⤷ Title: BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:32:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BitlockMove #COM Hijacking #cybersecurity #DCOM #Defensive Telemetry #Lateral Movement #Proof of Concept #Red Team #Windows Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:32:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BitlockMove #COM Hijacking #cybersecurity #DCOM #Defensive Telemetry #Lateral Movement #Proof of Concept #Red Team #Windows Security
Penetration Testing Tools
BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking
"BitlockMove" PoC demonstrates a novel lateral movement technique abusing BitLocker DCOM/COM hijacking to execute code in a logged-in user's session without credential theft.
⤷ Title: AMD Patches Hint at Next-Gen RDNA 5 or Enhanced GPU Architecture in Linux Driver
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:27:51 +0000
════════════════════════
⌗ Tags: #Linux #Technology #AMD #AMDGPU #GFXHUB 12.1 #GPU #Hardware News #Kernel Development #Linux driver #RDNA 4 #RDNA 5
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:27:51 +0000
════════════════════════
⌗ Tags: #Linux #Technology #AMD #AMDGPU #GFXHUB 12.1 #GPU #Hardware News #Kernel Development #Linux driver #RDNA 4 #RDNA 5
Penetration Testing Tools
AMD Patches Hint at Next-Gen RDNA 5 or Enhanced GPU Architecture in Linux Driver
AMD is adding support for mysterious new GPUs (GFXHUB 12.1) to the Linux driver, suggesting either a refined RDNA 4 design or the unannounced next-gen RDNA 5/UDNA architecture.
⤷ Title: Microsoft Integrates Sysmon Natively into Windows 11 & Server 2025
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:25:18 +0000
════════════════════════
⌗ Tags: #Windows #Incident Response #Microsoft #Secure Future Initiative #Security Telemetry #security tool #SIEM #Sysmon #Windows 11 #Windows Server 2025
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:25:18 +0000
════════════════════════
⌗ Tags: #Windows #Incident Response #Microsoft #Secure Future Initiative #Security Telemetry #security tool #SIEM #Sysmon #Windows 11 #Windows Server 2025
Penetration Testing Tools
Microsoft Integrates Sysmon Natively into Windows 11 & Server 2025
Sysmon capabilities are now natively integrated into Windows 11 and Server 2025, providing built-in security telemetry for process and network monitoring via Windows Update.
⤷ Title: Operation WrtHug: 50,000+ Outdated ASUS Routers Hacked for Covert Botnet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:22:52 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AiCloud #ASUS Routers #BOTNET #China APT #cyber attack #network security #Outdated Firmware #SecurityScorecard #WrtHug
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:22:52 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AiCloud #ASUS Routers #BOTNET #China APT #cyber attack #network security #Outdated Firmware #SecurityScorecard #WrtHug
Penetration Testing Tools
Operation WrtHug: 50,000+ Outdated ASUS Routers Hacked for Covert Botnet
Operation WrtHug compromised over 50,000 outdated ASUS routers (RT-AC, DSL-AC series) using old flaws to build a covert botnet, likely linked to Chinese threat actors.
⤷ Title: FortiWeb Alert: New Authenticated Command Injection Flaw (CVE-2025-58034) Actively Exploited
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:19:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Command Injection #CVE_2025_58034 #Fortinet #FortiWeb #network security #Patch #RCE #vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:19:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Command Injection #CVE_2025_58034 #Fortinet #FortiWeb #network security #Patch #RCE #vulnerability
Penetration Testing Tools
FortiWeb Alert: New Authenticated Command Injection Flaw (CVE-2025-58034) Actively Exploited
Fortinet confirms a new, actively exploited command injection flaw (CVE-2025-58034) in FortiWeb, which CISA mandates be patched within 7 days. Update immediately!
⤷ Title: Urgent Patch: 7-Zip Flaw (CVE-2025-11001) Actively Exploited for Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:18:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #7_Zip #CVE_2025_11001 #remote code execution #Security Advisory #Symlink #vulnerability #windows #ZIP File
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:18:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #7_Zip #CVE_2025_11001 #remote code execution #Security Advisory #Symlink #vulnerability #windows #ZIP File
Penetration Testing Tools
Urgent Patch: 7-Zip Flaw (CVE-2025-11001) Actively Exploited for Code Execution
NHS Digital warns that a high-severity 7-Zip symbolic link flaw (CVE-2025-11001) is being actively weaponized to execute arbitrary code. Update to 7-Zip 25.00 now!
