Public posts with this hashtag.
Possible Phishing 🎣
on: ⚠️hxxps[:]//bit[.]ly/BancoIombiamiSeguro
🧬 Analysis at: https://urldna.io/scan/6ad5c7c03b775000050098c1
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
CVE-2026-11319: TickTick Limited's TickTick for Android 8.2.2.0 contains a path traversal flaw in its exported ShareReceiveActivity.
A malicious local app can supply a crafted filename to write files outside the attachment directory.
No in-the-wild exploitation is confirmed and no fixed version is listed.
We are seeing suspicious traffic hitting our website and triggering HTTP 503 errors.
IPs observed in the logs:
185.220.100.243
185.220.100.248
141.98.11.62
192.42.116.*
Some of these IPs are associated with Tor exit nodes. Has anyone seen similar traffic recently?
🚨New ransom group blog post!🚨
Group name: incransom
Post title: Seetelhotels.de
Organization: Seetel Hotels
Location: 🇩🇪 DE
Sector: Hospitality & Tourism
Info: https://cti.fyi/#disclosure/incransom/Seetelhotels.de
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
Thank you Splunk, a Cisco Company for sponsoring BSides Edmonton 2026. It was a great event thanks to your support.
We’re excited for 2027, our 10th year!
Secure your spot here: https://bsidesyeg.org/SponsorNextYear
https://www.splunk.com
https://www.linkedin.com/company/splunk/
#BSides #BSidesEdmonton #BSidesYEG #YEG #Infosec #informationsecurity #CyberSec #CyberSecurity
Google DocsBSides Edmonton 2027 Sponsor ApplicationBSides Edmonton is back for it's 10th year!
Building on the success of our prior events, we are asking for sponsors to be part of the team to deliver another first-rate cybersecurity conference in Edmonton. Alberta. We are a community-driven, non for profit event.
Date: Monday September 13 & Tuesday September 14, 2027
Location: TBA
If your organization wants to: Connect directly with the cyber
CISA review makes the case for eliminating vulnerability classes
CISA urges software makers to eliminate entire vulnerability classes, not just patch individual flaws. The agency highlights that recurring coding errors (like injection attacks) cause most breaches. Solution: adopt Secure by Design principles, automate security processes, and take ownership. Consumers must also demand better security from vendors to drive industry-wide change.
https://www.helpnetsecurity.com/2026/09/01/cisa-on-eliminating-recurring-security-weaknesses/
Help Net SecurityCISA review makes the case for eliminating vulnerability classes - Help Net SecurityCISA makes the case for eliminating recurring security weaknesses at the source, shifting the burden from defenders to software makers.
Possible Phishing 🎣
on: ⚠️hxxps[:]//saouryadi[.]in
🧬 Analysis at: https://urldna.io/scan/6ad606553b775000039b2269
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
🛡️ Senior Incident Response Consultant, Rapid Response at Sophos
📍 Remote (CA)
💰 CA$109k–CA$181k/yr
Apply: https://blueteamjobs.com/job/senior-incident-response-consultant-rapid-response-sophos-3vzj2h/
BlueTeamJobsSenior Incident Response Consultant, Rapid Response at…Sophos is hiring a Senior Incident Response Consultant, Rapid Response, Remote (CA). Pay: CA$109k–CA$181k a year. About Us Sophos is a cybersecurity…
Join us THURSDAY @ 12:30pm CT for #ThursDef! A 30min fireside chat with defensive people around the industry.
This week's guest: Automotive Security Researcher @revers3everything joins us to talk about Privacy & Operational Security.
