CVE-2025-3439 - Everest Forms WordPress PHP Object Injection Vulnerability April 11, 2025 at 01:15PM https://ift.tt/uF68ro5 #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

CVE-2025-32755 - Jenkins SSH Slave Debian Host Key Spoofing Vulnerability April 10, 2025 at 12:15PM https://ift.tt/8Nv5fEP #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

CVE-2025-29087 - Sqlite Integer Overflow Through Concat Function April 07, 2025 at 08:15PM https://ift.tt/5ylMfts #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

Why would an organization run wodSSH instead of the default FortiGate SSH? Seriously, I’ve never heard of WeOnlyDo.

Oracle ammette privatamente la violazione dei dati verso gli utenti interessati

Link all'articolo : https://www.redhotcyber.com/post/oracle-ammette-la-violazione-dei-dati-milioni-di-credenziali-rubate/

CVE-2024-38392 - Pexip Infinity Connect Remote Code Execution April 02, 2025 at 09:15PM https://ift.tt/MXgnDqm #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

Attacco informatico via Teams: un semplice messaggio può compromettere la tua azienda!

Link all'articolo : https://www.redhotcyber.com/post/attacco-informatico-via-teams-un-semplice-messaggio-puo-compromettere-la-tua-azienda/

Tre Zeroday critici sfruttati attivamente minacciano i device Apple

Link all'articolo : https://www.redhotcyber.com/post/tre-zeroday-critici-sfruttati-attivamente-minacciano-i-device-apple/

New ransom group blog post!

Group name: kairos
Post title: State's Attorney Office
Info: https://cti.fyi/groups/kairos.html

Ubuntu a rischio: scoperte 3 tecniche per aggirare la sicurezza e ottenere privilegi di root!

Link all'articolo : https://www.redhotcyber.com/post/ubuntu-a-rischio-scoperte-3-tecniche-per-aggirare-la-sicurezza-e-ottenere-privilegi-di-root/

New ransom group blog post!

Group name: ransomhub
Post title: cisd.org
Info: https://cti.fyi/groups/ransomhub.html

Cisco sotto attacco: sfruttate due vulnerabilità critiche nella Smart Licensing Utility!

Link all'articolo : https://www.redhotcyber.com/post/cisco-sotto-attacco-sfruttate-due-vulnerabilita-critiche-nella-smart-licensing-utility/

CVE-2025-1232 - "WordPress Site Reviews Stored XSS Vulnerability" March 19, 2025 at 06:15AM https://ift.tt/JFaxqWB #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

The former director of the GCHQ says we should collaborate more. Huh.

https://www.infosecurity-magazine.com/news/cyber-industry-collaboration-gchq/

Una PE in Microsoft Windows sfruttata da 2 anni Nel Patch Tuesday. Aggiornare avverte CISA e ACN

Link all'articolo : https://www.redhotcyber.com/post/una-pe-in-microsoft-windows-sfruttata-da-2-anni-nel-patch-tuesday-aggiornare-avverte-cisa-e-acn/

New ransom group blog posts!

Group name: arcusmedia
Post title: HYPERNOVA TELECOM
Info: https://cti.fyi/groups/arcusmedia.html

Group name: arcusmedia
Post title: HYPONAMIRU
Info: https://cti.fyi/groups/arcusmedia.html

`Milt Jackson With Hubert Laws ‎– Goodbye (1974 - Album)`

https://www.youtube.com/watch?v=6LYr2nL4jMs

do any of my #cti pals know anything about these domains:

aplonetworks . com
courageous-snake . com

im pretty sure someones aiming a spearphishing harpoon gun at me/phobos and they're being very crafty about it. the links in the email go to those two domains and i cant find anything about them

For some reason people are sharing llm garbage instead of the real chat logs for black basta. Here are the real logs and the telegram channel they're being shared in: https://t[.]me/shopotbasta/21

CTI is a team sport. Not a secret boys club. Sharing is caring. #CTI #GAYINT #CTIFORALL #threatintel #threatintelligence #BlackBasta #Ransomware #Leak