Multinet Ro

Multimedia / Networking / IT&C / Security / ...

[BleepingComputer @BleepinComputer]

Hackers leak configs and VPN credentials for 15,000 FortiGate devices - @LawrenceAbrams
https://t.co/Fr3S3GMDeb

https://t.co/Fr3S3GMDeb

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Phishing email check

[Dark Reading @DarkReading]

Microsoft Takes Action Against Phishing-as-a-Service Platform: https://t.co/myHv8DA5tA #MSFT

[Cisco Talos Intelligence Group @TalosSecurity]

Cisco Talos discovered a new information stealing campaign operated by a Vietnamese-speaking threat actor targeting government and education entities in Europe and Asia. Read the full blog here: https://t.co/jfl93BeEi0

[The Hacker News @TheHackersNews]

Bitdefender has released a free decryptor for ShrinkLocker, a #ransomware that uses BitLocker to lock files, and can compromise entire networks in under 10 minutes.

Read: https://t.co/C2ITxg9yUl

#infosec #cybersecurity

[Hunter @HunterMapping]

🚨Alert🚨
CVE-2024-10914 (CVSS 9.2): Command Injection Flaw in D-Link NAS Devices
➡️curl "http://[Target-IP]/cgi-bin/account_mgr.cgi cmd=cgi_user_add&name=%27;<INJECTED_SHELL_COMMAND>;%27"
📰Refer: https://t.co/x5uOHgwyrr
📊 26K+ Services are found on https://t.co/g3tSyh13yE yearly.
🔗Hunter Link: https://t.co/mBq3DQAl96
👇Query
HUNTER:/product.name="D-Link ShareCenter"
FOFA: app =D_Link-DNS-ShareCenter
#DLink #PoC #hunterhow #infosec #infosecurity #OSINT #Vulnerability

[CISA Cyber @CISACyber]

#Fortinet released security updates to address vulnerabilities in multiple Fortinet products, including #FortiOS. Users and admins are encouraged to review &amp; apply updates. More info 👉 https://t.co/OrstiyJaCZ #Cybersecurity #InfoSec #PatchTuesday

[The Hacker News @TheHackersNews]

🌩️ Cyber Alert: VEILDrive Attack!

A new attack exploits #Microsoft SaaS tools like Teams and OneDrive, enabling malware distribution through trusted channels.

Read the article: https://t.co/a6Rq1cdyR0

#cybersecurity #hacking

[The Hacker News @TheHackersNews]

⚠️ A high-severity flaw in #Microsoft SharePoint (CVE-2024-38094) has been added to CISA's Known Exploited Vulnerabilities catalog.

Proof-of-concept (PoC) scripts are already public, making exploitation more accessible.

Learn more: https://t.co/K0cmNL14rh

#cybersecurity

[Mandiant (part of Google Cloud) @Mandiant]

🚨 Breaking: A zero-day vulnerability (CVE-2024-47575) has been observed impacting Fortinet FortiManager devices, posing serious risks. Learn how the exploit works, and how to defend against the threat.

Read more -&gt; https://t.co/tGag4Okvvd

#ThreatIntelligence

[BleepingComputer @BleepinComputer]

CISA proposes new security requirements to protect govt, personal data - @billtoulas
https://t.co/FqlvC8gjs7

https://t.co/FqlvC8gjs7

[Steph @w34kp455]

Call it the biggest #NTLM #password database or monstrous #MD5 leak, but on https://t.co/yCapE1L6Gh, you can find precomputed datasets for various wordlists and different hashes - all free!
FYI: all_in_one.latin.txt for NTLM contains 26.5 billion pairs of hash:password inside!🔥

[Mandiant (part of Google Cloud) @Mandiant]

Mandiant’s latest research analyzed 138 vulnerabilities disclosed in 2023, with 97 being exploited as zero-days and 41 as n-days.

The gap between #zeroday and n-day exploitation is widening, driven by increased zero-day usage.

Discover the details: https://t.co/X1MWVJWaKM

[Hunter @HunterMapping]

🚨Alert🚨CVE-2024-23113: CISA added a critical security flaw impacting Fortinet products to its KEV catalog, citing evidence of active exploitation.
📊 737.7K+ IPs are found on https://t.co/g3tSyh13yE yearly
🔗Hunter Link: https://t.co/1kntiQ3oYZ
🔗ShadowServer Link:https://t.co/05nNAIQWs3
👇Search Query
HUNTER:/product.name="Fortinet Client"

#Fortinet #RCE #hunterhow #infosec #infosecurity #OSINT #vulnerability

[BleepingComputer @BleepinComputer]

Cisco investigates breach after stolen data for sale on hacking forum - @LawrenceAbrams
https://t.co/Mh3FQJMNLa

https://t.co/Mh3FQJMNLa

[Ryan Naraine @ryanaraine]

Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. https://t.co/kmvVMSB7sm

[Have I Been Pwned @haveibeenpwned]

New breach: Internet Archive had 31M records breached last month including email address, screen name and bcrypt password hash. 54% were already in @haveibeenpwned. Read more: https://t.co/1d9Mxv97Ac

[Cyber Advising @cyber_advising]

CVE-2024-7479 &amp; CVE-2024-7481: exploit proof of concept of a vulnerability in TeamViewer that enables an unprivileged user to load an arbitrary Kernel Driver into the system.

PoC
https://t.co/VpW1aNdYW5

[packet storm @packet_storm]

Record Breaking DDoS Attack Peaked At 3.8 Tbps, 2.14 Billion Pps https://t.co/9EHlNpnk8h #news

[The Hacker News @TheHackersNews]

🚨 14 vulnerabilities found in DrayTek routers, including 2 critical (CVSS 10.0). These flaws allow attackers to take full control and infiltrate networks.

Read: https://t.co/KE1A4rwi8P

With 704,000+ routers exposed online, the risk is massive. Patch now!

#cybersecurity