#InfoSEC

CVE-2024-39930 is a critical argument injection vulnerability in the built-in SSH server of Gogs, allowing authenticated users to execute arbitrary commands on the host.

Versions through 0.13.0 are affected; Windows installations are not. Gogs fixed the flaw in version 0.13.1.

A public proof-of-concept exploit exists per CISA.

https://nvd.nist.gov/vuln/detail/CVE-2024-39930

#infosec #cybersecurity

Possible Phishing 🎣
on: ⚠️hxxps[:]//googlelogos[.]com
🧬 Analysis at: https://urldna.io/scan/6ad79e4f3b775000091c1cd3
#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS24940
Location: Falkenstein, DE
Added: 2026-10-17T11:53

#shodansafari #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//jnvfywgscznzg[.]web[.]app/
🧬 Analysis at: https://urldna.io/scan/6ad82aed3b77500003e34963
#cybersecurity #phishing #infosec #urldna #scam #infosec

CVE-2026-114108: CRITICAL vuln in HKUDS Vibe-Trading ≤0.1.6 – missing auth enables root shell commands, script uploads, session leaks. Set API_AUTH_KEY & restrict API access now. Patch unconfirmed. https://radar.offseq.com/threat/cve-2026-114108-missing-authentication-for-critical-function-in-hkuds-vibe-trading-dbf2add5e4f70bbe #OffSeq #vulnerability #infosec #HKUDS

Lapsus and ShinyHunters claimed finding security flaw at Stripe and threatened to drain money from Stripe accounts if they don't want to transfer 1 million USD to a specific cryptowallet, they give 72 hours for Stripe to respond.

#cybersecurity #infosec #stripe

The PHP team issued an urgent advisory for critical PHP vulnerabilities CVE-2026-109618 and 109619, threatening millions of exposed web servers.

#PHP #Cybersecurity #Vulnerability #Infosec #PatchTuesday

https://meterpreter.org/critical-php-vulnerabilities-emergency-patch/?utm_source=mastodon&utm_medium=jetpack_social

ASN: AS8075
Location: Amsterdam, NL
Added: 2026-10-17T11:52

#shodansafari #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//docs[.]google[.]com/presentation/d/e/2PACX-1vT1CknRnSHwKgtZIUL1f_-AeKluk7nagATjwaxjw4wUnC5AAQLlgyKb6xU4VijPqM1bmQp0eM22NS1F/pub?start=false&loop=false&delayms=3000
🧬 Analysis at: https://urldna.io/scan/6ad832883b77500003e349c6
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//google4d[.]net
🧬 Analysis at: https://urldna.io/scan/6ad7f2853b77500003e34768
#cybersecurity #phishing #infosec #urldna #scam #infosec

PH4NTXM has been through a lot, especially over the past six months.

I've been working on it for 10-12 hours a day, every single day, without taking a single day off.

I think the developer (me) deserves some rest and travel around.

So, I'm officially approving and signing my own vacation request, haha.

See you after the reboot, by the way, for more about PH4NTXM check the link:

https://github.com/PH4NTXMOFFICIAL/PH4NTXM

#PH4NTXM #Linux #OpenSource #Cybersecurity #Security #Privacy #Hacking #Tor #OpSec #InfoSec #Technology

🚨New ransom group blog post!🚨

Group name: Bavacai
Post title: BAKANAI
Organization: RUEEGSEGGERAG
Location: 🇨🇭 CH
Info: https://cti.fyi/#disclosure/Bavacai/BAKANAI

#ransomware #cti #threatintelligence #cybersecurity #infosec

PH4NTXM has been through a lot, especially over the past six months.

I've been working on it for 10-12 hours a day, every single day, without taking a single day off.

I think the developer (me) deserves some rest and travel around.

So, I'm officially approving and signing my own vacation request, haha.

See you after the reboot, by the way, for more about PH4NTXM check the link:

https://github.com/PH4NTXMOFFICIAL/PH4NTXM

#PH4NTXM #Linux #OpenSource #Cybersecurity #Security #Privacy #Hacking #Tor #OpSec #InfoSec #Technology

PH4NTXM has been through a lot, especially over the past six months.

I've been working on it for 10-12 hours a day, every single day, without taking a single day off.

I think the developer (me) deserves some rest and travel around.

So, I'm officially approving and signing my own vacation request, haha.

See you after the reboot, by the way, for more about PH4NTXM check the link:

https://github.com/PH4NTXMOFFICIAL/PH4NTXM

#PH4NTXM #Linux #OpenSource #Cybersecurity #Security #Privacy #Hacking #Tor #OpSec #InfoSec #Technology

CVE-2026-105941 affects Red Hat Streams for Apache Kafka 3. The Kroxylicious Azure Key Vault KMS provider accepts an unvalidated vaultName, enabling server-side request forgery that exfiltrates the proxy Azure bearer token.

