UnLocoPoco

@UnLocoPoco@lemmy.world

• Certighost: A New AD CS Attack That Can Lead to Full Active Directory Compromisethecybersecguru.com ↗
  Submitted ⁨⁨1⁩ ⁨day⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• Oracle's July 2026 Critical Patch Update delivers 1,449 security patcheswp.me ↗
  Submitted ⁨⁨3⁩ ⁨days⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• CVE-2026-16232: A technical look at Check Point's actively exploited authentication bypassthecybersecguru.com ↗
  Submitted ⁨⁨3⁩ ⁨days⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• Inside CVE-2026-50522: Understanding SharePoint's latest actively exploited RCEthecybersecguru.com ↗
  Submitted ⁨⁨5⁩ ⁨days⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• OpenAI GPT-5.6 Sol Breached Hugging Face: Attack Chain and Technical Analysisthecybersecguru.com ↗
  Submitted ⁨⁨5⁩ ⁨days⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨1⁩ ⁨comment⁩
• Inside the Attack Chain: PAN-OS Exploitation and Qilin Ransomwarewp.me ↗
  Submitted ⁨⁨6⁩ ⁨days⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• Inside HollowByte: Understanding OpenSSL's latest DoS vulnerabilitywp.me ↗
  Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨EY discloses third-party support platform breach exposing client tax information⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Yes. California AG

• EY discloses third-party support platform breach exposing client tax informationwp.me ↗
  Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨2⁩ ⁨comments⁩
• jscrambler npm v8.14.0: attack chain, IOCs and mitigationthecybersecguru.com ↗
  Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• GhostLock (CVE-2026-43499): 15-year-old Linux kernel flaw enables root and container escapethecybersecguru.com ↗
  Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨1⁩ ⁨comment⁩
• Accenture investigating breach after threat actor claims Azure DevOps data theftthecybersecguru.com ↗
  Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• Researchers warn Gitea CVE-2026-20896 is now being actively exploitedthecybersecguru.com ↗
  Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• Two GitHub "Verified" commit vulnerabilities could undermine software supply chain trustthecybersecguru.com ↗
  Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨0⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨Patch now: CISA warns of actively exploited Linux kernel zero-day (CVE-2026-43456)⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Yup just a PSA to get patched asap

• Patch now: CISA warns of actively exploited Linux kernel zero-day (CVE-2026-43456)thecybersecguru.com ↗
  Submitted ⁨⁨3⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨3⁩ ⁨comments⁩
• DHS confirms breach of HSIN and connected SharePoint environmentthecybersecguru.com ↗
  Submitted ⁨⁨3⁩ ⁨weeks⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨2⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨CVE-2026-42530 & CVE-2026-42055: NGINX RCE Flaws Explained. Patches Released⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Yes but they take a lill time

• ⁨Comment⁩ on ⁨CVE-2026-42530 & CVE-2026-42055: NGINX RCE Flaws Explained. Patches Released⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Also, one should not depend on the version of nginx that ships with any particular distro…auch as ubuntu and all cuz generally, they are not the latest versions…best is to simply grab nginx or any package directly from their own repo which will ensure that one always gets the latest version…but again that’s a double edged sword…

• CVE-2026-53435: Jenkins Deserialization Chain, PoC & Patchthecybersecguru.com ↗
  Submitted ⁨⁨1⁩ ⁨month⁩ ago⁩ to ⁨cybersecurity@infosec.pub⁩ | ⁨1⁩ ⁨comment⁩
• ⁨Comment⁩ on ⁨Atomic Arch: 900+ AUR Packages Backdoored with eBPF RootkitCopy⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Update: seems like there’s a 2nd wave of attack…a bit more sophisticated than the initial wave…has begun. Code is more obfuscated