CIRCLE WITH A DOT

️ PowerShell Obfuscation: Hiding Malicious Payloads from Antivirus Detection️ Antivirus databases contain millions of signatures, yet trojans are still a staple in the hacker toolkit. Even well-known, public payloads from Metasploit, various RATs, and stealers can slip past detection. How? Through obfuscation. You can even hide a PowerShell script from the prying eyes of a… https://hackmag.com/security/powershell-obfuscation?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials#security

If a ransomware attack doesn't result in an immediate $10 million breach statistic, you're lucky - the average ransom demand is now over $1.4 million, with 55% of respondents reporting paying between $100k to $500k.Where would emergency understanding ransomware's legal ramificat... break first in your environment?Read more: https://steelefortress.com/fortress-feed/emergency-understanding-ransomwares-legal-ramifications-and-strategies-for-victimized-businesses-fixes-you-need-this-weekCyberSecurity #Ransomware #InfoSec #Security Watch Teaser: https://steelefortress.com/u5e0yu

Pour information, voici les 2 tasks Ansible que l'on applique pour contourner #copyfail :https://paste.evolix.org/?e33be19335e04f0e#BDZbmCJNzevojN2fkreTUWtdPtckq8qkMzkJSgjfavJd

SonicWall SonicOS: Sicherheitslücke erlaubt Management-Interface-ZugriffSonicWall warnt vor drei Sicherheitslücken in SonicOS. Angreifer können etwa unbefugt auf einige Management-Interface-Funktionen zugreifen.https://www.heise.de/news/SonicWall-SonicOS-Sicherheitsluecke-erlaubt-Management-Interface-Zugriff-11277522.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#IT #Security #Sicherheitslücken #Dell #Updates #news

@Lioh OK, so what’s your preferred vulnerability disclosure policy?Just linking the document is fine.

In Golang I love table drive tests for logic that slices and dices protocol bytes off the wire because it allows me to trivially feed those same test inputs to fuzzers. Anytime anyone adds a test entry to the table to exercise new code or check a failure mode it automatically gets added to the fuzzing corpus without additional work.#Golang #Fuzzing #Security

@terribletowelie Oh cool, good to know.

Copy Fail – CVE-2026-31431https://copy.fail/#HackerNews #CopyFail #CVE2026 #Security #Vulnerability #HackerNews #TechNews

New.Group-IB:Phoenix Rising: Exposing the PhaaS Kit Behind Global Mass Phishing Campaigns https://www.group-ib.com/blog/phoenix-phaas-kit-smishing/ Securonix:Deep#Door Stealer: Stealthy Python Backdoor and Credential Stealer Leveraging Tunneling, Multi-Layer Persistence, and In-Memory Surveillance Capabilities https://www.securonix.com/blog/deepdoor-python-backdoor-and-credential-stealer/#threatintel #threatintelligence @threatresearch #infosec #security #surveillance #Python #phishing #smishing

heise+ | Confidential Computing: Schutz von Daten während ihrer VerarbeitungConfidential Computing schützt Daten in der Cloud, sogar vor dem Cloudbetreiber. Wir erklären, wie die Technik funktioniert und wo ihre Grenzen liegen.https://www.heise.de/hintergrund/Confidential-Computing-Schutz-von-Daten-waehrend-ihrer-Verarbeitung-11210840.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#Datenschutz #Datensicherheit #IT #Security #Verschlüsselung #news

Security review of Plasma Login Manager (SUSE Security Team Blog)https://lwn.net/Articles/1070434/ #LWN #Linux #security #SUSE

88% of arXiv papers leak hidden dataKeys, metadata, comments exposedSecurity papers worst affectedDocs = attack surfaceSource: https://www.helpnetsecurity.com/2026/04/28/cybersecurity-researchers-arxiv-latex-source-leaks/ Thoughts? Follow @technadu #InfoSec #DataLeak #Security

The Race Is on to Keep #AI #Agents From Running Wild With Your #CreditCards#AIagents may soon be buying your stuff for you. The #FIDO Alliance has teamed up with #Google and #Mastercard to try to ensure that #shopping in the near future isn't a complete disaster.#securityhttps://www.wired.com/story/the-race-is-on-to-keep-ai-agents-from-running-wild-with-your-credit-cards/

IT-Sicherheitsplattform: Anreifer können Wazuh kompromittierenIn der aktuellen Wazu-Version haben die Entwickler mehrere Schwachstellen geschlossen. Es kann Schadcode auf Systeme gelangen.https://www.heise.de/news/IT-Sicherheitsplattform-Anreifer-koennen-Wazuh-kompromittieren-11276206.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#IT #Patchday #Security #Sicherheitslücken #Updates #news

@heisec Ich habe den Post erst einmal gar nicht verstanden (bzw. auch Titel und Untertitel des Artikels), da es doch der ureigenste Zweck von Push ist, Code in ein Respository zu laden. Der Artikel gab dann Aufschluss:"Durch das Ausnutzen eines Injection-Fehlers in den internen GitHub-Protokollen konnte jeder authentifizierte Nutzer beliebige Befehle auf den Backend-Servern von GitHub ausführen, mit einem einzigen „git push“-Befehl.", d.h. es geht um das Einschleusen in den Server selbst.

heise security Tour: KI, Identitäten und Lieferkette versus SecurityDie heise security Tour liefert Sicherheitsverantwortlichen das praxisrelevante Hintergrundwissen zu den aktuellen Herausforderungen der IT-Sicherheit. Uaisg...https://www.heise.de/news/heise-security-Tour-KI-Identitaeten-und-Lieferkette-versus-Security-11271374.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#heiseSecurityTour #IdentityManagement #IT #KünstlicheIntelligenz #Security #news

Abermals kritische Sicherheitslücke in Nginx UI geschlossenWichtige Sicherheitsupdates schließen mehrere Schwachstellen im Web UI für nginx-Webserver Nginx UI. Angreifer können Instanzen übernehmen.https://www.heise.de/news/Abermals-kritische-Sicherheitsluecke-in-Nginx-UI-geschlossen-11276012.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#IT #Patchday #Security #Sicherheitslücken #Updates #news

@terribletowelie That’s hilarious! The jumpsuit matches his fake orange skin and hair.

🟡 Clash | 5/10Clashes in al-Duwayr Village, Eastern Deir ez-ZorSyrian Internal Security Forces attempted to arrest a wanted man who refused to surrender, leading to clashes. Three security personnel were injured.#OSINT #NewsGroup #Syria #Clash #Security

RE: https://mstdn.social/@Hackread/116483523143375972I knew it! Ever wondered how you can just install packages without having to install a password in Fedora when you type a command that doesn't exist in the terminal? Turns out that's indeed unsafe, and now PackageKit has a privilege escalation CVE.I guess this explains why some things suddenly started to ask for passwords recently #Security #Linux #CVE