Red Hat rates it 8.1 high and ships the fix in Kroxylicious 0.25.1. No exploitation is reported.

https://access.redhat.com/security/cve/CVE-2026-105941

#infosec #cybersecurity

Possible Phishing 🎣
on: ⚠️hxxps[:]//adkjcqkuz[.]firebaseapp[.]com
🧬 Analysis at: https://urldna.io/scan/6ad7c2113b7750000595524e
#cybersecurity #phishing #infosec #urldna #scam #infosec

CRITICAL: CVE-2026-113744 impacts Tenda AC19 (v16.03.10.07) via stack-based buffer overflow in /goform/SetFirewallCfg. Remote, unauthenticated code execution possible. Public exploit code available. Restrict web access. https://radar.offseq.com/threat/cve-2026-113744-stack-based-buffer-overflow-in-tenda-ac19-5bc63cbf73d618d2 #OffSeq #CVE2026113744 #Infosec

A 2015 UAF CS 463 lecture page by Dr. Lawlor explains AES math: bytes are GF(28) elements, addition is XOR, and products reduce modulo x8+x4+x3+x+1, matching FIPS 197. It suggests lookup tables and never mentions side channels. NIST says its suggested implementations give no protection against implementation attacks, and Bernstein's 2005 paper recovered a full AES key from timings of a test server he built to minimize noise.

https://www.cs.uaf.edu/2015/spring/cs463/lecture/03_23_AES.html

#AES #Cryptography #Encryption #InfoSec

KrebsOnSecurity, citing two unnamed sources, reports FBI investigators suspect an executive at a U.S. consulting firm helped run ShinyHunters' Shinywire extortion site (nearly 100 victims listed). No charges so far; the firm is unnamed. Negotiator Edward Dubrovsky is charged with extortion conspiracy (complaint sealed). CyberAcuView's Mark Camillo calls percentage fees for negotiators an inherent conflict of interest.

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/

#ShinyHunters #Ransomware #InfoSec #Cybersecurity

PHP's notice names no bug type, CVE IDs or affected versions for two critical flaws (CVSS v4.0 9.2 each) due to be fixed Oct 21 at 14:00 UTC, sooner if details go public. A leak says RCE, CVE-2026-109618 and CVE-2026-109619, PHP 5 onward. watchTowr, a security testing vendor, says it confirmed the leak, but its FAQ calls the scope unverified. PHP supports only 8.2 to 8.5.

https://news-web.php.net/php.announce/509

#PHP #InfoSec #Cybersecurity

Possible Phishing 🎣
on: ⚠️hxxps[:]//metamasklskog[.]gitbook[.]io
🧬 Analysis at: https://urldna.io/scan/6ad7a5f33b77500007443e89
#cybersecurity #phishing #infosec #urldna #scam #infosec

Tor's advisory on hijacked relays gives no count or cause. Researcher Kaba counted 333 of about 3,000 exits redirecting SSH to interception servers from Oct 2 and says attackers tried to install Ebury. An AI-assisted public-data analysis counted 377 relays with changed exit policies, 71 of 101 other-operator FranTech relays vs 13 of 9,054 elsewhere. Operator Quetzalcoatl blames its own reused plaintext password for two rooted servers.

https://kaba.cx/posts/20261020_Tor/

#Tor #Ebury #InfoSec #Cybersecurity

🚨New ransom group blog post!🚨

Group name: Bavacai
Post title: BAMAHAA
Organization: Rueegseggerag
Location: 🇨🇭 CH
Info: https://cti.fyi/#disclosure/Bavacai/BAMAHAA

#ransomware #cti #threatintelligence #cybersecurity #infosec

* Opens Mastodon for the first time in awhile *

Me: So, what's going on with #infosec these days?

Mastodon: FOUR!

Me: Welp, that's enough for one day.

* Quietly closes Mastodon *

Major browsers revoked eMudhra intermediate certificates after researchers discovered trivial P-384 private keys vulnerable to brute-force compromise.

#eMudhra #Cybersecurity #PKI #Encryption #InfoSec

https://meterpreter.org/emudhra-intermediate-certificates-compromise/?utm_source=mastodon&utm_medium=jetpack_social

ASN: AS17511
Location: Kobe, JP
Added: 2026-10-17T11:52

#shodansafari #infosec

CVE-2026-114119: CRITICAL in Bp Premier <1.14.1.1128 — hardcoded SQL admin password lets attackers with DB access gain SYSTEM privileges. Restrict access, monitor activity, check vendor guidance. https://radar.offseq.com/threat/cve-2026-114119-use-of-hard-coded-credentials-in-best-practice-software-bp-premier-982d2cc31766a5fd #OffSeq #infosec #CVE2026114119

Possible Phishing 🎣
on: ⚠️hxxps[:]//click-facebook[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad7fa513b7750000773dba3
#cybersecurity #phishing #infosec #urldna #scam #infosec

All #PHP users are encouraged to prepare now so they can upgrade as soon as the release is available.

https://www.php.net/archive/2026.php#2026-10-20-1

#security #infosec

RE: https://merveilles.town/@icco/117476242258823386

Oooh, this is super important to not overlook. If you have brew installed on your computer, there's a new ca-certificates package that you'll want to install ASAP. Run this:

$ brew doctor && brew cleanup -s && brew update && brew upgrade

#brew #certificates #eMudhra #0x4 #infosec #cybersecurity #TLS