Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
The TeamPCP hacking group is feeding credentials stolen in the Trivy and Checkmarx KICS supply chain attacks to the Vect ransomware group, per a new report: dataminr.com/resources/intel-b…

Cyber Intel Brief: Vect, BreachForums, and TeamPCP Converge

An unprecedented ransomware partnership that mobilizes 300,000 cybercrime forum members and weaponizes stolen supply chain credentials.
Hank Schless (Dataminr)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

A Iranian hacktivist group named Harakat Ashab al-Yamin al-Islamia was allegedly the one behind the cyberattack on LA Metro last month

darkowl.com/blog-content/harak…

Harakat Ashab al-Yamin al-Islamia: A New Group or Part of a Broader Iranian-Aligned Network?

Explore Harakat Ashab al-Yamin al-Islamia: is it a new distinct organization or part of a broader Iranian-Aligned network?
DarkOwl Content Team (DarkOwl, LLC)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

TL;DR: Use our software if you wanna turn your democracy into a dictatorship! We have a FAQ page!

Techmeme

2026-04-19 18:10:38

mastodon - Collegamento all'originale

Palantir posts a 22-point summary of Alex Karp's book, advocating for hard power, AI weapons and deterrence, and denouncing pluralism, and "regressive" cultures (Anthony Ha/TechCrunch)

techcrunch.com/2026/04/19/pala…
techmeme.com/260419/p11#a26041…


Palantir posts mini-manifesto denouncing inclusivity and ‘regressive’ cultures | TechCrunch

Palantir's ideological bent has come under more scrutiny as it's worked with ICE and positioned itself as a defender of "the West."
Anthony Ha (TechCrunch)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

I know everyone's hungering for more cyber reads on Friday afternoon, so we've published a long read on Handala and related MOIS personas, expanding greatly on the shorter post from April 6.

We were originally going to keep this one closely held, but the number of questions we're fielding about IR threat actors, and some trends in current whispernets, convinced us to publish it instead.

#threatintel #cybersecurity #infosec

dti.domaintools.com/research/m…

DomainTools Investigations | MOIS Linked MOIST GRASSHOPPER / Homeland Justice / KarmaBelow80 / Handala Hackers / Campaigns and Evolution

Explore the evolution of MOIS-linked actors Homeland Justice, Karma, and Handala. Analysis of destructive malware, surveillance integration, and the 2026 Stryker incident.
DomainTools
#Cybersecurity #infosec #threatintel
Questa voce è stata modificata (2 giorni fa)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Florida capital city Tallahassee has shut down its IT network after a mysterious cyberattack on Friday

The surrounding Leon County disconnected from the city network to prevent contamination (aka ransomware language)

eu.tallahassee.com/story/news/…

Cyberattack targets city of Tallahassee; official says no data compromised

The city of Tallahassee has confirmed it was the target of a cyberattack earlier Friday morning, and a county IT administrator says they have disconnected from the internet.
, Tallahassee Democrat (Tallahassee Democrat)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Calif researchers say they found an RCE in the Qmail email transfer agent using one single Claude prompt, and one very dumb one too

"Find vulnerabilities in latest version of qmail: https://github[.]com/sagredo-dev/qmail. Focus on vulnerabilities that could result in RCE or system compromise by processing a crafted email."

blog.calif.io/p/we-asked-claud…

We Asked Claude to Audit Sagredo's qmail. It found a RCE.

One prompt, 101 minutes, and a working exploit against a widely deployed qmail fork.
Calif
Questa voce è stata modificata (13 ore fa)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Meta will give away free Burp Suite Pro licenses to all security researchers who reach the silver ranking in its bug bounty program

bugbounty.meta.com/blog/meta-b…

Meta Bug Bounty x PortSwigger | Empowering the Security Community Together

We are excited to announce a new collaboration between Meta Bug Bounty and PortSwigger, bringing together two organizations deeply committed to advancing security research and supporting the global hacker community
Meta Bug Bounty x PortSwigger | Empowering the Security Community Together

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
Vercel April 2026 security incident
L: vercel.com/kb/bulletin/vercel-…
C: news.ycombinator.com/item?id=4…
posted on 2026.04.19 at 10:14:38 (c=0, p=3)

Vercel April 2026 security incident | Vercel Knowledge Base

We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems.
vercel.com

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Another crypto mega hack

$292m stolen from Kelp DAO

The biggest of the year (so far 😂 )

coindesk.com/tech/2026/04/19/2…

Kelp DAO exploited for $292 million with wrapped ether stranded across 20 chains

An attacker drained 116,500 rsETH, roughly 18% of circulating supply, from Kelp's LayerZero-powered bridge on Saturday, triggering emergency freezes across Aave, SparkLend, Fluid and Upshift.
Shaurya Malwa (CoinDesk)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Infosec people, help me out!

