⤷ Title: Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:19:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT29 #CozyDuke #CozyLarch #DarkHalo #Device Code Authentication #Device Code Authentication phishing #Midnight Blizzard #phishing #UTA0304 #UTA0307
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:19:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT29 #CozyDuke #CozyLarch #DarkHalo #Device Code Authentication #Device Code Authentication phishing #Midnight Blizzard #phishing #UTA0304 #UTA0307
Daily CyberSecurity
Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
Explore the risks of Device Code Authentication phishing targeted at Microsoft 365 users by Russian threat actors.
⤷ Title: Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:14:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1094 #PostgreSQL
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:14:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1094 #PostgreSQL
Daily CyberSecurity
Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
Explore CVE-2025-1094, a high-severity SQL injection vulnerability in PostgreSQL's psql tool that can execute arbitrary code.
⤷ Title: Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:07:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AOL #Astaroth #Astaroth Phishing Kit #gmail #Microsoft 365 #Phishing Kit #yahoo
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:07:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AOL #Astaroth #Astaroth Phishing Kit #gmail #Microsoft 365 #Phishing Kit #yahoo
Daily CyberSecurity
Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
Uncover the dangers of the Astaroth Phishing Kit, which bypasses two-factor authentication to steal sensitive credentials.
⤷ Title: SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:03:21 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #CVE_2025_0282 #SPAWNANT #SPAWNMOLE #SPAWNSNAIL
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:03:21 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #CVE_2025_0282 #SPAWNANT #SPAWNMOLE #SPAWNSNAIL
Daily CyberSecurity
SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
Uncover the dangers of SPAWNCHIMERA malware, an advanced cyber threat exploiting CVE-2025-0282 for stealthy attacks.
⤷ Title: North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:58:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Astrill VPN #BeaverTail #InvisibleFerret #OtterCookie #PurpleBravo
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:58:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Astrill VPN #BeaverTail #InvisibleFerret #OtterCookie #PurpleBravo
Daily CyberSecurity
North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage
Uncover the dangers of North Korea’s IT worker scam. Learn how it threatens global tech with espionage and fraud.
⤷ Title: AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:53:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMD #CVE_2024_21924 #EPYC #Ryzen Threadripper Processors
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:53:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMD #CVE_2024_21924 #EPYC #Ryzen Threadripper Processors
Daily CyberSecurity
AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors
Learn about CVE-2024-21924's impact on AMD processors and the high-severity vulnerabilities addressed by recent security patches.
⤷ Title: Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:48:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer overflow vulnerabilities #CVE_2022_0185 #CVE_2023_6549 #CVE_2024_38812 #CVE_2024_49138 #CVE_2025_0282 #CVE_2025_21333
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:48:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer overflow vulnerabilities #CVE_2022_0185 #CVE_2023_6549 #CVE_2024_38812 #CVE_2024_49138 #CVE_2025_0282 #CVE_2025_21333
Daily CyberSecurity
Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning
Learn about buffer overflows vulnerabilities and how they threaten software security and infrastructure. Stay informed today.
⤷ Title: Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:41:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_25198
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:41:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_25198
Daily CyberSecurity
Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198)
Learn about CVE-2025-25198 and how it affects mailcow's password reset feature. Stay secure with the latest patch details.
⤷ Title: FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:39:30 +0000
════════════════════════
⌗ Tags: #Malware #FINALDRAFT Malware #PATHLOADER
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:39:30 +0000
════════════════════════
⌗ Tags: #Malware #FINALDRAFT Malware #PATHLOADER
Daily CyberSecurity
FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication
Explore FINALDRAFT Malware, a new threat using Microsoft Outlook drafts for stealthy communication and cyberespionage.
⤷ Title: CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia’s BadPilot Campaign
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:31:25 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability #APT44 #BadPilot #BadPilot campaign #BlackEnergy Lite #CVE_2021_34473 #CVE_2022_41352 #CVE_2023_48788 #CVE_2024_1709 #SANDWORM #Seashell Blizzard #ShadowLink
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:31:25 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability #APT44 #BadPilot #BadPilot campaign #BlackEnergy Lite #CVE_2021_34473 #CVE_2022_41352 #CVE_2023_48788 #CVE_2024_1709 #SANDWORM #Seashell Blizzard #ShadowLink
Daily CyberSecurity
CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia's BadPilot Campaign
Uncover the threats posed by Seashell Blizzard, a cyber espionage group behind the BadPilot campaign targeting critical sectors.
⤷ Title: Fake ‘Adobe Drive X’ App Sneaks Through Microsoft Login to Steal Credentials
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:28:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #Adobe Drive X
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:28:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #Adobe Drive X
Daily CyberSecurity
Fake 'Adobe Drive X' App Sneaks Through Microsoft Login to Steal Credentials
Uncover the dangers of Adobe Drive X in the new phishing campaign targeting Microsoft users. Stay informed and secure.
