⤷ Title: Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 02 May 2025 12:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 02 May 2025 12:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 01 May 2025 21:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 01 May 2025 21:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: 200+ Fake Retail Sites Used in New Wave of Subscription Scams
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:01:57 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #bitdefender #Cyber Attack #Fraud #Scam #Social Engineering #Social Media #Subscription
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:01:57 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #bitdefender #Cyber Attack #Fraud #Scam #Social Engineering #Social Media #Subscription
Hackread
200+ Fake Retail Sites Used in New Wave of Subscription Scams
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: npm Malware Targets Crypto Wallets, MongoDB; Code Points to Turkey
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:00:30 +0000
════════════════════════
⌗ Tags: #Security #Malware #Crypto #Cyber Attack #Cybersecurity #MongoDB #NPM #Python #TURKEY #Wallets
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:00:30 +0000
════════════════════════
⌗ Tags: #Security #Malware #Crypto #Cyber Attack #Cybersecurity #MongoDB #NPM #Python #TURKEY #Wallets
Hackread
npm Malware Targets Crypto Wallets, MongoDB; Code Points to Turkey
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: Scammers Use Spain-Portugal Blackout for TAP Air Refund Phishing Scam
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 01 May 2025 19:39:26 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #Cyber Attack #Cybersecurity #europe #Fraud #Phishing #Portugal #Scam #Spain #TAP Air
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 01 May 2025 19:39:26 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #Cyber Attack #Cybersecurity #europe #Fraud #Phishing #Portugal #Scam #Spain #TAP Air
Hackread
Scammers Use Spain-Portugal Blackout for TAP Air Refund Phishing Scam
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 05:27:13 +0000
════════════════════════
⌗ Tags: #Web AppSec #Burp Suite extension #token
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 05:27:13 +0000
════════════════════════
⌗ Tags: #Web AppSec #Burp Suite extension #token
Penetration Testing Tools
sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens
Sessionless is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens: Django TimestampSigner
⤷ Title: SentryPeer: distributed list of bad IP addresses and phone numbers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 05:22:58 +0000
════════════════════════
⌗ Tags: #Data Forensics #HoneyPot #SIP Honeypot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 05:22:58 +0000
════════════════════════
⌗ Tags: #Data Forensics #HoneyPot #SIP Honeypot
Penetration Testing Tools
SentryPeer: distributed list of bad IP addresses and phone numbers
SentryPeer is a distributed list of bad IP addresses and phone numbers collected via a SIP Honeypot. This is basically a fraud detection tool
⤷ Title: Microsoft Authenticator to Drop Password Manager Features by August 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:34:53 +0000
════════════════════════
⌗ Tags: #Technology #android #Autofill #ios #Microsoft Authenticator #microsoft edge #Passkeys #password manager #Password Sync
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:34:53 +0000
════════════════════════
⌗ Tags: #Technology #android #Autofill #ios #Microsoft Authenticator #microsoft edge #Passkeys #password manager #Password Sync
Daily CyberSecurity
Microsoft Authenticator to Drop Password Manager Features by August 2025
Microsoft is phasing out password saving and autofill in Authenticator. Saved passwords will sync to Edge starting June 2025. Plan your migration!
⤷ Title: Google Gemini Adds AI Image Editing with Natural Language Prompts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:47:01 +0000
════════════════════════
⌗ Tags: #Technology #AI Image Editing #artificial intelligence #Google Gemini #Image Manipulation #Natural Language #SynthID
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:47:01 +0000
════════════════════════
⌗ Tags: #Technology #AI Image Editing #artificial intelligence #Google Gemini #Image Manipulation #Natural Language #SynthID
Daily CyberSecurity
Google Gemini Adds AI Image Editing with Natural Language Prompts
Google's Gemini now lets you edit images using text prompts! Change backgrounds, add elements, and more. Includes SynthID watermarking.
⤷ Title: Apple Revises U.S. App Store Rules After Court Ruling in Epic Games Case
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:41:53 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #court ruling #Epic Games #Fortnite #Spotify #third_party payments #U.S. tech policy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:41:53 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #court ruling #Epic Games #Fortnite #Spotify #third_party payments #U.S. tech policy
Daily CyberSecurity
Apple Revises U.S. App Store Rules After Court Ruling in Epic Games Case
Apple updates U.S. App Store rules to allow external links and third-party payments after losing antitrust case brought by Epic Games.
⤷ Title: Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:35:51 +0000
════════════════════════
⌗ Tags: #Technology #AGPL #Amazon AWS #cloud #database #Google Cloud #Licensing #open_source #Redis #SSPL
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:35:51 +0000
════════════════════════
⌗ Tags: #Technology #AGPL #Amazon AWS #cloud #database #Google Cloud #Licensing #open_source #Redis #SSPL
Daily CyberSecurity
Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing
Redis adopts AGPLv3 alongside its SSPL license, returning to open source for Redis 8. Aims to boost community and address cloud provider concerns.
