CIRCLE WITH A DOT

The platform is DDactic - resilience testing, built on 4 years of manual red-team experience. ddactic.net/about?ref=li-comment

️ HIGH severity in SignalK signalk-server <2.25.0 (CVE-2026-41893): WebSocket login bypasses rate limits, enabling fast brute force attacks. Patch to 2.25.0+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-41893-cwe-307-improper-restriction-of-exc-a656937b #OffSeq #infosec #vuln #bruteforce

Possible Phishing on: ️hxxps[:]//324000zi[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/6a0026bb3b775000096d2155#cybersecurity #phishing #infosec #urldna #scam #infosec

Every TLS certificate you've ever issued is public.#cybersecurity #ddos #infosecddactic.net?ref=mastodon

HIGH severity alert: CVE-2026-8234 stack buffer overflow in EFM ipTIME A8004T (v14.18.2) — remote, unauthenticated exploit possible. No patch yet; restrict remote access now. Details: https://radar.offseq.com/threat/cve-2026-8234-stack-based-buffer-overflow-in-efm-i-fc36030f #OffSeq #CVE20268234 #RouterSecurity #Infosec

Possible Phishing on: ️hxxps[:]//uveswebmail[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/69ffe6c73b77500004d1eb56#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing on: ️hxxps[:]//btopper-wku-edu[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/69ffee813b77500004d1ec04#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS3269Location: San Marco Argentano, ITAdded: 2026-05-09T02:18#shodansafari #infosec

Possible Phishing on: ️hxxp[:]//amazon-clone001[.]vercel[.]app 🧬 Analysis at: https://urldna.io/scan/69ffae683b775000097ea7e1#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS21928Location: Richmond, USAdded: 2026-05-09T02:14#shodansafari #infosec

Possible Phishing on: ️hxxps[:]//hay-4o5j263olj73k[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/69ff7df93b7750000604f97e#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS2518Location: Tokyo, JPAdded: 2026-05-09T02:25#shodansafari #infosec

@patnat If I had to give a name to a vulnerability, then I'd call it CVE-1871-84711 (as the name.. not a CVE number) .. Just so that the Press that posts about it, has to use the confusing name: CVE-2026-12345 "CVE-1871-84711" and to create utter chaos

People treat security like a feature they bolt on later. OpenBSD proves the only sane approach is a pristine codebase audited from the start, even if it means sacrificing speed or convenience. That discipline is still the gold standard most projects refuse to follow. #openbsd #infosec #hardening

New ransom group blog posts!Group name: genesisPost title: Rain Makers SolutionsInfo: https://cti.fyi/groups/genesis.htmlGroup name: genesisPost title: Van Atta EngineeringInfo: https://cti.fyi/groups/genesis.htmlGroup name: genesisPost title: Prescott & HoldenInfo: https://cti.fyi/groups/genesis.htmlGroup name: genesisPost title: The American Board of Preventive MedicineInfo: https://cti.fyi/groups/genesis.htmlGroup name: genesisPost title: CarePoint HealthInfo: https://cti.fyi/groups/genesis.html#ransomware #cti #threatintelligence #cybersecurity #infosec

New survey:• 64% of developers report 25%+ productivity gains from AI• Top use cases: code writing, reviews, explanations• Claude Code, Gemini Code Assist & GitHub Copilot lead adoptionChallenges remain around cost, governance & code quality.Source: https://devops.com/survey-sees-ai-driving-devops-productivity-gains-despite-challenges/Follow TechNadu for more AI and DevOps updates.#AI #DevOps #SoftwareEngineering #InfoSec

Possible Phishing on: ️hxxps[:]//momoail[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/69fe5ce43b775000056115b5#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS3462Location: Taoyuan City, TWAdded: 2026-05-09T02:18#shodansafari #infosec

ShinyHunters reportedly defaced Canvas login pages after another alleged Instructure breach.The incident raises concerns around:• EdTech platform security• Student/faculty data exposure• Extortion-driven attacks• Third-party risk managementEducation infrastructure is increasingly becoming a high-value cyber target.Source: https://techcrunch.com/2026/05/07/hackers-deface-school-login-pages-after-claiming-another-instructure-hack/Follow @technadu for more threat intelligence updates.#CyberSecurity #InfoSec #DataBreach #ShinyHunters #Canvas

2026-05-08 RDP #Honeypot IOCs - 300 scansThread with top 3 features in each category and links to the full dataset#DFIR #InfoSecTop IPs:46.63.101.233 - 45104.248.62.230 - 45160.187.146.221 - 30Top ASNs:AS14061 - 48AS51784 - 45AS63949 - 42Top Accounts:hello - 156Test - 39eltons - 15Top ISPs:DigitalOcean, LLC - 48X-city Customers and Private - 45Akamai Technologies, Inc. - 42Top Clients:Unknown - 300Top Software:Unknown - 300Top Keyboards:Unknown - 300Top IP Classification:Unknown - 153hosting - 135proxy - 12Pastebin links with full 24-hr RDP Honeypot IOC Lists:Bad API request, invalid api_dev_key#CyberSec #SOC #Blueteam #SecOps #Security