⤷ Title: DoNot APT Expands to Europe: Targets Foreign Ministry with LoptikMod Malware via Google Drive Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:11:52 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT_C_35 #Cyberespionage #cybersecurity #DONOT APT #Europe #Foreign Affairs #Google Drive #LoptikMod #malware #Mint Tempest #Origami Elephant #phishing #Trellix
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:11:52 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT_C_35 #Cyberespionage #cybersecurity #DONOT APT #Europe #Foreign Affairs #Google Drive #LoptikMod #malware #Mint Tempest #Origami Elephant #phishing #Trellix
Daily CyberSecurity
DoNot APT Expands to Europe: Targets Foreign Ministry with LoptikMod Malware via Google Drive Phishing
DoNot APT (APT-C-35) expands its cyber-espionage to a European foreign affairs ministry, using spear-phishing with Google Drive links to deliver the LoptikMod backdoor.
⤷ Title: Iranian Ransomware “Pay2Key.I2P” Resurfaces on I2P Network, Offering 80% Profit for Targeting Western Enemies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:08:30 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fox Kitten #geopolitics #I2P network #Iranian APT #Mimic Ransomware #Pay2Key.I2P #RaaS #ransomware #Ransomware_as_a_Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:08:30 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fox Kitten #geopolitics #I2P network #Iranian APT #Mimic Ransomware #Pay2Key.I2P #RaaS #ransomware #Ransomware_as_a_Service
Daily CyberSecurity
Iranian Ransomware "Pay2Key.I2P" Resurfaces on I2P Network, Offering 80% Profit for Targeting Western Enemies
Iranian-backed "Pay2Key.I2P" ransomware resurfaced on I2P, offering 80% profit for attacks on Western targets. Linked to Fox Kitten & Mimic, it merges cybercrime with geopolitical motives.
⤷ Title: Helm Flaw (CVE-2025-53547): Local Code Execution via Malicious Chart.yaml & Symlinks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:00:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chart.lock #Chart.yaml #CVE_2025_53547 #cybersecurity #Kubernetes #LCE #Local Code Execution #Package manager #Symlinks #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:00:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chart.lock #Chart.yaml #CVE_2025_53547 #cybersecurity #Kubernetes #LCE #Local Code Execution #Package manager #Symlinks #Vulnerability
Daily CyberSecurity
Helm Flaw (CVE-2025-53547): Local Code Execution via Malicious Chart.yaml & Symlinks
A flaw in Helm (CVE-2025-53547, CVSS 8.5) allows local code execution when updating dependencies via a malicious Chart.yaml and symlinked Chart.lock file
⤷ Title: Cryptographic Failures: La Guía Definitiva para Hacking, Bug Bounty y Seguridad Web
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:01:44 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #bug_bounty #ethical_hacking #penetration_testing
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:01:44 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #bug_bounty #ethical_hacking #penetration_testing
Medium
Cryptographic Failures: La Guía Definitiva para Hacking, Bug Bounty y Seguridad Web
Protege tus Datos. Descubre y Mitiga las Vulnerabilidades Criptográficas Más Críticas.
⤷ Title: Critical IDOR Chain — Edit Any User’s Role, Activate/Deactivate Accounts, and Escalate Privileges
════════════════════════
𐀪 Author: B0d4
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 23:04:49 GMT
════════════════════════
⌗ Tags: #bounty_program #security #idor #web_security #bug_bounty
════════════════════════
𐀪 Author: B0d4
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 23:04:49 GMT
════════════════════════
⌗ Tags: #bounty_program #security #idor #web_security #bug_bounty
Medium
🔓Critical IDOR Chain — Edit Any User’s Role, Activate/Deactivate Accounts, and Escalate Privileges
Summary:
⤷ Title: How to become a “HACKER”
════════════════════════
𐀪 Author: Omar Shraideh
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:44:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #hacking #tech #programming
════════════════════════
𐀪 Author: Omar Shraideh
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:44:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #hacking #tech #programming
Medium
How to become a “HACKER”
Hey, everyone!
I’m Omar Shraideh, and I’ve been in cybersecurity for nearly three years. I didn’t come from a tech family or go to…
I’m Omar Shraideh, and I’ve been in cybersecurity for nearly three years. I didn’t come from a tech family or go to…
⤷ Title: Inside the Adversary’s Mindset: The #1 Skill Missing From Most Cyber Defenders
════════════════════════
𐀪 Author: Ahmed Awad ( NullC0d3 )
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:18:02 GMT
════════════════════════
⌗ Tags: #education #cybersecurity #hacking #leadership #learning
════════════════════════
𐀪 Author: Ahmed Awad ( NullC0d3 )
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:18:02 GMT
════════════════════════
⌗ Tags: #education #cybersecurity #hacking #leadership #learning
Medium
Inside the Adversary’s Mindset: The #1 Skill Missing From Most Cyber Defenders
“The most dangerous attacker isn’t the one with zero-days — it’s the one who studies you longer than you studied them.”
