Community icon

cybersecurity

!cybersecurity@infosec.pub

Hot
New Old Active
Hot
New Old Active
Posts Comments
List Tile Wide tile

How to Prove False Statements: Practical Attacks on Fiat-Shamir

by
1
1

Now everybody but Citrix agrees that CitrixBleed 2 is under exploit

by
1
16

CVSS 10 RCE in Wing FTP exploited within 24 hours, security researchers warn

by
1
13

Vulnerability-Lookup 2.13.0

by
0
5
1

ChatGPT creates phisher’s paradise by serving wrong URLs

by
0
8
3

The Solidity Language open-source package was used in a $500,000 crypto heist

by
4
6
1

The Czech Republic bans DeepSeek in state administration over cybersecurity concerns

by

Archived

5
22
2

AMD warns of new Meltdown, Spectre-like bugs affecting CPUs

by
3
32
3

Ruckus Networks leaves severe flaws unpatched in management devices

by
0
2

What are You Working on Wednesday

by

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

0
8

Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog

by
0
17
1

Git security vulnerabilities announced

by
0
11
1

VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification

by
0
2
1

Bluetooth flaws could let hackers spy through your microphone

by
2
7
2

Mentorship Monday - Discussions for career and learning!

by

Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? This is the time and place to ask!

0
5

Massive spike in use of .es domains for phishing abuse

by
0
11
1

How the Batavia spyware targeting Russian organizations works

by
0
2
1

Vulnerability Report - June 2025

by

This vulnerability report has been generated using data aggregated on Vulnerability-Lookup, with contributions from the platform’s community.

0
4
1

Belgium is unsafe for CVD

by
1
7
1

New Chinese Fake Marketplace e-Commerce Phishing Campaign Spoofs Thousands of Websites of Popular Retail Brands, Abuses Online Payment Services, Security Firm Finds

by

Archived

0
8
1

ChatGPT creates phisher’s paradise by serving wrong URLs

by
1
17
3

How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets

by
0
20
1

France: Chinese Hackers Exploited Ivanti Flaw Targeting Government Agencies, Telecoms, Firms In Media, Finance, Transport Sectors

by

Archived

0
19
2

Pro-Russian hacktivism: Shifting alliances, new groups and risks

by
0
3
1

Jasper Sleet: North Korean remote IT workers’ evolving tactics to infiltrate organizations

by
0
2
1

US disrupts North Korean IT worker "laptop farm" scheme in 16 states

by
1
18

Pro-Iran hacktivists borrow from Russia's cyber playbook

by
0
2

New FileFix attack runs JScript while bypassing Windows MoTW alerts

by
0
2

Break The Air Gap With Ultrasound

by
0
4
1

Hikvision Canada ordered to cease operations over security risks

by
0
4

Stumbled on to StormShield - opinions?

by

A colleague was discussing an option to use different vendors either side of a DMZ and suggested StormShield... I'd not heard of them before.

0
2

Qilin Ransomware Attack on National Health Service in June 2024 Causes Patient Death in the UK

by

Archived

0
2
3

Canada orders China's Hikvision to close Canadian operations over national security concerns

by

Archived

0
9
4

Citrix Bleed 2 flaw now believed to be exploited in attacks

by
0
9

mommy Access Broker

by
0
1
1

Criminals Posing as Legitimate Health Insurers and Fraud Investigators to Commit Health Care Fraud

by
0
1

Authoritarian states increasingly leveraging non-state cyber capabilities to expand their operational reach, challenging conventional distinctions between state and non-state activity | Study

by

Historically, Western assessments of cyber threats have concentrated on state adver­saries. More than 600 state-backed groups are tracked globally. Yet, for more than a decade, Western analyses and discussions of cyber threat concerns have focused mainly on four states: China, Iran, Russia and North Korea. Based on open-source report­ing evaluated by the European Repository of Cyber Incidents (EuRepoC), these coun­tries account for more than 70 per cent of the state-backed threats that Europe and its partners have faced since 2000.

