Lexfo

Offensive IT security

[Lexfo @LexfoSecurite]

🔔 New research from Lexfo on pre- & post-authentication vulnerabilities in WSO2 products — uncovering bypasses, RCE, SSRF, CSRF, and account-takeover risks. See our detail article → https://t.co/1jNmsIhdZl
#cybersecurity #infosec #offensivesecurity #pentest #WSO2

[Ambionics Security @ambionics]

🔓 On an asset under our continuous monitoring, our pentester @nol_tech turned a SELECT-only PostgreSQL SQLi in Drupal (CVE-2026-9082) into a full RCE when DB role is superuser. Details below 👇
📝 https://t.co/R7F5XQ2vZD
🛠️ https://t.co/yRJ8zX1Nlb
#Drupal #PostgreSQL #RCE #SQLi

[Lexfo @LexfoSecurite]

Congratulations to our pentester @nol_tech on placing 2nd in the Web Senior category at the #FCSC2026 qualifications, with a score of 3,616 points.

This kind of result speaks for itself. Best of luck for the next rounds! 🍀

#CTF #Cybersecurity

[Ambionics Security @ambionics]

🚨 Critical File Upload to RCE in @NinjaForms File Uploads @WordPress plugin (CVE-2026-0740)!

Deep dive & PoC:
👉https://t.co/ZLu5KMsj9D
🔍By @whattheslime from @Ambionics CTEM solution
🛡️Patch available (v3.3.27) — Update now!

#WordPress #RCE #InfoSec #CyberSecurity #CVE

[Lexfo @LexfoSecurite]

🚨 New post on https://t.co/UzE5dLbhEx: how to sniff BLE communications with an SDR (e.g. HackRF One) — the challenges of frequency hopping and strengths of the SDR approach for security researchers. Read it ➜ https://t.co/dAI25vTr7J
#BLE #SDR #Security

[Lexfo @LexfoSecurite]

👾🔒New Analysis: Secp0 Ransomware! 🚨

Our CTI team with our CSIRT, has analyzed the Secp0 ransomware. It operates as double-extortion ransomware, encrypting data and threatening public disclosure, targeting Linux systems.

All the details in our report : https://t.co/6nmSPAsgU7

[Lexfo @LexfoSecurite]

Update: Our CSIRT has refined the YARA rule featured in the article to enhance its precision for threat hunting

[Lexfo @LexfoSecurite]

👾🔒New Analysis: Secp0 Ransomware! 🚨

Our CTI team with our CSIRT, has analyzed the Secp0 ransomware. It operates as double-extortion ransomware, encrypting data and threatening public disclosure, targeting Linux systems.

All the details in our report : https://t.co/6nmSPAsgU7

[Ambionics Security @ambionics]

🚀 Huge thanks to @cfreal_ for the threading PR.
Lightyear is now faster than ever! We truly appreciate continued contributions.
If you haven’t yet, give lightyear a try and see the difference yourself!

#opensource #lightyear #performance #php #pentest #infosec #cybersecurity

[Lexfo @LexfoSecurite]

🌍 World Leaks: an extortion platform 🚨

Our CTI team produced an analysis of World Leaks. The article covers its origins, operational challenges, and collaborations with other threat actors.
https://t.co/FG74P7GBdx

#ThreatIntelligence #WorldLeaks #CTI

[Lexfo @LexfoSecurite]

Ambionics Security, our continuous pentest service, has just published details concerning a pre-authentication RCE on GLPI (CVE-2025-2479 and CVE-2025-24801) found by our experts.

Patch immediately to protect your environment. If you have any questions, contact us today.

[Ambionics Security @ambionics]

GLPI, an open-source IT service management software suite, has released version 10.0.18, addressing two critical vulnerabilities found by our experts : an SQL injection (CVE-2025-24799) and a remote code execution (CVE-2025-24801). Checkout our blog post: https://t.co/INba9ohWNL.

[Lexfo @LexfoSecurite]

Check out this new interesting php research by PT Swarm ! Using some of @ambionics, our Continuous Pentesting Service, tools !

[Ambionics Security @ambionics]

New #PHP research by @ptswarm ! Using our tools wrapwrap (https://t.co/u0QOYqhpQ6) and our latest one lightyear (https://t.co/g0kGkHZQgg) developed by @cfreal_ ! #php #xxe #infosec #CyberSecurity

[Lexfo @LexfoSecurite]

Grâce à des techniques d'OSINT, nous avons identifié des similitudes frappantes entre ces sites, révélant des liens avec des acteurs communs. Découvrez comment nous avons démêlé ce réseau et les résultats surprenants de notre investigation !https://t.co/HLqBUTszoT

[Lexfo @LexfoSecurite]

Dans le cadre de nos enquêtes sur la fraude, l'équipe CTI de Lexfo a découvert un réseau de boutiques en ligne vendant de faux documents, directement accessibles sur le web.

[Lexfo @LexfoSecurite]

Cette technique qui s'appuie sur une vulnérabilité dans GLIBC pour exécuter du code dans une application PHP.

Pour en savoir plus rendez vous sur notre blog : https://t.co/1feKFP3zlp

[Lexfo @LexfoSecurite]

Lundi nous évoquions le classement des techniques de hacking 2024 réalisé par @PortSwigger .

Deuxième technique mise en avant dans le classement et issue de la R&D de nos équipes : IconV

[Lexfo @LexfoSecurite]

Tous les détails dans l'article sur notre blog : https://t.co/LSqFJJmTxC

Et retrouvez l'outil sur notre GitHub: https://t.co/aQRhWWTXdA

[Lexfo @LexfoSecurite]

Chaque année @PortSwigger réalise le top 10 des nouvelles techniques de hacking.

https://t.co/h1neezd9Yt

Cette année 2 techniques développé par les équipes Lexfo apparaissent dans la liste des nominées

[Lexfo @LexfoSecurite]

On commence avec Lightyear : Les équipes Ambionics Security ont créé LIGHTYEAR, qui vous permet d'exploiter les failles de type lecture de fichier à l'aveugle en PHP, bien plus efficacement qu'à l'accoutumée.

[Lexfo @LexfoSecurite]

2025 : Notre industrie évolue, nos ambitions grandissent ! 🎯
L'équipe LEXFO continue d'innover pour votre sécurité 🛡️ #Cybersécurité #BonneAnnée2025