kid

joined 1 year ago
MODERATOR OF
cybersecurity
sorted by: new top controversial old
10
New Veeam RCE flaw lets domain users hack backup servers (www.bleepingcomputer.com)
14
Hacker steals 1 million Cock.li user records in webmail data breach (www.bleepingcomputer.com)
27
U.S. CISA adds Apple products, and TP-Link routers flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)
13
New Sophisticated Multi-Stage Malware Campaign Weaponizes VBS Files to Execute PowerShell Script (cybersecuritynews.com)
12
Apache Tomcat Flaws Allow Auth Bypass and DoS Attacks (gbhackers.com)
5
Katz Stealer Enhances Credential Theft Capabilities with System Fingerprinting and Persistence Mechanisms (cybersecuritynews.com)
3
New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS Attacks (thehackernews.com)
10
Kali Linux 2025.2 released with 13 new tools, car hacking updates (www.bleepingcomputer.com)
7
Washington Post Staffer Emails Targeted in Cyber Breach (www.darkreading.com)
10
Hackers switch to targeting U.S. insurance companies (www.bleepingcomputer.com)
8
Freedman Healthcare hacked, database software used by 27 state public health departments | Cybernews (cybernews.com)
6
Hackers claim attack on Scania, website down | Cybernews (cybernews.com)
Google Cloud incident report in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 4 points 2 days ago

The incident occurred on June 12, 2025, due to a policy change that contained blank fields, causing 503 errors in Google Cloud and Google Workspace APIs. The root cause was:

  1. A new feature added to Service Control on May 29, 2025, without adequate error handling.
  2. The policy change with blank fields was globally replicated and caused Service Control binaries to crash.
84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 2 points 6 days ago

Thanks! Corrected

Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide in c/cybersecurity@sh.itjust.works
[–] kid@sh.itjust.works 9 points 2 weeks ago

The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

Coinbase data breach exposes customer info and government IDs in c/cybersecurity@sh.itjust.works
You think ransomware is bad? Wait until it infects CPUs in c/cybersecurity@sh.itjust.works
view more: next ›