⤷ Title: CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Hijacking #CSRF #CVE_2025_43856 #cybersecurity #Immich #OAuth2 #open_source #Photo Management #Video Management #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Hijacking #CSRF #CVE_2025_43856 #cybersecurity #Immich #OAuth2 #open_source #Photo Management #Video Management #Vulnerability
Daily CyberSecurity
CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform
A flaw (CVE-2025-43856) in Immich allows account hijacking via a broken OAuth2 implementation (missing state parameter check). Update to v1.132.0 immediately!
⤷ Title: BlackSuit: New Royal/Conti Rebrand Hits With Speed, Stealth, & Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:00:30 +0000
════════════════════════
⌗ Tags: #Malware #BlackSuit #Cobalt Strike #Conti #Cybereason #cybersecurity #data exfiltration #PsExec #ransomware #Rclone #Royal Ransomware #threat actor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:00:30 +0000
════════════════════════
⌗ Tags: #Malware #BlackSuit #Cobalt Strike #Conti #Cybereason #cybersecurity #data exfiltration #PsExec #ransomware #Rclone #Royal Ransomware #threat actor
Daily CyberSecurity
BlackSuit: New Royal/Conti Rebrand Hits With Speed, Stealth, & Data Exfiltration
BlackSuit, a rebranded Royal/Conti ransomware, unleashes destructive multi-stage attacks. It uses Cobalt Strike, rclone for data exfil, and deletes shadow copies for stealth and speed.
⤷ Title: Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:22:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #analysis #technology #vulnerability #bug_bounty
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:22:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #analysis #technology #vulnerability #bug_bounty
Medium
Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis
Inside the logic flaws, weak sessions, and social engineering tactics defeating multi-factor authentication today.
⤷ Title: Automation in Bug Bounty Hunting: Best Tools and Techniques
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:19:05 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #vulnerability #bug_bounty #technology
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:19:05 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #vulnerability #bug_bounty #technology
Medium
Automation in Bug Bounty Hunting: Best Tools and Techniques
Streamline Your Bug Hunting Workflow with the Best Automation Tools and Strategies
⤷ Title: How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:49 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #penetration_testing #hacking #tips_and_tricks
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:49 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #penetration_testing #hacking #tips_and_tricks
Medium
How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts
Exposing a Critical Flaw in Authentication Security
⤷ Title: What the Heck Is an XSS Attack? I Finally Understood It with This Silly Example
════════════════════════
𐀪 Author: Alex Joyel Raj
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:31:59 GMT
════════════════════════
⌗ Tags: #cyber #xss_vulnerability #cybersecurity #hacking #xss_attack
════════════════════════
𐀪 Author: Alex Joyel Raj
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:31:59 GMT
════════════════════════
⌗ Tags: #cyber #xss_vulnerability #cybersecurity #hacking #xss_attack
Medium
What the Heck Is an XSS Attack? I Finally Understood It with This Silly Example
If you’ve heard of XSS but still don’t get it, this is for you.
⤷ Title: INSTALLING UBUNTU IN A VIRTUAL BOX
════════════════════════
𐀪 Author: Roland Nii Ayi Aryee
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:43:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #homelab #hacking #ubuntu #information_technology
════════════════════════
𐀪 Author: Roland Nii Ayi Aryee
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:43:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #homelab #hacking #ubuntu #information_technology
Medium
INSTALLING UBUNTU IN A VIRTUAL BOX
Running Ubuntu in VirtualBox is a safe and flexible way to explore Linux without altering your main system. This guide walks you through…
⤷ Title: RCE + ROOT-LEVEL ACCESS (CVSS 10.0):
════════════════════════
𐀪 Author: RABIU
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 12:15:28 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #web_security #bug_hunting #infosec
════════════════════════
𐀪 Author: RABIU
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 12:15:28 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #web_security #bug_hunting #infosec
Medium
🚨 RCE + ROOT-LEVEL ACCESS (CVSS 10.0):
Today, I explain how I discovered a critical root-level RCE (CVSS 10.0) in a Fortune 500 company’s infrastructure using only Chrome and…
⤷ Title: New Cyber Threat: AI-Powered Phishing Scams-How to Stay Safe in 2025
════════════════════════
𐀪 Author: The News English India
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:48:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #alerts #students #scam #india
════════════════════════
𐀪 Author: The News English India
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:48:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #alerts #students #scam #india
Medium
New Cyber Threat: AI-Powered Phishing Scams-How to Stay Safe in 2025
New Cyber Threat
⤷ Title: Zero to Trusted
════════════════════════
𐀪 Author: Suzette Becraft
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:44:34 GMT
════════════════════════
⌗ Tags: #tls_configuration #nginx #certificate_management #cybersecurity
════════════════════════
𐀪 Author: Suzette Becraft
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:44:34 GMT
════════════════════════
⌗ Tags: #tls_configuration #nginx #certificate_management #cybersecurity
Medium
Zero to Trusted
A Hands-On Guide to X.509 Certificates and Nginx Web Server TLS Configuration
⤷ Title: TRiSM for Agentic AI
════════════════════════
𐀪 Author: Tal Eliyahu
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:42:34 GMT
════════════════════════
⌗ Tags: #agentic_ai #llm #cybersecurity #artificial_intelligence #security
════════════════════════
𐀪 Author: Tal Eliyahu
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:42:34 GMT
════════════════════════
⌗ Tags: #agentic_ai #llm #cybersecurity #artificial_intelligence #security
Medium
TRiSM for Agentic AI
Agentic AI isn’t just about autonomy — it’s about coordination at scale. But when LLM-based agents share memory, call APIs, and reason…
⤷ Title: 7 Free WAF Solutions Compared: Which One Should You Use in 2025?
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:37:14 GMT
════════════════════════
⌗ Tags: #beginners_guide #safeline_waf #cybersecurity #waf
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:37:14 GMT
════════════════════════
⌗ Tags: #beginners_guide #safeline_waf #cybersecurity #waf
Medium
7 Free WAF Solutions Compared: Which One Should You Use in 2025?
A Web Application Firewall (WAF) sits between your users and your app, analyzing HTTP/HTTPS traffic and blocking malicious activity. Unlike…
⤷ Title: The Growing Need for Proxy Services in Cybersecurity
════════════════════════
𐀪 Author: Mason Johnson
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:30:44 GMT
════════════════════════
⌗ Tags: #residential_proxies #cybersecurity #tips
════════════════════════
𐀪 Author: Mason Johnson
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:30:44 GMT
════════════════════════
⌗ Tags: #residential_proxies #cybersecurity #tips
Medium
The Growing Need for Proxy Services in Cybersecurity
👉 Enhance Your Security with 9Proxy
⤷ Title: The SOC Is a Hub, Not a Silo: Rethinking the Role of Security Operations
════════════════════════
𐀪 Author: Rob Egan
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:24:51 GMT
════════════════════════
⌗ Tags: #digital_defense #cybersecurity #security_operation_center #incident_response
════════════════════════
𐀪 Author: Rob Egan
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:24:51 GMT
════════════════════════
⌗ Tags: #digital_defense #cybersecurity #security_operation_center #incident_response
Medium
The SOC Is a Hub, Not a Silo: Rethinking the Role of Security Operations
