Fosstodon

Pyrzout :vm:Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool – Source:hackread.com <a href="https://ciso2ciso.com/chess-com-hit-by-limited-data-breach-linked-to-3rd-party-file-transfer-tool-sourcehackread-com/" rel="nofollow noopener" translate="no" target="_blank">https://ciso2ciso.com/chess-com-hit-by-limited-data-breach-linked-to-3rd-party-file-transfer-tool-sourcehackread-com/</a> <a href="https://social.skynetcloud.site/tags/1CyberSecurityNewsPost" class="mention hashtag" rel="nofollow noopener" target="_blank">#1CyberSecurityNewsPost</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttack</a> <a href="https://social.skynetcloud.site/tags/DataBreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreach</a> <a href="https://social.skynetcloud.site/tags/Chesscom" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chesscom</a> <a href="https://social.skynetcloud.site/tags/Hackread" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hackread</a> <a href="https://social.skynetcloud.site/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://social.skynetcloud.site/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://social.skynetcloud.site/tags/Chess" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chess</a>

Pyrzout :vm:Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X – Source:hackread.com <a href="https://ciso2ciso.com/scammers-exploit-grok-ai-with-video-ad-scam-to-push-malware-on-x-sourcehackread-com/" rel="nofollow noopener" translate="no" target="_blank">https://ciso2ciso.com/scammers-exploit-grok-ai-with-video-ad-scam-to-push-malware-on-x-sourcehackread-com/</a> <a href="https://social.skynetcloud.site/tags/1CyberSecurityNewsPost" class="mention hashtag" rel="nofollow noopener" target="_blank">#1CyberSecurityNewsPost</a> <a href="https://social.skynetcloud.site/tags/artificialintelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#artificialintelligence</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/Infostealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infostealer</a> <a href="https://social.skynetcloud.site/tags/SocialMedia" class="mention hashtag" rel="nofollow noopener" target="_blank">#SocialMedia</a> <a href="https://social.skynetcloud.site/tags/ElonMusk" class="mention hashtag" rel="nofollow noopener" target="_blank">#ElonMusk</a> <a href="https://social.skynetcloud.site/tags/Grokking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Grokking</a> <a href="https://social.skynetcloud.site/tags/Hackread" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hackread</a> <a href="https://social.skynetcloud.site/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://social.skynetcloud.site/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://social.skynetcloud.site/tags/twitter" class="mention hashtag" rel="nofollow noopener" target="_blank">#twitter</a> <a href="https://social.skynetcloud.site/tags/Fraud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fraud</a> <a href="https://social.skynetcloud.site/tags/Grok" class="mention hashtag" rel="nofollow noopener" target="_blank">#Grok</a> <a href="https://social.skynetcloud.site/tags/Scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scam</a> <a href="https://social.skynetcloud.site/tags/xAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#xAI</a> <a href="https://social.skynetcloud.site/tags/X" class="mention hashtag" rel="nofollow noopener" target="_blank">#X</a>

Pyrzout :vm:Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool <a href="https://hackread.com/chess-com-data-breach-3rd-party-file-transfer-tool/" rel="nofollow noopener" translate="no" target="_blank">https://hackread.com/chess-com-data-breach-3rd-party-file-transfer-tool/</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttack</a> <a href="https://social.skynetcloud.site/tags/databreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#databreach</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/Chesscom" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chesscom</a> <a href="https://social.skynetcloud.site/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://social.skynetcloud.site/tags/Chess" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chess</a>

Pyrzout :vm:Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X <a href="https://hackread.com/scammers-exploit-grok-ai-video-ad-scam-x-malware/" rel="nofollow noopener" translate="no" target="_blank">https://hackread.com/scammers-exploit-grok-ai-video-ad-scam-x-malware/</a> <a href="https://social.skynetcloud.site/tags/ArtificialIntelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArtificialIntelligence</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/Infostealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infostealer</a> <a href="https://social.skynetcloud.site/tags/SocialMedia" class="mention hashtag" rel="nofollow noopener" target="_blank">#SocialMedia</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/ElonMusk" class="mention hashtag" rel="nofollow noopener" target="_blank">#ElonMusk</a> <a href="https://social.skynetcloud.site/tags/Grokking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Grokking</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/twitter" class="mention hashtag" rel="nofollow noopener" target="_blank">#twitter</a> <a href="https://social.skynetcloud.site/tags/Fraud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fraud</a> <a href="https://social.skynetcloud.site/tags/Grok" class="mention hashtag" rel="nofollow noopener" target="_blank">#Grok</a> <a href="https://social.skynetcloud.site/tags/Scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scam</a> <a href="https://social.skynetcloud.site/tags/xAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#xAI</a> <a href="https://social.skynetcloud.site/tags/X" class="mention hashtag" rel="nofollow noopener" target="_blank">#X</a>