⤷ Title: ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:14:07 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AI Cluster #Cryptojacking #CVE_2023_48022 #cybersecurity #GPU Mining #misconfiguration #Ray Framework #RCE #ShadowRay
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:14:07 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AI Cluster #Cryptojacking #CVE_2023_48022 #cybersecurity #GPU Mining #misconfiguration #Ray Framework #RCE #ShadowRay
Penetration Testing Tools
ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking
The ShadowRay 2.0 campaign exploits the unauthenticated Ray Jobs API (CVE-2023-48022) in over 200,000 exposed instances to deploy a self-propagating cryptomining botnet.
⤷ Title: Google Brings AirDrop Compatibility to Android’s Quick Share Using Rust-Hardened Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 18:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 18:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
❤1
⤷ Title: Why IT Admins Choose Samsung for Mobile Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 21:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 21:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: ShinyHunters Breach Gainsight Apps on Salesforce, Claim Data from 1000 Firms
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 15:24:13 +0000
════════════════════════
⌗ Tags: #Hacking News #Security #Cyber Attack #Cybersecurity #data breach #Gainsight #Privacy #Salesforce #ShinyHunters
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 15:24:13 +0000
════════════════════════
⌗ Tags: #Hacking News #Security #Cyber Attack #Cybersecurity #data breach #Gainsight #Privacy #Salesforce #ShinyHunters
Hackread
ShinyHunters Breach Gainsight Apps on Salesforce, Claim Data from 1000 Firms
ShinyHunters breached Gainsight apps integrated with Salesforce, claiming access to data from 1000 firms using stolen credentials and compromised tokens.
⤷ Title: Intigriti Bug Bytes #230 - November 2025 🚀
════════════════════════
𐀪 Author: Ayoub
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 00:00:00 GMT
════════════════════════
⌗ Tags: #Bug Bytes
════════════════════════
𐀪 Author: Ayoub
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 00:00:00 GMT
════════════════════════
⌗ Tags: #Bug Bytes
Intigriti
Intigriti Bug Bytes #230 - November 2025 🚀
Hi hackers, Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring: Finding an RCE using AI in GitHub CORS exploitation cheat sheet Scanning codebases with AI Bypass...
⤷ Title: New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:52:43 +0000
════════════════════════
⌗ Tags: #Android #Malware #Security #Cybersecurity #Encryption #Privacy #Signal #Sturnus #Telegram #WhatsApp
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:52:43 +0000
════════════════════════
⌗ Tags: #Android #Malware #Security #Cybersecurity #Encryption #Privacy #Signal #Sturnus #Telegram #WhatsApp
Hackread
New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: Trojanized VPN Installer Deploys NKNShell Backdoor, Using P2P Blockchain and MQTT Protocols for Covert C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 00:10:21 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain Protocol #Go malware #MQTT #NKNShell #P2P C2 #Supply Chain #VPN Installer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 00:10:21 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain Protocol #Go malware #MQTT #NKNShell #P2P C2 #Supply Chain #VPN Installer
Daily CyberSecurity
Trojanized VPN Installer Deploys NKNShell Backdoor, Using P2P Blockchain and MQTT Protocols for Covert C2
ASEC exposed a VPN supply chain attack deploying NKNShell, a Go-based backdoor that uses P2P NKN and MQTT for stealthy C2. The installer bypasses AMSI using AI-generated code and grants full remote access (MeshAgent, gs-netcat).
⤷ Title: SonicWall Patches Two Vulnerabilities in Email Security Appliances, Including Code Execution Flaw (CVE-2025-40604)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 00:00:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Integrity Bypass #CVE_2025_40604 #Email Security #Path Traversal #rce #SonicWall #VM Tampering
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 00:00:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Integrity Bypass #CVE_2025_40604 #Email Security #Path Traversal #rce #SonicWall #VM Tampering
Daily CyberSecurity
SonicWall Patches Two Vulnerabilities in Email Security Appliances, Including Code Execution Flaw (CVE-2025-40604)
SonicWall patched a critical flaw (CVE-2025-40604) in its Email Security appliances. The bug allows persistent RCE by exploiting a lack of integrity checks when loading the root filesystem image from the VM datastore.
⤷ Title: Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 12:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 12:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 12:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 12:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 20:49:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 20:49:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: CrowdStrike Fires Worker Over Insider Leak to Scattered Lapsus Hunters
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 16:13:19 +0000
════════════════════════
⌗ Tags: #Cyber Crime #CrowdStrike #Cybersecurity #Insider Threat #Scattered Lapsus Hunters #ShinyHunters
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 16:13:19 +0000
════════════════════════
⌗ Tags: #Cyber Crime #CrowdStrike #Cybersecurity #Insider Threat #Scattered Lapsus Hunters #ShinyHunters
Hackread
CrowdStrike Fires Worker Over Insider Leak to Scattered Lapsus Hunters
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread