3C N-SOC

Get the newest #cybersecurity updates right here. Stay informed and ahead of the curve with the latest insights.

[3C N-SOC @3cSoc]

🚨 Malware for $100? Cybercrime is cheaper than you think.
A forum ad promotes a fully undetectable shellcode loader for just $100. Add $5 for a server, and you’re set to launch attacks.
💡 Businesses must enhance detection with AI tools & educate teams. Cyber resilience is key!

[3C N-SOC @3cSoc]

🚨 Beware of #LinkedIn contacts—Lazarus is targeting orgs via fake job offers!

🎯 Targets: defense, crypto users (e.g., $308M DMM theft in Japan).
⚠️ Tactics: move chats to WhatsApp, share #malware in fake docs.
🛡 Tips: Verify contacts, limit SNS on work devices, stay vigilant!

[3C N-SOC @3cSoc]

🚨 HPE Data Breach Alleged by IntelBroker

IntelBroker claims to sell HPE’s sensitive data:

Private GitHub repos
API access, Docker builds
Zerto, iLO source code
Old user PII
⚠️ Risks: RCE, unauthorized access, phishing.

Stay alert for updates.

#DataBreach #CyberSecurity #HPE

[3C N-SOC @3cSoc]

🚨 Fake installers spreading #malware!

Attackers use YouTube & social media to share links for fake apps, hosting malware on sites like Mega. These steal sensitive browser data via stealthy process injection.

Stay safe: download only from trusted sources!

[3C N-SOC @3cSoc]

🚨 #GiveWP plugin (100k installs) patched for a critical PHP Object Injection flaw (CVE-2025-22777, CVSS 9.8).

💥 Exploitable via donation forms, allowing full site takeover (RCE).

🔐 Update to v3.19.4 immediately!

#WordPress #CyberSecurity #RCE #Vulnerability

[3C N-SOC @3cSoc]

🚨 35M #Italian phone numbers & names leaked on hacker forum

📁 Extracted from the 2021 #Facebook leak.
⚠️ Risks:
#Phishing scams
Targeted fraud
#SMS-based attacks

📌 Stay alert for suspicious messages or calls. Don’t share personal info.
#DataLeak #CyberSecurity #Italy

[3C N-SOC @3cSoc]

🚨 Critical bug in #Windows 11 24H2 blocks security updates!

📅 Affected: Installs using media with Oct/Nov 2024 security updates.
❌ No impact on Windows Update installs.
🔧 Fix:

Avoid outdated media.

Use Dec 2024 update or later.
Reinstall with updated media if needed.

[3C N-SOC @3cSoc]

🚨 Critical flaws in WPLMS & VibeBP WordPress plugins!

CVE-2024-56046: Arbitrary file uploads → RCE risk
CVE-2024-56043: Privilege escalation → Admin takeover
CVE-2024-56042: SQL injection → DB exposure

🔐 Updates:
WPLMS v1.9.9.5.3
VibeBP v1.9.9.7.7
#CyberSecurity #WordPress

[3C N-SOC @3cSoc]

🚨 CVE-2024-49775: Critical #Siemens UMC flaw (CVSS 9.8) enables remote code execution!

Affected products:
TIA Portal (v16–19)
SIMATIC PCS neo
Opcenter apps

⚠️ Mitigation: Filter ports 4002/4004, block 4004 if RT servers unused.

Act now to secure your systems! #CyberSecurity

[3C N-SOC @3cSoc]

🚨 Xloader #malware via fake #SharePoint emails!

#Phishing emails with "Open Files" link
Downloads malicious document.exe
Injects into processes, steals credentials

Stay vigilant!
#CyberSecurity #Xloader

[3C N-SOC @3cSoc]

🚨 Claim of #Italy Police Data Leak 🚨

A Telegram channel claims to sell Italian police documents, often linked to major #databreaches.

📁 Details unverified, but if true, this could be a critical security incident.

#CyberSecurity #InfoSec

[3C N-SOC @3cSoc]

🚨 CVE-2024-49112: Critical #Windows LDAP Flaw

#Microsoft fixes an RCE vulnerability (CVSS 9.8) in LDAP, exposing networks to major risk.

Affects Windows 10/11 & Server versions.
Exploitable via crafted LDAP requests.
Patch now to secure #Domain #Controllers!
#CyberSecurity

[3C N-SOC @3cSoc]

🚨 Critical vulnerabilities in #Volkswagen Group cars

12 flaws in #MIB3 infotainment systems allow attackers to:
Track GPS in real-time
Execute remote code
Access contacts, record conversations
#VW confirms fixes underway. Update systems now!

#CyberSecurity #AutomotiveSecurity

[3C N-SOC @3cSoc]

🚨 NoviSpy spyware targets journalists & activists in Serbia using Qualcomm zero-day flaws (e.g., CVE-2024-43047).

🔍 Installs via zero-click VoLTE calls
🛑 Targets Android kernel persistently
⚠️ Patch devices now to mitigate!
#CyberSecurity #Spyware #ZeroDay

[3C N-SOC @3cSoc]

🚨 390K+ WordPress credentials stolen via malicious GitHub repo targeting security researchers & red teamers.

🔴 Victims lost SSH keys, AWS creds, & more
🛑 Avoid fake PoCs & validate repositories
⚠️ Check system integrity for miners & leaks
#CyberSecurity #DataBreach #GitHub

[3C N-SOC @3cSoc]

🚨 #Databreach alert: Database from https://t.co/GQ5qja0YIt leaked, exposing 420K blood donors' data
🩸 Leaked info: Names, addresses, blood types, phone numbers, emails, IDs, and sensitive medical info.
‼️ Users: Beware of phishing!
📢 Update your privacy settings
#DataBreach

[3C N-SOC @3cSoc]

🚨 convoC2: a new red team tool to execute system commands via #MicrosoftTeams

🔹 Commands embedded in span tags
🔹 Outputs hidden in Adaptive Cards URLs
🔹 Operates via MS servers, bypassing AV

⚠️ Use ethically! Blue teams must monitor Teams logs closely. #CyberSecurity

[3C N-SOC @3cSoc]

🚨 Microsoft fixes 72 flaws in #PatchTuesday, including an exploited CLFS privilege escalation bug (CVE-2024-49138).

💻 Highlights:
* LDAP RCE flaw (CVSS 9.8)
* Ransomware-linked CLFS exploits
* CISA mandates patching by Dec 31.

🔒 Update now!
#CyberSecurity #Microsoft

[3C N-SOC @3cSoc]

🚨 New #Windows #ZeroDay (CVE-2024-38193) actively exploited!
This use-after-free bug in afd.sys allows privilege escalation to SYSTEM.
Lazarus linked to attacks using malware FudModule. PoC published on GitHub.

🛡 Patch now: August 2024 updates available. #CyberSecurity

[3C N-SOC @3cSoc]

🚨 Critical #Safari RCE flaw (CVE-2024-44308) exploited in the wild!
Affects #iOS, #iPadOS, #macOS, and #visionOS via malicious WebKit content.
✅ Fixed in:
Safari 18.1.1
iOS/iPadOS 17.7.2, 18.1.1
macOS 15.1.1

Patch now to avoid system compromise! #CyberSecurity