Pyrzout :vm:Model Namespace Reuse Flaw Hijacks AI Models on Google and Microsoft Platforms <a href="https://hackread.com/model-namespace-reuse-flaw-ai-models-google-microsoft/" rel="nofollow noopener" translate="no" target="_blank">https://hackread.com/model-namespace-reuse-flaw-ai-models-google-microsoft/</a> <a href="https://social.skynetcloud.site/tags/ArtificialIntelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArtificialIntelligence</a> <a href="https://social.skynetcloud.site/tags/ModelNamespaceReuse" class="mention hashtag" rel="nofollow noopener" target="_blank">#ModelNamespaceReuse</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a>

Pyrzout :vm:Academics Build AI-Powered Android Vulnerability Discovery and Validation Tool <a href="https://www.securityweek.com/academics-build-ai-powered-android-vulnerability-discovery-and-validation-tool/" rel="nofollow noopener" translate="no" target="_blank">https://www.securityweek.com/academics-build-ai-powered-android-vulnerability-discovery-and-validation-tool/</a> <a href="https://social.skynetcloud.site/tags/ArtificialIntelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArtificialIntelligence</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://social.skynetcloud.site/tags/research" class="mention hashtag" rel="nofollow noopener" target="_blank">#research</a> <a href="https://social.skynetcloud.site/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://social.skynetcloud.site/tags/A2" class="mention hashtag" rel="nofollow noopener" target="_blank">#A2</a> <a href="https://social.skynetcloud.site/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a>

Pyrzout :vm:Critical SAP S/4HANA Vulnerability Actively Exploited, Allowing Full System Takeover <a href="https://gbhackers.com/critical-sap-s-4hana-vulnerability/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/critical-sap-s-4hana-vulnerability/</a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a>/vulnerability <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerabilities</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a>

Pyrzout :vm:CISA Warns: TP-Link Vulnerabilities Under Active Exploitation <a href="https://gbhackers.com/cisa-warns-tp-link-vulnerabilities/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/cisa-warns-tp-link-vulnerabilities/</a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a>/vulnerability <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Pyrzout :vm:New Exploit Bypasses Code Integrity to Backdoor Signal, 1Password, Slack, and More <a href="https://gbhackers.com/new-exploit-bypasses-code-integrity/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/new-exploit-bypasses-code-integrity/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a>

Pyrzout :vm:Attackers are exploiting critical SAP S/4HANA vulnerability (CVE-2025-42957) <a href="https://www.helpnetsecurity.com/2025/09/05/attackers-are-exploiting-critical-sap-s-4hana-vulnerability-cve-2025-42957/" rel="nofollow noopener" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/09/05/attackers-are-exploiting-critical-sap-s-4hana-vulnerability-cve-2025-42957/</a> <a href="https://social.skynetcloud.site/tags/SecurityBridge" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityBridge</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://social.skynetcloud.site/tags/SAPsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SAPsecurity</a> <a href="https://social.skynetcloud.site/tags/enterprise" class="mention hashtag" rel="nofollow noopener" target="_blank">#enterprise</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/NCSC" class="mention hashtag" rel="nofollow noopener" target="_blank">#NCSC</a>-NL <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/SAP" class="mention hashtag" rel="nofollow noopener" target="_blank">#SAP</a>

Pyrzout :vm:CISA Warns of Android 0-Day Use-After-Free Vulnerability Exploited in Attacks <a href="https://cybersecuritynews.com/android-0-day-use-after-free-vulnerability/" rel="nofollow noopener" translate="no" target="_blank">https://cybersecuritynews.com/android-0-day-use-after-free-vulnerability/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/VulnerabilityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecuritynews" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecuritynews</a> <a href="https://social.skynetcloud.site/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a>

BeyondMachines :verified:Critical vulnerability in Sitecore CMS is actively exploited to deploy malwareMandiant researchers discovered active exploitation of a critical zero-day vulnerability (CVE-2025-53690) in Sitecore content management systems that enables remote code execution through ViewState deserialization attacks when administrators use sample ASP.NET machine keys in production environments. The vulnerability affects Sitecore XP 9.0 and Active Directory 1.4 and earlier versions.**If you're running Sitecore XP 9.0 or Active Directory 1.4 (or earlier), THIS IS URGENT. Replace any sample machine keys in your web.config files with newly generated unique keys - attackers are actively exploiting this to gain remote code execution. Check Sitecore security bulletin SC2025-005 and the Mandiant advisory for the exact steps and scan your environment for signs of compromise using the indicators they've provided.** <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/advisory" class="mention hashtag" rel="nofollow noopener" target="_blank">#advisory</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://beyondmachines.net/event_details/critical-vulnerability-in-sitecore-cms-is-actively-exploited-to-deploy-malware-p-l-7-c-s/gD2P6Ple2L" rel="nofollow noopener" translate="no" target="_blank">https://beyondmachines.net/event_details/critical-vulnerability-in-sitecore-cms-is-actively-exploited-to-deploy-malware-p-l-7-c-s/gD2P6Ple2L</a>