Register today at thursdef.com
🚨New ransom group blog posts!🚨
Group name: Deadlock
Post title: Greggio Argento
Location: 🇮🇹 IT
Sector: Technology
Info: https://cti.fyi/#disclosure/Deadlock/Greggio%20Argento
Group name: Deadlock
Post title: Far West Contractors
Sector: Construction
Info: https://cti.fyi/#disclosure/Deadlock/Far%20West%20Contractors
Group name: Helix
Post title: American Campus
Location: 🇺🇸 US
Sector: Education
Info: https://cti.fyi/#disclosure/Helix/American%20Campus
Group name: Helix
Post title: Southwire
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Helix/Southwire
Group name: Helix
Post title: Quikrete
Location: 🇺🇸 US
Sector: Construction
Info: https://cti.fyi/#disclosure/Helix/Quikrete
Group name: Helix
Post title: Smith Douglas Homes
Location: 🇺🇸 US
Sector: Construction
Info: https://cti.fyi/#disclosure/Helix/Smith%20Douglas%20Homes
Group name: Helix
Post title: Bay Alarm
Location: 🇺🇸 US
Sector: Technology
Info: https://cti.fyi/#disclosure/Helix/Bay%20Alarm
Group name: Helix
Post title: Personify Health
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/Helix/Personify%20Health
Group name: Helix
Post title: Rheem Global
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Helix/Rheem%20Global
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
New.
Rapid7: Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED) https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/ @Rapid7Official #infosec #vulnerability #threatresearch
Rapid7Rapid7While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus. A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication (CVSS: 8.6 High). The most serious functions allow for full database read (CVSS: 8.5 High) and an insecure file upload (CVSS: 9.6
🚨 WPSplinter: 16-Year-Old Broadcom Wi-Fi Vulnerability Enables Router RCE
Security researcher Quentin Kaiser has exposed a flaw in Broadcom’s legacy Wi-Fi SDK that could allow attackers within wireless range to execute arbitrary code on vulnerable routers without knowing the Wi-Fi password or completing WPS enrollment.
The exploit chain involves a buffer overflow in EAP-WPS fragment reassembly, memory disclosure, and potential code execution. Demonstrations on ISP gateways reportedly exposed Wi-Fi credentials and achieved interactive reverse-shell access.
⚠️ Disabling WPS may not mitigate the flaw. Legacy firmware and unsupported eCos-based gateways pose particularly difficult remediation challenges.
Technical breakdown, affected platforms, detection toolkit, and mitigation 👇
🔗 https://thecybersecguru.com/exploits/wpsplinter-broadcom-wifi-vulnerability/
The original is being retrieved. Open its source ↗
#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days
I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.
I informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.
Had I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.
📢 DEF CON Training is now accepting course submissions for 2027!
Whether you’re an experienced instructor or bringing a new course to the community, we’re looking for high-quality, hands-on training that helps security professionals build real-world skills.
Submit your training material today for the opportunity to teach alongside the DEF CON community in locations around the world including Las Vegas, the Middle East, and Singapore!
For more details, see the application. The deadline to apply is November 13, 2026.
Apply here today 🔗: https://forms.cloud.microsoft/r/z2f4igJPuu
Already submitted your course for Singapore March 2027? As long as you selected your other sessions of interest at the end of the application form, you don’t need to reapply! We have your application on file.
Questions? Email us at [email protected]
#DEFCON #DEFCON35 #DEFCONSG #DEFCONME #DEFCONTraining #training #cybersecurity #handsonlearning #infosec #AI #incidentresponse #threathunting #cloud #IoT #hacking
forms.cloud.microsoftMicrosoft Forms
🚨 Dates Updated and Location Confirmed! 🚨
DEF CON Training is headed back to Bahrain on November 9-11, this time at the Wyndham Grand Manama. The course line up has a bit of everything - AI, threat hunting, cryptocurrency, cloud infrastructure, and more!
Now's a great time to make plans to add to your skill toolkit before the end of the year. Browse the course catalogue and secure your seat today:
https://me.shop.defcon.org/collections/trainings
📆 November 9-11, 2026
📍 Wyndham Grand Manama
DEF CON Middle East
#DEFCON #DEFCONMiddleEast #DEFCONTraining #CyberTraining #HandsOnTraining #EthicalHacking #AI #InfoSec #threathunting #cloud #Cryptocurrency #Bahrain #MiddleEast
