This post shows how passive DNS pivoting—using Validin and CyberChef—can expand Microsoft’s ACTINIUM domain list by identifying shared IPs, registration dates, and randomized subdomain patterns. Using this method the author pivoted on IP 139.180.174[.]234 and …
Threat Actor: Unknown Victim: Windows users Information: 🌟 The threat actor is offering a Windows 1-day Local Privilege Escalation (LPE) exploit for sale. 🌟 The exploit is identified as CVE-2024-26169 and is categorized as a Windows Error Reporting Service Elevation of Privilege Vulnerability. 🌟 The…
Summary : A malicious backdoor has been discovered in the Linux compression library xz, potentially allowing unauthorized remote access to affected systems. Key Point : ⭐ Red Hat warns of a backdoor in xz versions 5.6.0 and 5.6.1. ⭐ The vulnerability is rated 10 out of 10 in CVSS severity. ⭐ Fedora…
Summary: A new Linux privilege-escalation exploit has been discovered, allowing users to gain root access to vulnerable machines. The exploit affects various Linux distributions and has a high success rate on certain kernel versions. Key Point: ⭐ Exploit grants root access to vulnerable Linux machin…
____________________ Summary : The week saw two prominent crypto platforms being compromised, with millions worth of cryptocurrency stolen by hackers with confusing motives. Key Point : ⭐ Munchables blockchain-based game was attacked, with $62 million worth of cryptocurrency stolen. ⭐ Rumors suggest…
Threat Actor: Unknown Victim: Enel Distribución Perú Information: 🌟 The threat actor claims responsibility for leaking a database from Enel Distribución Perú. 🌟 The attack allegedly occurred in March 2024. 🌟 The leaked data includes sensitive household information. 🌟 The compromised data consists of…
Summary : Coro, a cybersecurity company focusing on SMBs, has secured $100M in funding at a $750M valuation, aiming to expand internationally and enhance its AI tools to combat cyber threats. Key Point : ⭐ Coro raised $100 million in a Series D round of funding with a valuation over $750 million pos…
Threat Actor: Unknown Victim: St Jude Laboratories Information: 🌟 Threat actor claims responsibility for leaking patient data from St Jude Laboratories 🌟 Compromised data includes full name, address, phone number (home/work), DOB, full SSN, and other confidential information 🌟 Size of the compromise…
Summary : Chinese hackers are targeting family members of high-value individuals to surveil and gather information for more sophisticated attacks. Key Point : ⭐ Chinese hackers from APT 31 targeted family members of U.S. politicians and activists. ⭐ Malicious email messages with tracking links were…
____________________ Summary: A misconfigured cloud server exposed UK student records, including sensitive information and images of children, raising concerns about data security in educational institutions. Key Point: ⭐ Almost a million records were exposed, with 214,000 unique images of children….
Threat Actor: “Unknown threat actor” Victim: N/A Information: 🌟 The threat actor is offering the Malware Service of ACR Stealer for sale. 🌟 The ACR Stealer is developed in C++ and supports Windows 7-10 + servers. 🌟 It utilizes its own spacer servers and offers the option for personal installation. 🌟…
____________________ Summary : The Ubuntu security team has released security updates to address several vulnerabilities in ImageMagick that could lead to denial-of-service attacks. It is crucial for users to update their systems and exercise caution when handling image files from untrusted sources….
____________________ Summary : Harvard Pilgrim Health Care has updated the number of people affected by a ransomware attack to nearly 2.9 million, highlighting the evolving nature of data breach investigations. Key Point : ⭐ Data breach total increased to 2,860,795, up 12% from original figure ⭐ Inc…
Summary : PyPI has suspended new user registration to address an ongoing malware campaign targeting Python developers and supply-chain attacks. Key Point : ⭐ PyPI has temporarily suspended new user registrations and project creations due to a malware campaign. ⭐ Threat actors uploaded 365 packages w…
Summary : Cisco has warned customers about password-spraying attacks targeting Secure Firewall devices, including Remote Access VPN services. The attacks are not limited to Cisco products but also third-party VPN concentrators. Key Point : ⭐ Password spraying attacks target Remote Access VPN service…