BeyondMachines :verified:Multiple vulnerabilities reported in Hikvision HikCentral productsHikvision is reporting three security vulnerabilities in its HikCentral surveillance management software, including an access control flaw (CVE-2025-39247) that allows unauthenticated attackers to remotely gain administrative permissions. The company has released security patches for all affected HikCentral product versions.**If you're using any Hikvision HikCentral products, prioritize HikCentral Professional for patching. It has the most dangerous flaw. First, make sure the products are isolated from the internet and accessible from trusted networks.** <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/advisory" class="mention hashtag" rel="nofollow noopener" target="_blank">#advisory</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://beyondmachines.net/event_details/multiple-vulnerabilities-reported-in-hikvision-hikcentral-products-a-y-1-8-4/gD2P6Ple2L" rel="nofollow noopener" translate="no" target="_blank">https://beyondmachines.net/event_details/multiple-vulnerabilities-reported-in-hikvision-hikcentral-products-a-y-1-8-4/gD2P6Ple2L</a>

Pyrzout :vm:Hackers Exploit Raw Disk Reads to Evade EDR and Steal Sensitive Files <a href="https://gbhackers.com/hackers-exploit-raw-disk-reads-to-evade-edr/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/hackers-exploit-raw-disk-reads-to-evade-edr/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a>

Pyrzout :vm:Windows Heap Buffer Overflow Vulnerability Allows Attackers to Gain Elevated Privileges <a href="https://gbhackers.com/windows-heap-buffer-overflow-vulnerability/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/windows-heap-buffer-overflow-vulnerability/</a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a>/vulnerability <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a>

Pyrzout :vm:CISA Warns of Linux Kernel Race Condition Vulnerability Exploited in Attacks <a href="https://cybersecuritynews.com/cisa-linux-kernel-race-condition-vulnerability/" rel="nofollow noopener" translate="no" target="_blank">https://cybersecuritynews.com/cisa-linux-kernel-race-condition-vulnerability/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecuritynews" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecuritynews</a> <a href="https://social.skynetcloud.site/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a>

Pyrzout :vm:Hackers Target Cisco ASA Devices in Massive Scan Across 25,000 IPs <a href="https://gbhackers.com/hackers-target-cisco-asa-devices/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/hackers-target-cisco-asa-devices/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.skynetcloud.site/tags/Cisco" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cisco</a>

Offensive Sequence⚠️ CRITICAL: CVE-2025-55241 in Microsoft Entra lets attackers bypass auth & escalate privileges remotely (CVSS 9.0). No exploits yet; enforce MFA, segment networks, tighten RBAC. Stay ready for patch! <a href="https://radar.offseq.com/threat/cve-2025-55241-cwe-287-improper-authentication-in--993fbfec" rel="nofollow noopener" translate="no" target="_blank">https://radar.offseq.com/threat/cve-2025-55241-cwe-287-improper-authentication-in--993fbfec</a> <a href="https://infosec.exchange/tags/OffSeq" class="mention hashtag" rel="nofollow noopener" target="_blank">#OffSeq</a> <a href="https://infosec.exchange/tags/Azure" class="mention hashtag" rel="nofollow noopener" target="_blank">#Azure</a> <a href="https://infosec.exchange/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://infosec.exchange/tags/IAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#IAM</a> <a href="https://infosec.exchange/tags/CVE2025_55241" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE2025_55241</a>

OTX BotViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690)A critical ViewState deserialization vulnerability (CVE-2025-53690) was discovered in Sitecore products, affecting deployments using an exposed sample machine key. The attacker exploited this to achieve remote code execution, progressing from initial compromise to privilege escalation. Key events included deploying WEEPSTEEL malware for reconnaissance, archiving sensitive files, staging tools like EARTHWORM and DWAGENT, creating local admin accounts, dumping credentials, and performing Active Directory reconnaissance with SHARPHOUND. The attack demonstrated sophisticated knowledge of the target system and leveraged various techniques for persistence and lateral movement. Sitecore has addressed the issue and notified affected customers.Pulse ID: 68b9d2694432c73564226cd5 Pulse Link: <a href="https://otx.alienvault.com/pulse/68b9d2694432c73564226cd5" rel="nofollow noopener" translate="no" target="_blank">https://otx.alienvault.com/pulse/68b9d2694432c73564226cd5</a> Pulse Author: AlienVault Created: 2025-09-04 17:54:49Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/Edge" class="mention hashtag" rel="nofollow noopener" target="_blank">#Edge</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Mac" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mac</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/RAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#RAT</a> <a href="https://social.raytec.co/tags/RemoteCodeExecution" class="mention hashtag" rel="nofollow noopener" target="_blank">#RemoteCodeExecution</a> <a href="https://social.raytec.co/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://social.raytec.co/tags/Worm" class="mention hashtag" rel="nofollow noopener" target="_blank">#Worm</a> <a href="https://social.raytec.co/tags/ZeroDay" class="mention hashtag" rel="nofollow noopener" target="_blank">#ZeroDay</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener" target="_blank">#AlienVault</a>

Recent searches

Search options

Administered by:

Server stats:

#Vulnerability