaknesses at the source, shifting the burden from defenders to software makers.
Possible Phishing 🎣
on: ⚠️hxxps[:]//saouryadi[.]in
🧬 Analysis at: https://urldna.io/scan/6ad606553b775000039b2269
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Join us THURSDAY @ 12:30pm CT for #ThursDef! A 30min fireside chat with defensive people around the industry.
This week's guest: Automotive Security Researcher @revers3everything joins us to talk about Privacy & Operational Security.
Register today at thursdef.com
🚨New ransom group blog posts!🚨
Group name: Deadlock
Post title: Greggio Argento
Location: 🇮🇹 IT
Sector: Technology
Info: https://cti.fyi/#disclosure/Deadlock/Greggio%20Argento
Group name: Deadlock
Post title: Far West Contractors
Sector: Construction
Info: https://cti.fyi/#disclosure/Deadlock/Far%20West%20Contractors
Group name: Helix
Post title: American Campus
Location: 🇺🇸 US
Sector: Education
Info: https://cti.fyi/#disclosure/Helix/American%20Campus
Group name: Helix
Post title: Southwire
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Helix/Southwire
Group name: Helix
Post title: Quikrete
Location: 🇺🇸 US
Sector: Construction
Info: https://cti.fyi/#disclosure/Helix/Quikrete
Group name: Helix
Post title: Smith Douglas Homes
Location: 🇺🇸 US
Sector: Construction
Info: https://cti.fyi/#disclosure/Helix/Smith%20Douglas%20Homes
Group name: Helix
Post title: Bay Alarm
Location: 🇺🇸 US
Sector: Technology
Info: https://cti.fyi/#disclosure/Helix/Bay%20Alarm
Group name: Helix
Post title: Personify Health
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/Helix/Personify%20Health
Group name: Helix
Post title: Rheem Global
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Helix/Rheem%20Global
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
If you received a notification from Burger King Japan, review what data was exposed, monitor linked accounts for suspicious activity, and change passwords on any services sharing those credentials.
Reward: You've unlocked the Compliance Certificate of Insufficient Access Controls. It is laminated. It does not help.
RescanaBurger King Japan Smartphone App Data Breach Exposes 11 Million Customer Records in 2026Executive SummaryBurger King Japan, the Japanese subsidiary of the global fast-food chain Burger King, experienced a significant data breach in early October 2026, resulting in the exposure of approxi
🚨 WPSplinter: 16-Year-Old Broadcom Wi-Fi Vulnerability Enables Router RCE
Security researcher Quentin Kaiser has exposed a flaw in Broadcom’s legacy Wi-Fi SDK that could allow attackers within wireless range to execute arbitrary code on vulnerable routers without knowing the Wi-Fi password or completing WPS enrollment.
The exploit chain involves a buffer overflow in EAP-WPS fragment reassembly, memory disclosure, and potential code execution. Demonstrations on ISP gateways reportedly exposed Wi-Fi credentials and achieved interactive reverse-shell access.
⚠️ Disabling WPS may not mitigate the flaw. Legacy firmware and unsupported eCos-based gateways pose particularly difficult remediation challenges.
Technical breakdown, affected platforms, detection toolkit, and mitigation 👇
🔗 https://thecybersecguru.com/exploits/wpsplinter-broadcom-wifi-vulnerability/
The original is being retrieved. Open its source ↗