⤷ Title: McDonald’s Australia Data Breach via AI Chatbot ‘Olivia’: A Cybersecurity Breakdown
════════════════════════
𐀪 Author: Sayan Raha
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:07:21 GMT
════════════════════════
⌗ Tags: #hacker #ai #cyber_security_awareness #hacking #cybersecurity
════════════════════════
𐀪 Author: Sayan Raha
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:07:21 GMT
════════════════════════
⌗ Tags: #hacker #ai #cyber_security_awareness #hacking #cybersecurity
Medium
McDonald’s Australia Data Breach via AI Chatbot ‘Olivia’: A Cybersecurity Breakdown
📌 Introduction: When Hiring Automation Becomes a Vulnerability
⤷ Title: Windows Threat Detection 1: TryHackMe Answers
════════════════════════
𐀪 Author: Ansul Kotadia
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:22:15 GMT
════════════════════════
⌗ Tags: #tryhackme #windows_threat_detection #tryhackme_walkthrough #cybersecurity #tryhackme_writeup
════════════════════════
𐀪 Author: Ansul Kotadia
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:22:15 GMT
════════════════════════
⌗ Tags: #tryhackme #windows_threat_detection #tryhackme_walkthrough #cybersecurity #tryhackme_writeup
Medium
Windows Threat Detection 1: TryHackMe Answers
Explore common Initial Access methods on Windows and learn how to detect them.
⤷ Title: PortSwigger Lab: Manipulating the WebSocket handshake to exploit vulnerabilities writeup…
════════════════════════
𐀪 Author: awes0meness
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:57:47 GMT
════════════════════════
⌗ Tags: #portswigger #burpsuite #web_app_security #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: awes0meness
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:57:47 GMT
════════════════════════
⌗ Tags: #portswigger #burpsuite #web_app_security #cybersecurity #penetration_testing
Medium
PortSwigger Lab: Manipulating the WebSocket handshake to exploit vulnerabilities writeup (Websockets)
This online shop has a live chat feature implemented using WebSockets.
⤷ Title: PortSwigger Lab: Manipulating WebSocket messages to exploit vulnerabilities writeup (Websockets)
════════════════════════
𐀪 Author: awes0meness
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:53:48 GMT
════════════════════════
⌗ Tags: #burpsuite #cybersecurity #portswigger #web_application_security #penetration_testing
════════════════════════
𐀪 Author: awes0meness
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:53:48 GMT
════════════════════════
⌗ Tags: #burpsuite #cybersecurity #portswigger #web_application_security #penetration_testing
Medium
PortSwigger Lab: Manipulating WebSocket messages to exploit vulnerabilities writeup (Websockets)
This online shop has a live chat feature implemented using WebSockets.
⤷ Title: I walked into a Fortune 500 HQ … No one stopped me.
════════════════════════
𐀪 Author: JD Brooks
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 23:16:38 GMT
════════════════════════
⌗ Tags: #red_team #social_engineering #cybersecurity #penetration_testing #physical_security
════════════════════════
𐀪 Author: JD Brooks
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 23:16:38 GMT
════════════════════════
⌗ Tags: #red_team #social_engineering #cybersecurity #penetration_testing #physical_security
Medium
I walked into a Fortune 500 HQ … No one stopped me.
The front desk was backed up…couriers, delivery guys, two different clipboards getting passed around. Loud, disorganized. Just the way I…
⤷ Title: Chocolate Factory TryHackMe CTF Çözümü
════════════════════════
𐀪 Author: Beratcamm
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:16:16 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #cybersecurity #privilege_escalation #ctf_writeup
════════════════════════
𐀪 Author: Beratcamm
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:16:16 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #cybersecurity #privilege_escalation #ctf_writeup
Medium
Chocolate Factory TryHackMe CTF Çözümü
Merhaba, bu yazımda TryHackMe’deki Chocolate Factory CTF’inin çözümünü paylaşacağım.
⤷ Title: Ethcode Compromised: Over 6,000 Devs Hit by Malicious VS Code Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:57:45 +0000
════════════════════════
⌗ Tags: #Malware #cryptocurrency #cybersecurity #developers #Ethcode #Ethereum #EVM #malware #open source #ReversingLabs #smart contracts #supply chain attack #VS Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:57:45 +0000
════════════════════════
⌗ Tags: #Malware #cryptocurrency #cybersecurity #developers #Ethcode #Ethereum #EVM #malware #open source #ReversingLabs #smart contracts #supply chain attack #VS Code
Penetration Testing Tools
Ethcode Compromised: Over 6,000 Devs Hit by Malicious VS Code Extension
A malicious update to the Ethcode VS Code extension compromised over 6,000 developers, highlighting a growing threat in open-source supply chain attacks.
