kid

joined 1 year ago
MODERATOR OF
cybersecurity
sorted by: new top controversial old
5
Hawaiian Airlines suffers massive IT outage, ransomware attack suspected | Cybernews (cybernews.com)
6
Microsoft 365 'Direct Send' abused to send phishing as internal users (www.bleepingcomputer.com)
8
Hackers abuse Microsoft ClickOnce and AWS services for stealthy attacks (www.bleepingcomputer.com)
8
Patient Death Linked to NHS Cyber-Attack - Infosecurity Magazine (www.infosecurity-magazine.com)
7
Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages (socket.dev)
submitted 5 hours ago* (last edited 4 hours ago) by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
0
ODYSSEY STEALER : THE REBRAND OF POSEIDON STEALER - CYFIRMA (www.cyfirma.com)
1
Supply Chain Incident Imperils Glasgow Council Services and Data - Infosecurity Magazine (www.infosecurity-magazine.com)
5
Androxgh0st Continues Exploitation: Operators Compromise a US University For Hosting C2 Logger | CloudSEK (www.cloudsek.com)
6
Surge in MOVEit Transfer Scanning Activity Could Signal Emerging Threat Activity (www.greynoise.io)
6
Glasgow City Council impacted by ‘cyber incident’ | The Record from Recorded Future News (therecord.media)
3
Cisco warns of critical flaws in Identity Services Engine rated 10.0 | SC Media (www.scworld.com)
2
nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery (thehackernews.com)
Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works
Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 3 points 3 days ago

Sorry. It was not paywalled for me when I first saw. More info from different source: https://feedly.com/cve/CVE-2025-6545

Google Cloud incident report in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 4 points 1 week ago

The incident occurred on June 12, 2025, due to a policy change that contained blank fields, causing 503 errors in Google Cloud and Google Workspace APIs. The root cause was:

  1. A new feature added to Service Control on May 29, 2025, without adequate error handling.
  2. The policy change with blank fields was globally replicated and caused Service Control binaries to crash.
84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 2 weeks ago

Thanks! Corrected

Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 3 weeks ago

The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

Coinbase data breach exposes customer info and government IDs in c/cybersecurity@sh.itjust.works
You think ransomware is bad? Wait until it infects CPUs in c/cybersecurity@sh.itjust.works
CISA warns of potential data breaches caused by legacy Oracle Cloud leak in c/cybersecurity@sh.itjust.works
Pay, fight, or stall? The dilemma of ransomware negotiations - Help Net Security in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 3 months ago (1 children)

Leak extortion is the main issue nowadays, not covered by backups, I'm afraid.

DeepSeek found to be sharing user data with TikTok parent company ByteDance in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 6 points 4 months ago

!selfhosted@lemmy.world to the win!

How to scan PDF files for malware? in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 4 points 4 months ago

I didn't know about that tool. Apparently, it is a CDR, which I like very much. I'm not aware of any good open-source implementations.

[Patched 09/02/25] Leaking the email of any YouTube user for $10,000 in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 4 months ago (1 children)

Very nice approach!

Some points about the article:

Nature of the Vulnerability: The vulnerability is a security flaw that allows leaking the email associated with a YouTube channel by exploiting endpoints from both YouTube and Google Pixel Recorder.

Impact: It allows an attacker to obtain the email associated with any YouTube channel, which can lead to phishing attacks, privacy invasion, and other malicious activities. This potentially affects all YouTube users who own a channel.

Fix Status: The vulnerability has been fixed by Google. Both parts of the exploit were resolved by 02/09/2025, and the report was disclosed on 02/12/2025.

view more: next ›