cybersecurity

@cybersecurity@infosec.pub

This is a remote community, information on this page may be incomplete. View at Source ↗

New Post

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

cybersecurity

@cybersecurity@infosec.pub

This is a remote community, information on this page may be incomplete. View at Source ↗

New Post

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Sort:hotnew top

Inside the Attack Chain: PAN-OS Exploitation and Qilin Ransomwarewp.me ↗
Submitted ⁨⁨10⁩ ⁨hours⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨0⁩ ⁨comments⁩
Mentorship Monday - Discussions for career and learning!
Submitted ⁨⁨1⁩ ⁨day⁩ ago⁩ by ⁨shellsharks@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
Inside HollowByte: Understanding OpenSSL's latest DoS vulnerabilitywp.me ↗
Submitted ⁨⁨2⁩ ⁨days⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨0⁩ ⁨comments⁩
'Half a Second' — a book on the XZ backdoorlwn.net ↗
Submitted ⁨⁨2⁩ ⁨days⁩ ago⁩ by ⁨cm0002@lemy.lol⁩ | ⁨1⁩ ⁨comment⁩
Tesla Digital Fleet Command / Remote FSD Live-Trackingwww.teslaacessories.com ↗
Submitted ⁨⁨3⁩ ⁨days⁩ ago⁩ by ⁨sheeple@infosec.pub⁩ | ⁨1⁩ ⁨comment⁩
LG monitors silently install software through Windows Update without user consentvideocardz.com ↗
Submitted ⁨⁨3⁩ ⁨days⁩ ago⁩ by ⁨cm0002@literature.cafe⁩ | ⁨12⁩ ⁨comments⁩
EY discloses third-party support platform breach exposing client tax informationwp.me ↗
Submitted ⁨⁨4⁩ ⁨days⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨2⁩ ⁨comments⁩
No Shark is Safe: Millions of Shark Vacuums are Vulnerable to RCEtokay0.com ↗
Submitted ⁨⁨4⁩ ⁨days⁩ ago⁩ by ⁨cm0002@suppo.fi⁩ | ⁨0⁩ ⁨comments⁩
Chrome Extension Used by 1.6 Million Users Silently Adds Data Exfiltration Capabilitiescybersecuritynews.com ↗
Submitted ⁨⁨5⁩ ⁨days⁩ ago⁩ by ⁨cm0002@lemy.lol⁩ | ⁨4⁩ ⁨comments⁩
Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Readthehackernews.com ↗
Submitted ⁨⁨6⁩ ⁨days⁩ ago⁩ by ⁨Deebster@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
git.projectnightcrawler.dev ↗
Submitted ⁨⁨6⁩ ⁨days⁩ ago⁩ by ⁨beep@piefed.world⁩ | ⁨0⁩ ⁨comments⁩
jscrambler npm v8.14.0: attack chain, IOCs and mitigationthecybersecguru.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨0⁩ ⁨comments⁩
RedHook Android malware now uses Wireless ADB for shell accesswww.bleepingcomputer.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨tonytins@pawb.social⁩ | ⁨0⁩ ⁨comments⁩
GigaWiper Merges Three Malware Families Into One Destructive Backdoorsecurityaffairs.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨tonytins@pawb.social⁩ | ⁨0⁩ ⁨comments⁩
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packagesthehackernews.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨tonytins@pawb.social⁩ | ⁨0⁩ ⁨comments⁩
Off-Topic Friday
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨shellsharks@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
Stegano 2.5.0: reversible data hiding technique based on histogram shiftinggithub.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨cm0002@libretechni.ca⁩ | ⁨0⁩ ⁨comments⁩
Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodesthehackernews.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨tonytins@pawb.social⁩ | ⁨0⁩ ⁨comments⁩
GhostLock (CVE-2026-43499): 15-year-old Linux kernel flaw enables root and container escapethecybersecguru.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨1⁩ ⁨comment⁩
GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Secondsthreat-intelligence.redeyesecurity.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨schnurrito@discuss.tchncs.de⁩ | ⁨0⁩ ⁨comments⁩
GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Reposnoma.security ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨cm0002@libretechni.ca⁩ | ⁨1⁩ ⁨comment⁩
What are You Working on Wednesday
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨shellsharks@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
Be careful: The Fixupxer App on F-droid edit your URL to make it redirect to adware/malware.github.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨beep@piefed.world⁩ | ⁨1⁩ ⁨comment⁩
Accenture investigating breach after threat actor claims Azure DevOps data theftthecybersecguru.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨0⁩ ⁨comments⁩
github.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨SirHaxalot@nord.pub⁩ | ⁨1⁩ ⁨comment⁩
Researchers warn Gitea CVE-2026-20896 is now being actively exploitedthecybersecguru.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨0⁩ ⁨comments⁩
Two GitHub "Verified" commit vulnerabilities could undermine software supply chain trustthecybersecguru.com ↗
Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨UnLocoPoco@lemmy.world⁩ | ⁨0⁩ ⁨comments⁩
Any signed GitHub commit can be copied, without the author's secret key, creating a distinct commit with an identical tree, metadata, a valid signature, and a "Verified" badgewww.internationalcyberdigest.com ↗
Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ by ⁨cm0002@lemdro.id⁩ | ⁨1⁩ ⁨comment⁩
GitHub’s AI Agent Tricked Into Leaking Private Repository Datahackread.com ↗
Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ by ⁨tonytins@pawb.social⁩ | ⁨4⁩ ⁨comments⁩
Wormable RCE vulnerability in many Bluetooth headphoneswww.youtube.com ↗
Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ by ⁨floofloof@lemmy.ca⁩ | ⁨0⁩ ⁨comments⁩