Security Operations Centers (SOCs) have evolved well beyond their origins as alert triage teams. In today’s dynamic threat landscape, the…
⤷ Title: The Invisible Watchers: How Your Digital Life Is Exposed
════════════════════════
𐀪 Author: Visir
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:56 GMT
════════════════════════
⌗ Tags: #social_media_safety #cybersecurity #data_protection #influencer_safety #telecom_privacy
════════════════════════
𐀪 Author: Visir
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:56 GMT
════════════════════════
⌗ Tags: #social_media_safety #cybersecurity #data_protection #influencer_safety #telecom_privacy
Medium
📡The Invisible Watchers: How Your Digital Life Is Exposed
From telecom networks to social media oversharing, your digital footprint is bigger than you think
⤷ Title: كيمي كيه 2: أقوى نموذج ذكاء اصطناعي صيني ينافس شات جي بي تي
════════════════════════
𐀪 Author: katibatech
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:07:22 GMT
════════════════════════
⌗ Tags: #kimi_k2 #ai #cybersecurity #future #medium
════════════════════════
𐀪 Author: katibatech
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:07:22 GMT
════════════════════════
⌗ Tags: #kimi_k2 #ai #cybersecurity #future #medium
Medium
كيمي كيه 2: أقوى نموذج ذكاء اصطناعي صيني ينافس شات جي بي تي
كيمي كيه 2اقوي نموذج ذكاء اصطناعي صيني ينافس جى بى تى
⤷ Title: How Proxies and VPNs Are Essential for Business Cybersecurity
════════════════════════
𐀪 Author: Techno Lady
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:06:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #residential_proxies
════════════════════════
𐀪 Author: Techno Lady
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:06:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #residential_proxies
Medium
How Proxies and VPNs Are Essential for Business Cybersecurity
👉 Discover 9Proxy’s Solutions
⤷ Title: How I Earned $780 Using Bug Bounty (As a Beginner)
════════════════════════
𐀪 Author: Rashadul Islam
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:46:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #freelancing #earnings #cybersecurity #hacking
════════════════════════
𐀪 Author: Rashadul Islam
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:46:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #freelancing #earnings #cybersecurity #hacking
Medium
How I Earned $780 Using Bug Bounty (As a Beginner)
Last month, I earned $780 from bug bounty programs while balancing my day job and studies. This might not sound like a lot for some, but…
⤷ Title: Find High-Quality Subdomains Using Subfinder, API Keys, FFUF & SubEnum
════════════════════════
𐀪 Author: err0rgod
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:12:14 GMT
════════════════════════
⌗ Tags: #information_technology #hacking #cybersecurity #technology #bug_bounty
════════════════════════
𐀪 Author: err0rgod
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:12:14 GMT
════════════════════════
⌗ Tags: #information_technology #hacking #cybersecurity #technology #bug_bounty
Medium
Find High-Quality Subdomains Using Subfinder, API Keys, FFUF & SubEnum
Subdomain enumeration is a crucial step in reconnaissance. Whether you’re bug hunting or doing red teaming, identifying live and meaningful…
⤷ Title: What Are Some Legal & Ethical Ways to Monitor Someone’s Phone Without Using Trojans or Spyware?
════════════════════════
𐀪 Author: Sajjad Hussain
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:28:05 GMT
════════════════════════
⌗ Tags: #monitoring #ethical_hacking #phone #hacking #ethical_hacking_training
════════════════════════
𐀪 Author: Sajjad Hussain
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:28:05 GMT
════════════════════════
⌗ Tags: #monitoring #ethical_hacking #phone #hacking #ethical_hacking_training
Medium
What Are Some Legal & Ethical Ways to Monitor Someone’s Phone Without Using Trojans or Spyware?
Before your brain jumps into hacker mode or Googling shady apps, take a breath. You don’t need to infect a device with a Trojan. Never…
⤷ Title: DefenseArk #ThreatIntelThursday | Inference Attacks and Aggregation Attacks
════════════════════════
𐀪 Author: Kalpitha S
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:27:09 GMT
════════════════════════
⌗ Tags: #threat_intelligence #malware #cybersecurity #hacking #aggregation
════════════════════════
𐀪 Author: Kalpitha S
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 03:27:09 GMT
════════════════════════
⌗ Tags: #threat_intelligence #malware #cybersecurity #hacking #aggregation
Medium
DefenseArk #ThreatIntelThursday | Inference Attacks and Aggregation Attacks 🔍
This article was originally published on Mar 11, 2021, written by Ted Udelson