CIRCLE WITH A DOT

New.Infoblox: No Reach, No Risk: The Keitaro Abuse in Modern Cybercrime Distribution https://www.infoblox.com/blog/threat-intelligence/no-reach-no-risk-the-keitaro-abuse-in-modern-cybercrime-distribution/ @InfobloxThreatIntel #infosec #threatintel #threatintelligence #scam

Cyble: The Energy Sector’s Ransomware Nightmare: Why Critical Infrastructure Can’t Catch a Break https://cyble.com/blog/energy-sector-ransomware-attack-report/ #infosec #ransomware #threatintel #threatintelligence

@AAKL another month, another ivanti exploit

GlassWorm update:• Solana dead drop C2 + DHT fallback• Fake Chrome extension → full browser exfil• HW wallet phishing (Ledger/Trezor)• HVNC + SOCKS modules• Targets npm, PyPI, MCPDecentralized infra = stealth persistence.Source: https://thehackernews.com/2026/03/glassworm-malware-uses-solana-dead.htmlFollow @technadu #InfoSec #ThreatIntel #Malware

The New Stack: Edera spent years calling KVM less secure. Here’s why it changed its mind https://thenewstack.io/edera-adds-kvm-support/ @TheNewStack @sjvn #opensource #infosec

The hardest hack in infosec? Losing your job and figuring out what comes next. At BSides312, rand0h is getting real about the emotional fallout, the practical scramble, and the resilience it takes to keep going. 15 years in cyber, founder of DEF CON 610, SOC Goon — the horrors persist, but so does he.May 16th. Chicago.️ bsides312.org#BSides312 #InfoSec #CyberSecurity #CyberCareers #DEFCon #Chicago

When you click “forgot password”, some platforms don’t fully hide user data.They show:partial email (e.g. r****n@gmail.com)phone hints (e.g. +62 ***1234)Most people ignore this.#OSINT #InfoSec #CyberSecurity

we are hiring a senior-level #infosec engineer. position will NOT be remote, but in Tysons Corner, VA. But if that could be you, HMU

THREAT INTELLIGENCEPolyShell attacks target 56% of all vulnerable Magento storesVulnerability | MEDIUMAttacks leveraging the 'PolyShell' vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting more...Full analysis:https://www.yazoul.net/news/news/polyshell-attacks-target-56-of-all-vulnerable-magento-stores#InfoSec #Ransomware #CyberNews

DATA BREACH ALERTScuf Gaming - 129K accounts exposedCompromised data:Email Addresses, Passwords, Usernames, Names +1 moreCheck if you're affected and what to do:https://www.yazoul.net/breaches/breach/scuf-gaming-breach-exposes-129k-gamer-accounts-and-passwords#DataPrivacy #CyberAttack #InfoSec

Possible Phishing on: ️hxxps[:]//specialforcerush[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/69c4fd5d3b775000070c1975#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS3462Location: Taoyuan City, TWAdded: 2026-03-26T11:50#shodansafari #infosec

The https://cyber-edu.co/ #UNbreakableRomania 2026 final is happening *this week* - and we're excited to support the top 16 teams competing!Along with the in-person CTF final, 20 young women will join the Girls in Cyber Bootcamp for hands-on labs, mentorship, and a real path into #cybersecurity.That’s how strong security communities grow: through practice, support, and a room for new people to welcome and nurture them.Good luck to all finalists and bootcamp participants! Make the best of it! Learn more about UNbreakable România: https://unbreakable.ro/ #offensivesecurity #infosec

Ransomware Attack Disrupts Digital Operations at Spain's Port of VigoThe Port of Vigo in Spain suffered a ransomware attack on March 24, 2026, forcing the isolation of its digital infrastructure and a transition to manual cargo management processes.****#cybersecurity #infosec #incident #ransomwarehttps://beyondmachines.net/event_details/ransomware-attack-disrupts-digital-operations-at-spain-s-port-of-vigo-b-j-v-k-8/gD2P6Ple2L

Possible Phishing on: ️hxxp[:]//owennos1[.]wixsite[.]com/my-site 🧬 Analysis at: https://urldna.io/scan/69c341bb3b7750000420b283#cybersecurity #phishing #infosec #urldna #scam #infosec

Signal > noise.GreyNoise: 242K new IPs, 99.7% no TCP handshake.Real activity?UCLOUD +472%, multi-protocol scans.Are you validating sources?Source: https://www.greynoise.io/blog/ghost-fleet-half-new-scanning-ips-geolocated-to-hong-kongComment + follow TechNadu#Infosec #ThreatIntel #SOC

How to Execute a DNS Cache Poisoning Attack: Between Entropy and Post-QuantumIn this article we bring the phenomenon of the DNS Poisoning Attack into the laboratory, controlling the variables, reducing entropy, analyzing the behavior of the resolver; all to understand quantitatively why the modern countermeasures of randomization, 0x20 encoding, DNSSEC have drastically raised the computational cost of the attack. Link https://8bitsecurity.com/posts/how-to-execute-a-dns-cache-poisoning-attack-between-entropy-and-post-quantum/#cybersecurity #infosec

New ransom group blog post!Group name: SilentRansomGroupPost title: J... D...Info: https://cti.fyi/groups/SilentRansomGroup.html#ransomware #cti #threatintelligence #cybersecurity #infosec

@gadi I am going to sub-toot, but there are 'respectable' #InfoSec pros on this platform and others that absolutely refuse to enge with Ai as a new attack surface and new attack vector.One 'well regarded' infosec practitioner, speaker at conferences, with large following said they "Will sit and watch it all burn".Which is exactly like a fireman watchin the town burn because ideology.

كيف اكتشفتُ ثغرات أمنية قبل اختراق الحساب عدة مرات — دليل سهل للمبتدئينThis article discusses a Cross-Site Scripting (XSS) vulnerability in a web application. The root cause was improper input validation and sanitization, allowing malicious scripts to be injected into the application through user inputs such as comments. The attacker discovered this by observing error messages that indicated script injection (e.g., 'Uncaught SyntaxError'). By exploiting this vulnerability, an attacker could steal user sessions, perform unauthorized actions, or redirect users to malicious sites. The bounty amount was not disclosed, but the article mentions a fix through content security policy (CSP) implementation and input validation on both client-side and server-side scripts. Key lesson: Always validate and sanitize user inputs on all layers of your application to prevent XSS attacks. #BugBounty #WebSecurity #XSS #InputValidation #Infosechttps://medium.com/@montaser_mohsen/%D9%83%D9%8A%D9%81-%D8%A7%D9%83%D8%AA%D8%B4%D9%81%D8%AA%D9%8A-%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-%D8%A3%D9%85%D9%86%D9%8A%D8%A9-%D9%82%D8%A8%D9%84-%D8%A7%D8%AE%D8%AA%D8%B1%D8%A7%D9%82-%D8%A7%D9%84%D8%AD%D8%B3%D8%A7%D8%A8-%D8%B9%D8%AF%D8%A9-%D9%85%D8%B1%D8%A7%D8%AA-%D8%AF%D9%84%D9%8A%D9%84-%D8%B3%D9%87%D9%84-%D9%84%D9%84%D9%85%D8%A8%D8%AA%D8%AF%D8%A6%D9%8A%D9%86-c86f68feece2?source=rss------bug_bounty-5