⤷ Title: Microsoft Pushes Passwordless: New Accounts Default to Passkeys & MFA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:28:43 +0000
════════════════════════
⌗ Tags: #Technology #Account Security #authentication #Login #MFA #Microsoft #Multi_Factor Authentication #Passkeys #Passwordless
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:28:43 +0000
════════════════════════
⌗ Tags: #Technology #Account Security #authentication #Login #MFA #Microsoft #Multi_Factor Authentication #Passkeys #Passwordless
Daily CyberSecurity
Microsoft Pushes Passwordless: New Accounts Default to Passkeys & MFA
Microsoft will soon default new accounts to passwordless login with passkeys & MFA. Existing users can still choose passwords. Learn more!
⤷ Title: Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:43:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser engine #CVE_2025_47154 #cybersecurity #Exploit #javascript #Ladybird #LibJS #use after free
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:43:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser engine #CVE_2025_47154 #cybersecurity #Exploit #javascript #Ladybird #LibJS #use after free
Daily CyberSecurity
Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
A critical use-after-free (UAF) vulnerability (CVE-2025-47154) in the Ladybird browser engine's LibJS component allows for potential code execution.
⤷ Title: CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:33:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Couchbase #CVE_2025_46619 #Cybersecurity Advisory #database security #lfi #local file inclusion #nosql #windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:33:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Couchbase #CVE_2025_46619 #Cybersecurity Advisory #database security #lfi #local file inclusion #nosql #windows
Daily CyberSecurity
CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
Couchbase Server for Windows hit by LFI flaw CVE-2025-46619 (CVSS 8.7). Upgrade to 7.6.4 or 7.2.7 to prevent unauthorized file access.
⤷ Title: SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:25:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_2170 #Cybersecurity Advisory #network_security #SMA1000 #SonicWall #ssrf #vulnerability patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:25:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_2170 #Cybersecurity Advisory #network_security #SMA1000 #SonicWall #ssrf #vulnerability patch
Daily CyberSecurity
SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
SonicWall fixes CVE-2025-2170, an SSRF flaw in SMA1000 appliances. Users urged to update to platform-hotfix 12.4.3-02925 or later to stay secure.
⤷ Title: Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:20:40 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #gmail #malware #PyPI #Python #SMTP tunneling #Socket #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:20:40 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #gmail #malware #PyPI #Python #SMTP tunneling #Socket #supply chain attack
Daily CyberSecurity
Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.
⤷ Title: Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:14:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #Cobalt Strike #Eye Pyramid #Intrinsec #RansomHub #Ransomware C2 #Rhysida #Vice Society
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:14:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #Cobalt Strike #Eye Pyramid #Intrinsec #RansomHub #Ransomware C2 #Rhysida #Vice Society
Daily CyberSecurity
Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.
⤷ Title: Bitdefender Exposes Sophisticated Subscription-Based Mystery Box Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:10:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #credit card theft #financial fraud #mystery box scam #Online scams #social media scams #subscription fraud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:10:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #credit card theft #financial fraud #mystery box scam #Online scams #social media scams #subscription fraud
Daily CyberSecurity
Bitdefender Exposes Sophisticated Subscription-Based Mystery Box Scams
Bitdefender uncovers a large network of convincing mystery box scams on social media stealing credit card data via hidden subscriptions. Watch out!
⤷ Title: NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:05:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23245 #Framework Vulnerability #HMAC Encryption #nvidia #Python Executor #TensorRT_LLM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:05:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23245 #Framework Vulnerability #HMAC Encryption #nvidia #Python Executor #TensorRT_LLM
Daily CyberSecurity
NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM
NVIDIA patches CVE-2025-23245 in TensorRT-LLM, fixing a high-risk flaw that could allow code execution. Users urged to update to v0.18.2 immediately.
⤷ Title: SonicBoom, From Stolen Tokens to Remote Shells - SonicWall SMA (CVE-2023-44221, CVE-2024-38475)
════════════════════════
𐀪 Author: Sina Kheirkhah (@SinSinology)
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:31:04 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Sina Kheirkhah (@SinSinology)
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:31:04 GMT
════════════════════════
⌗ Tags: No_Tags
watchTowr Labs
SonicBoom, From Stolen Tokens to Remote Shells - SonicWall SMA (CVE-2023-44221, CVE-2024-38475)
Another day, another edge device being targeted - it’s a typical Thursday!
In today’s blog post, we’re excited to share our previously private analysis of the now exploited in-the-wild N-day vulnerabilities affecting SonicWall’s SMA100 appliance. Over the…
In today’s blog post, we’re excited to share our previously private analysis of the now exploited in-the-wild N-day vulnerabilities affecting SonicWall’s SMA100 appliance. Over the…
⤷ Title: The $2500 bug: Remote Code Execution via Supply Chain Attack
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:16 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hackerone #bug_bounty #bug_bounty_tips #hacking
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:16 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hackerone #bug_bounty #bug_bounty_tips #hacking
Medium
💵 The $2500 bug: Remote Code Execution via Supply Chain Attack
Hey there!😇