0
7
1

Off-Topic Friday

by

Wanna chat about something non-infosec amongst those of us who frequent /c/cybersecurity? Here’s your chance! (Keep things civil & respectful please)

0
3

What are You Working on Wednesday

by

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

4
5

Iranian Educated Manticore Targets Leading Tech Academics

by
0
1

In the Wild: Malware Prototype with Embedded Prompt Injection

by
0
3
1

Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack

by
0
20

China: Draft cybersecurity amendment doubles down on digital repression - ARTICLE 19

by

Archived

0
3
2

China-linked LapDogs campaign drops backdoor with fake certs, targeting mainly Small Office/Home Office (SOHO) devices

by

Archived

0
4
1

⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More

by
0
6

Canada says Chinese-backed hackers were likely behind recent malicious activity targeting domestic telecommunications infrastructure

by

Archived version

0
8
2

Mentorship Monday - Discussions for career and learning!

by

Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? This is the time and place to ask!

0
6

Does the digital security equilibrium hold under AI?

by
0
3
1

Disinformation for beginners: How access to TikTok is threatening European security

by

Archvied

0
3
2

Stegano 2.0.0 released with functions to hide and reveal messages in PCM encoded .wav files

by

After a series of minor releases, the Stegano project reaches a new milestone with a great new feature.

0
6

Review: Learning Kali Linux, 2nd Edition

by
0
6

The Hidden Threat: How DanaBot Malware Facilitated Data Theft and Russian State-Sponsored Spying

by
0
10
1

Iran-Israel War Triggers a Maelstrom in Cyberspace

by
0
5

16 billion passwords leaked in one of the biggest data breaches ever: Report - Dexerto

by
4
11

Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords

by
0
5
3

North Korean hackers deepfake execs in Zoom call to spread Mac malware

by
2
39

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

by
0
5

What are You Working on Wednesday

by

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

0
4

A look at ‘Tinker,’ Black Basta’s phishing fixer, negotiator

by
0
2
1

MDEAutomator: Open-source endpoint management, incident response in MDE

by
0
6

Threat Actor Abuses TeamFiltration for Entra ID Account Takeovers

by
0
8

Two Factor Insecurity: How Google, Amazon, Meta and thousands of other companies leave customers vulnerable over one-time codes to save time and money

by

Archived version

1
9
1

Hackers Can Hide Images in Text Data and Embeds Directly into DNS TXT Records

by
5
-2

Apple and Google Still Have a Chinese VPN Problem

by

Archived

0
7
5

Mentorship Monday - Discussions for career and learning!

by

Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? This is the time and place to ask!

3
3

A JPEG With A Payload

by
0
4
1

Solar PV vulnerabilities

by

Interesting article where ~35k devices from 45 manufacturers have vulnerabilities

3
18

Windows SMB Client Zero-Day Vulnerability Exploited Using Reflective Kerberos Relay Attack

by
0
18

GCVE-BCP-03 - Decentralized Publication Standard implemented in Vulnerability-Lookup

by

We’re excited to announce the release of Vulnerability-Lookup 2.11.0 — and it comes with a major milestone for decentralized vulnerability publication!

0
7

Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider

by
0
5
1

From Trust to Threat: Hijacked Discord Invites Used for Multi-Stage Malware Delivery

by
0
11
1

The Citizen Lab: Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted

by
0
3
3

Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted

by

On April 29, 2025, a select group of iOS users were notified by Apple that they were targeted with advanced spyware. Among the group were two journalists that consented for their cases described publicly. The key findings from our forensic analysis of their devices are summarized below:

0
13
3

Russian hybrid warfare: Ukraine's success offers lessons for Europe

by

Archived version

0
8
2

20,000 malicious IPs and domains taken down in INTERPOL infostealer crackdown

by
1
14
1