⤷ Title: Windows 11 Beta Build 22631.5696: Critical Fixes for ReFS & Printing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:53:46 +0000
════════════════════════
⌗ Tags: #Windows #Beta #bug fix #File System #IPP #KB5062663 #Microsoft #network #printing #ReFS #Update #Windows 11
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:53:46 +0000
════════════════════════
⌗ Tags: #Windows #Beta #bug fix #File System #IPP #KB5062663 #Microsoft #network #printing #ReFS #Update #Windows 11
Penetration Testing Tools
Windows 11 Beta Build 22631.5696: Critical Fixes for ReFS & Printing
Windows 11 Beta Build 22631.5696 is out with crucial fixes for ReFS memory exhaustion, printing errors, and network issues. Expect stable release soon!
⤷ Title: Windows 11’s Black Screen of Death (BSOD) Rolls Out: Faster Reboots & Enterprise Recovery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:48:07 +0000
════════════════════════
⌗ Tags: #Windows #Black Screen of Death #BSOD #cumulative update #IT Administration #Microsoft #Rapid Machine Recovery #Release Preview #system crash #Windows 11
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:48:07 +0000
════════════════════════
⌗ Tags: #Windows #Black Screen of Death #BSOD #cumulative update #IT Administration #Microsoft #Rapid Machine Recovery #Release Preview #system crash #Windows 11
Daily CyberSecurity
Windows 11's Black Screen of Death (BSOD) Rolls Out: Faster Reboots & Enterprise Recovery
Windows 11's new black BSOD is here, rolling out to Release Preview. It promises faster reboots and includes "Quick Machine Recovery" for enterprise users.
⤷ Title: Android Canary: Google’s New Path to Early Access Features
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:25:42 +0000
════════════════════════
⌗ Tags: #Android #android #APIs #bugs #Canary #developer preview #features #google #Pixel #pre_release #software development #Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:25:42 +0000
════════════════════════
⌗ Tags: #Android #android #APIs #bugs #Canary #developer preview #features #google #Pixel #pre_release #software development #Updates
Daily CyberSecurity
Android Canary: Google's New Path to Early Access Features
Google introduces Android Canary, replacing Developer Preview, for earlier and continuous access to new Android features and APIs, ideal for developers.
⤷ Title: CitrixBleed 2: CVE-2025-5777 Joins CISA’s KEV Catalog Amid Active Exploitation Storm, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:13:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC #CISA KEV #Citrix #Citrix Bleed 2 #CVE_2025_5777 #cybersecurity #Exploited in Wild #Gateway #MFA Bypass #NetScaler #out_of_bounds read #Session Hijacking #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:13:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC #CISA KEV #Citrix #Citrix Bleed 2 #CVE_2025_5777 #cybersecurity #Exploited in Wild #Gateway #MFA Bypass #NetScaler #out_of_bounds read #Session Hijacking #Vulnerability
Daily CyberSecurity
CitrixBleed 2: CVE-2025-5777 Joins CISA’s KEV Catalog Amid Active Exploitation Storm, PoC Available
CISA adds critical CitrixBleed 2 (CVE-2025-5777, CVSS 9.2) to KEV, confirming active exploitation. Attackers are extracting session tokens to bypass MFA and hijack sessions on NetScaler ADC/Gateway
⤷ Title: Apache HTTP Server 2.4.64 Released: Patches 8 Vulnerabilities, Including HTTP Splitting, SSRF & DoS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 01:47:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache HTTP Server #CVE_2024_42516 #CVE_2024_43204 #CVE_2024_43394 #CVE_2024_47252 #CVE_2025_23048 #CVE_2025_49630 #CVE_2025_49812 #CVE_2025_53020 #dos #HTTP Response Splitting #HTTPD #Log Injection #security patch #ssrf #tls #Vulnerability #web server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 01:47:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache HTTP Server #CVE_2024_42516 #CVE_2024_43204 #CVE_2024_43394 #CVE_2024_47252 #CVE_2025_23048 #CVE_2025_49630 #CVE_2025_49812 #CVE_2025_53020 #dos #HTTP Response Splitting #HTTPD #Log Injection #security patch #ssrf #tls #Vulnerability #web server
Daily CyberSecurity
Apache HTTP Server 2.4.64 Released: Patches 8 Vulnerabilities, Including HTTP Splitting, SSRF & DoS
Apache HTTP Server 2.4.64 patches 8 vulnerabilities, including HTTP Response Splitting, SSRF, DoS, and TLS desync attacks. Upgrade immediately!
⤷ Title: Git Scanner : A Journey Through the Wild West of Exposed Git Repositories
════════════════════════
𐀪 Author: jpe1e
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:19:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #github #secrets
════════════════════════
𐀪 Author: jpe1e
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 02:19:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #github #secrets
Medium
Git Scanner : A Journey Through the Wild West of Exposed Git Repositories
The Harsh Reality