Apparently South Korea and Kazakhstan have identified and arrested the leader of a ransomware operation active since 2022

What group is this?

newsis.com/view/NISX20260414_0…

랜섬웨어로 업체 서버 공격, 비트코인 요구한 카자흐스탄인

[수원=뉴시스] 양효원 기자 = 국내 업체 서버에 침입해 랜섬웨어 프로그램으로 데이터를 암호화한 뒤 이를 풀어주는 대가로 비트코인을 요구한 30대 카자흐스탄인이 경찰에 붙잡혔다.경기남부경찰청 사이버수사과는 A(35·카자흐스탄 국적)씨를 정보통신망법 위반(악성프로그램유포), 공갈미수 등 혐의로 검거했다고 15일 밝혔다.랜섬웨어 조직 총책인 A씨는 2022년부..
양효원 (뉴시스)

reshared this

in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Xavier Ashe

Here's what my attribution engine came up with.

The article doesn't name the group. After analysis, the unnamed group almost certainly operated as a Phobos RaaS affiliate, potentially overlapping with the broader Phobos/8Base ecosystem. The TTPs — default credential brute-forcing, SMB targeting, Bitcoin-only ransom, no data leak site, encrypted messenger C2, centralized boss with distributed affiliates — are a near-textbook Phobos signature. The Kazakhstani origin and 2022–2025 active window align with a mid-tier affiliate who picked up operations as the Phobos ecosystem's top operators (Ptitsyn) were drawing LE scrutiny, and who deliberately targeted a jurisdiction (South Korea) with historically limited international LE cooperation reach. The Korea-Kazakhstan joint operation that ultimately nabbed him was, by the article's own account, a first-of-its-kind bilateral action.

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Firefox will get a sandboxed GPU process on all operating systems later this year

attackanddefense.dev/2026/03/1…

Bug Bounty Program Updates 2026

The Firefox bug bounty program is the longest-running security bug bounty program. Born out of Netscape’s bug bounty program, we’ve been awarding ingenious security research for over two decades, helping keep our hundreds of millions of users safe.
Frederik Braun, Christoph Kerschbaumer (Attack & Defense)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Old failed startups are selling their internal emails, JIRA tickets, and Slack chats to AI companies as training data.

According to a Forbes report, prices have ranged between tens and hundreds of thousands of US dollars.

forbes.com/sites/annatong/2026…

reshared this

friendica (DFRN) - Collegamento all'originale

Mini Diarium diario desktop cifrato e completamente offline

@GNU/Linux Italia

linuxeasy.org/mini-diarium-dia…

Mini Diarium è un diario desktop cifrato AES-256-GCM, offline e senza cloud, progettato per garantire massima privacy su Linux.
L'articolo Mini Diarium diario desktop cifrato e completamente offline proviene da Linux

@GNU/Linux Italia

Julian Del Vecchio reshared this.

in reply to Lorenzo

lemmy - Collegamento all'originale

vzqq

Apparently it uses Argon2 for key derivation, so it’s not obviously broken.

github.com/fjrevoredo/mini-dia…

GitHub - fjrevoredo/mini-diarium: A local-only journal with serious encryption. Free, open source, and never touches the internet.

A local-only journal with serious encryption. Free, open source, and never touches the internet. - fjrevoredo/mini-diarium
GitHub
Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

A Tennessee man who hacked the US Supreme Court was sentenced to twelve months of probation.

Nicholas Moore hacked the US' highest court in 2023 and leaked documents on an Instagram account named @ihackthegovernment.

courtlistener.com/docket/72124…

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Exploit code for a recently patched Chrome vulnerability has leaked online via a misconfigured server.

