Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)K

Kid

@ kid @sh.itjust.works

Posts
3009
Comments
35
Joined
2 yr. ago

  • Critical Key Derivation Flaws in pbkdf2 Affect Millions of JavaScript Projects, PoC Available

    Jump

  • Google Cloud incident report

    Jump

  • The incident occurred on June 12, 2025, due to a policy change that contained blank fields, causing 503 errors in Google Cloud and Google Workspace APIs. The root cause was:

    1. A new feature added to Service Control on May 29, 2025, without adequate error handling.
    2. The policy change with blank fields was globally replicated and caused Service Control binaries to crash.

  • 84% of Organizations’ SOC Analysts are Unknowingly Investigating the Same Incidents

    Jump

  • Thanks! Corrected

  • Critical Linux Vulnerabilities Expose Password Hashes on Millions of Linux Systems Worldwide

    Jump

  • The first vulnerability, CVE-2025-5054, affects Ubuntu’s Apport crash reporting system, while the second, CVE-2025-4598, impacts systemd-coredump, the default core dump handler used across Red Hat Enterprise Linux 9 and 10, as well as Fedora distributions.

  • Coinbase data breach exposes customer info and government IDs

    Jump

  • You think ransomware is bad? Wait until it infects CPUs

    Jump

  • Noted!

  • CISA warns of potential data breaches caused by legacy Oracle Cloud leak

    Jump

  • Pay, fight, or stall? The dilemma of ransomware negotiations - Help Net Security

    Jump

  • Leak extortion is the main issue nowadays, not covered by backups, I'm afraid.

  • DeepSeek found to be sharing user data with TikTok parent company ByteDance

    Jump

  • How to scan PDF files for malware?

    Jump

  • I didn't know about that tool. Apparently, it is a CDR, which I like very much. I'm not aware of any good open-source implementations.

  • [Patched 09/02/25] Leaking the email of any YouTube user for $10,000

    Jump

  • Very nice approach!

    Some points about the article:

    Nature of the Vulnerability: The vulnerability is a security flaw that allows leaking the email associated with a YouTube channel by exploiting endpoints from both YouTube and Google Pixel Recorder.

    Impact: It allows an attacker to obtain the email associated with any YouTube channel, which can lead to phishing attacks, privacy invasion, and other malicious activities. This potentially affects all YouTube users who own a channel.

    Fix Status: The vulnerability has been fixed by Google. Both parts of the exploit were resolved by 02/09/2025, and the report was disclosed on 02/12/2025.

  • Proton Mail still down as Proton recovers from worldwide outage

    Jump

  • Apparently was not related to a cyber attack, as stated in status page (https://status.proton.me/)

    We have resolved all service outages, and the situation has been stable for some time. We have identified the root cause of the problem, implemented a fix, and are now monitoring the results. Jan 09, 2025 - 19:27 CET

  • Researcher Details CVE-2024-44131 - A Critical TCC Bypass in macOS and iOS

    Jump

  • Deloitte UK Hacked - Brain Cipher Group Claim to Have Stolen 1 TB of Data

    Jump

  • For now, the threat actor is just claiming that they hacked BT. No prove whatsoever. Groups usually post a sample of the data when they claim a victim, but that is not the case, for now.

  • Deloitte UK Hacked - Brain Cipher Group Claim to Have Stolen 1 TB of Data

    Jump

  • If you are asking if the main attack vector was phishing, they are not clear on that:

    According to statements released by Brain Cipher, they have exploited critical weaknesses within Deloitte UK’s cybersecurity infrastructure.

  • Good Projects for People Getting Started in Cybersec

    Jump

  • Welcome! I dont know you background, but I would suggest get into selfhosting. There are several projects related to cybersecurity, fun and useful. Ex: MISP, Pihole, The Hive.

  • FortiGate admins report active exploitation 0-day. Vendor isn’t talking.

    Jump

  • Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

    Jump

  • That's why I don't use Kaspersky :)

  • Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

    Jump

  • In my opinion, you will always be at the mercy of a government in this context: US, China, Russia. In the end it's a matter of choosing which one. FOSS maybe a little less, but in the end it's almost the same. That's my view, of course. That doesn't mean you can't give them a hard time ;)