overview for kid

MCBS Data Breach Affects 1.2 Million Individuals - SecurityWeek (www.securityweek.com)

submitted 9 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Iranian hackers continue attacks on US critical infrastructure | news | SC Media (www.scworld.com)

submitted 10 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

1 comment fedilink

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available (thehackernews.com)

submitted 10 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

DentaQuest sends data breach notices to 15M DentaQuest breach notices sent to 15 million after health data theft | Cybernews (cybernews.com)

submitted 10 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Google wants to store a selfie video of your face | Malwarebytes (www.malwarebytes.com)

submitted 11 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

2 comments fedilink

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers (thehackernews.com)

submitted 11 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials - Infosecurity Magazine (www.infosecurity-magazine.com)

submitted 11 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

8 comments fedilink

Call of Duty Mobile scam uses fake free points to steal player accounts | Malwarebytes (www.malwarebytes.com)

submitted 11 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Pope's official prayer app commits cardinal sin, leaks 700K+ users' info (www.theregister.com)

submitted 12 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged (securityaffairs.com)

submitted 12 hours ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say (thehackernews.com)

submitted 3 days ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

JetBrains Fixes Critical IntelliJ IDEA Code Execution Flaw and Four TeamCity Vulnerabilities (cybersecuritynews.com)

submitted 3 days ago by kid@sh.itjust.works [M] to c/cybersecurity@sh.itjust.works

comment fedilink

Seems Udemy got hacked, but hasn't told anyone yet in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works 8 points 3 months ago

Looks like it: https://haveibeenpwned.com/Breach/Udemy

ShinyHunters leak 12.4M CarGurus records after ransom threat in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 1 point 5 months ago

Done, thanks!

parent

context

Bloody Wolf: A Blunt Crowbar Threat To Justice in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 1 point 8 months ago

Edited. Thanks!

parent

context

Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 1 point 1 year ago

https://feedly.com/cve/CVE-2025-6547

parent

context

Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 3 points 1 year ago

Sorry. It was not paywalled for me when I first saw. More info from different source: https://feedly.com/cve/CVE-2025-6545

parent

context

Google Cloud incident report in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 4 points 1 year ago

The incident occurred on June 12, 2025, due to a policy change that contained blank fields, causing 503 errors in Google Cloud and Google Workspace APIs. The root cause was:

A new feature added to Service Control on May 29, 2025, without adequate error handling.
The policy change with blank fields was globally replicated and caused Service Control binaries to crash.

84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 2 points 1 year ago

Thanks! Corrected

parent

context

Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 9 points 1 year ago

The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

Coinbase data breach exposes customer info and government IDs in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 7 points 1 year ago (2 children)

Post from Coinbase: https://www.coinbase.com/en-gb/blog/protecting-our-customers-standing-up-to-extortionists

You think ransomware is bad? Wait until it infects CPUs in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 6 points 1 year ago

Noted!

parent

context

CISA warns of potential data breaches caused by legacy Oracle Cloud leak in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 6 points 1 year ago

Direct link.

Pay, fight, or stall? The dilemma of ransomware negotiations - Help Net Security in c/cybersecurity@sh.itjust.works

[–] kid@sh.itjust.works [S] 2 points 1 year ago (1 child)

Leak extortion is the main issue nowadays, not covered by backups, I'm afraid.

parent

context