Security firm Breakglass believes the code is the work of a "professional exploit developer," and most intended for "sale or government use."

intel.breakglass.tech/post/cve…

23 Chrome Exploit PoCs on an Open AWS Server: Inside an Active CVE-2026-4440 Exploit Development Toolkit

An open directory on an AWS EC2 instance exposes 23 files comprising a complete Chrome/Android exploit development toolkit targeting CVE-2026-4440 and multiple WebGL/ANGLE vulnerabilities — renderer R/W primitives, GPU process integer overflows, TOCT…
Breakglass Intelligence

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
We just published our recent Firefox Security and Privacy highlights in the Q1 newsletter. Take a look —> attackanddefense.dev/2026/04/1…

Firefox Security & Privacy Newsletter 2026 Q1

Welcome to the Q1 2026 edition of the Firefox Security & Privacy Newsletter.
Frederik Braun, Christoph Kerschbaumer (Attack & Defense)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

"NVD is deprioritizing, EUVD is nascent but may go the same way, and other CVE programs, such as MITRE, have had funding scares." "That era is officially over." - way to go @nistcyber

aikido.dev/blog/nist-nvd-chang…

by @campuscodi news.risky.biz/risky-bulletin-…

Risky Bulletin: NIST gives up enriching most CVEs

In other news: Russia tried to disrupt Swedish power plant; EU releases age verification app; OpenAI announces its own private cyber model.
Catalin Cimpanu (Risky.Biz)
@Catalin Cimpanu @users/nistcyber

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
The media in this post is not displayed to visitors. To view it, please go to the original post.

-NIST gives up enriching most CVEs
-Russia tried to disrupt Swedish power plant
-EU releases age verification app
-OpenAI announces its own private cyber model
-Russia hacked Ukrainian prosecutors
-Grinex shuts down after hack
-Zerion blames North Korea for crypto-heist
-Autovista ransomware attack
-BlueLeaks 2.0 data is now up for sale
-Krybit ransomware hacks rival 0APT
-Anthropic rolls out KYC for Claude

Podcast: risky.biz/RBNEWS552/
Newsletter: news.risky.biz/risky-bulletin-…

Risky Bulletin: NIST gives up enriching most CVEs

In other news: Russia tried to disrupt Swedish power plant; EU releases age verification app; OpenAI announces its own private cyber model.
Catalin Cimpanu (Risky.Biz)

reshared this

in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Catalin Cimpanu

The media in this post is not displayed to visitors. To view it, please go to the original post.
-Grok is still nudifying
-Nudify apps are still everywhere
-Android gets new one-time location and contact pickers
-Chrome does nothing to stop browser fingerprinting
-Windows adds RDP warning popups
-Raspberry Pi disables passwordless sudo
-More cyber EOs are coming
-FCC exempts Netgear from foreign router ban
-US Tech Force is hiring cyber staff
-DPRK laptop farmers sentenced
-16yo arrested for school hack
-53 DDoS-for-hire domains seized
-Hazy Hawk hijacks university subdomains

Soatok Dreamseeker reshared this.

in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Catalin Cimpanu

The media in this post is not displayed to visitors. To view it, please go to the original post.
-Rhadamanthys had a secret bug that let researchers spy on them
-New ATHR vishing platform
-Researcher drops another Windows zero-day (RedSun)
-NGINX UI bug exploited in the wild
-New Fabricked attack on AMD SEV-SNP
-RAGFlow patches bug after public disclosure
-Thymeleaf RCE
-Dolibarr RCE
-Codex hacks a smart TV
-You can trick Claude by being an industry legend
-Zero Day Quest 2026 ends
-PyPI has another security audit
-Sapphire Sleet targets macOS
-New PowMix botnet and AngrySpark rootkit
Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

📰 Risky Bulletin: NIST gives up enriching most CVEs

risky.biz/risky-bulletin-nist-…

Risky Bulletin: NIST gives up enriching most CVEs - Risky Business Media

The US National Institute of Standards and Technology announced on Wednesday a new policy regarding the US National Vulnerability Database [Read More]
risky.biz

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
US tech firms lobbied EU to keep datacentre emissions secret
L: theguardian.com/technology/202…
C: news.ycombinator.com/item?id=4…
posted on 2026.04.17 at 02:17:41 (c=1, p=9)

US tech firms successfully lobbied EU to keep datacentre emissions secret

Legally questionable confidentiality clause adopted almost word for word from demands of Microsoft and trade groups
Ajit Niranjan (the Guardian)

reshared this

⇧