⤷ Title: HackTheBox - Magic
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:05:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #penetration_testing #hackthebox #sql_injection
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:05:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #penetration_testing #hackthebox #sql_injection
Medium
HackTheBox - Magic
Summary
⤷ Title: OAuth: state parameter
════════════════════════
𐀪 Author: Ninjeeter
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:52:49 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #hacking #security #web_development
════════════════════════
𐀪 Author: Ninjeeter
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:52:49 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #hacking #security #web_development
Medium
OAuth: state parameter
At a high level, OAuth facilitates data sharing between two different applications.
⤷ Title: Reverse Engineering a Cocos2dx-JS Game
════════════════════════
𐀪 Author: Felipe Cavalcanti
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:36:24 GMT
════════════════════════
⌗ Tags: #cocos2dx #ai #games #hacking #reverse_engineering
════════════════════════
𐀪 Author: Felipe Cavalcanti
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:36:24 GMT
════════════════════════
⌗ Tags: #cocos2dx #ai #games #hacking #reverse_engineering
Medium
Reverse Engineering a Cocos2dx-JS Game
Reverse engineering is often seen as a dark art, reserved for hackers and security researchers. But for me, it’s a hobby — a way to…
⤷ Title: The Rise of AI-Driven Cyberattacks: How Hackers Are Using AI for Smarter, More Dangerous Attacks
════════════════════════
𐀪 Author: Hemangibavasiya
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:47:04 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #ai_powered #phishing #deepfakes
════════════════════════
𐀪 Author: Hemangibavasiya
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:47:04 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #ai_powered #phishing #deepfakes
Medium
The Rise of AI-Driven Cyberattacks: How Hackers Are Using AI for Smarter, More Dangerous Attacks
Introduction
⤷ Title: MOFs & Manipulating WMI Events
════════════════════════
𐀪 Author: Ali Bahri
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:37:39 GMT
════════════════════════
⌗ Tags: #windows #wmi #threat_hunting #cybersecurity #threat_intelligence
════════════════════════
𐀪 Author: Ali Bahri
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:37:39 GMT
════════════════════════
⌗ Tags: #windows #wmi #threat_hunting #cybersecurity #threat_intelligence
Medium
MOFs & Manipulating WMI Events
What Are MOF Files Doing on Your Computer?
⤷ Title: The AI Disguise That Nearly Destroyed HyperCorp: A Cybersecurity Nightmare
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:28:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #data #cyber_security_awareness #email #ai
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:28:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #data #cyber_security_awareness #email #ai
Medium
The AI Disguise That Nearly Destroyed HyperCorp: A Cybersecurity Nightmare
In 2025, one of the most unexpected and bizarre cybersecurity incidents rocked HyperCorp, a leading multinational tech giant. This was no…
⤷ Title: What It Takes to Hunt for Phishing Domains: A Simple Beginner’s Guide
════════════════════════
𐀪 Author: Sunthara Moorthy K
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:28:03 GMT
════════════════════════
⌗ Tags: #phishing #osint_investigation #open_source #technology #cybersecurity
════════════════════════
𐀪 Author: Sunthara Moorthy K
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:28:03 GMT
════════════════════════
⌗ Tags: #phishing #osint_investigation #open_source #technology #cybersecurity
Medium
What It Takes to Hunt for Phishing Domains: A Simple Beginner’s Guide
Hi all 👋, This post will cover essential knowledge and resources needed to start hunting phishing sites.
👍1
⤷ Title: HackTheBox - Two Million Writeup
════════════════════════
𐀪 Author: Jordilla
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:20:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #hackthebox #ethical_hacking
════════════════════════
𐀪 Author: Jordilla
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:20:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #hackthebox #ethical_hacking
Medium
HackTheBox - Two Million Writeup
TwoMillion is a special HackTheBox release celebrating 2,000,000 members. It was launched as a retired machine, meaning there are no points…
⤷ Title: RST TI Report Digest: 17 Feb 2025
════════════════════════
𐀪 Author: RST Cloud
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:54:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #cyber_threat_intelligence #ti_report_digest
════════════════════════
𐀪 Author: RST Cloud
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:54:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #cyber_threat_intelligence #ti_report_digest
Medium
RST TI Report Digest: 17 Feb 2025
We processed 52 threat intelligence articles that we collected last week and are sharing a short summary of 10 of them with IoCs.
⤷ Title: MystSafe: The Unseen Secret Vault for Those Who Need It Most
════════════════════════
𐀪 Author: MystSafe
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:41:21 GMT
════════════════════════
⌗ Tags: #blockchain #web3 #cybersecurity #productivity #privacy
════════════════════════
𐀪 Author: MystSafe
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:41:21 GMT
════════════════════════
⌗ Tags: #blockchain #web3 #cybersecurity #productivity #privacy
Medium
MystSafe: The Unseen Secret Vault for Those Who Need It Most
Imagine you’re an investigative journalist uncovering a major story, or an activist on the frontline of social change. Maybe you’re a crypto holder securing digital assets in an uncertain global…