Ian C.

Cybersecurity Analyst and Networking Enthusiast | Strategic Security Management | Net+ | Sec+ |

[The Cyber Security Hub™ @TheCyberSecHub]

How Israel hacked Iran’s traffic cameras to pinpoint Khamenei https://t.co/b5pxea8bvk

[Cyber Security News @The_Cyber_News]

🛡️ Windows 11 23H2 to 25H2 Upgrade Allegedly Breaking Internet Connectivity | Source: https://t.co/YotLv46sTy

A persistent bug in Windows 11 in-place upgrades is reportedly wiping critical 802.1X wired authentication configurations, leaving enterprise workstations completely offline until manual intervention is performed.

During an in-place Windows 11 upgrade, the contents of the C:\Windows\dot3svc\Policies folder that stores 802.1X wired network (LAN) authentication profiles applied via Group Policy are silently deleted.

#windows11 #cybersecuritynews

[BleepingComputer @BleepinComputer]

Alabama man pleads guilty to hacking, extorting hundreds of women
https://t.co/yzKltsYVpA

https://t.co/yzKltsYVpA

[BleepingComputer @BleepinComputer]

Fake Google Security site uses PWA app to steal credentials, MFA codes
https://t.co/MLTbdPjKYR

https://t.co/MLTbdPjKYR

[CrowdStrike @CrowdStrike]

OpenClaw is a powerful personal assistant that can connect to LLMs, integrate with external APIs, and autonomously execute an array of tasks like sending email or controlling browsers.

We developed a deep-dive blog post about what to watch out for and how our platform helps customers identify and secure OpenClaw deployments.

Read more here: https://t.co/kBlIF8ROrF

[Cyber Security News @The_Cyber_News]

⚠️ Hackers Exfiltrating NTDS.dit File to Gain Full Active Directory Access

Source: https://t.co/rhnDs6sdoB

Active Directory serves as the foundation of enterprise authentication systems, making it a prime target for sophisticated threat actors.

The NTDS[.]dit database file, which stores encrypted password hashes and critical domain configurations, has become one of the most sought-after assets in corporate networks.

When adversaries successfully obtain this file, they gain unrestricted access to an organization’s entire identity infrastructure, potentially leading to complete domain compromise.

Attackers infiltrate corporate systems specifically to extract the NTDS[.]dit database while evading traditional security controls.

#CybersecurityNews

[Ian C. @NetSec_Ian]

If they're rushing you, that's the red flag. Slow down. Stay safe out there. #CyberSecurity #Vishing #SocialEngineering #MFA #RiskManagement #CyberSecurityAwareness

[Ian C. @NetSec_Ian]

Since early 2026, vishing attempts via phone-based social engineering to steal creds have clearly increased.

These calls exploit urgency & surprise. Quick reminder can prevent compromise.

[Ian C. @NetSec_Ian]

Quick defenses:
- Hang up & call back via trusted number (company dir or official site)
- Never share pwds/MFA codes or approve unsolicited prompts
- Verify via 2nd channel (Teams/email to known contact)
- Report early to warn others & block patterns

[BleepingComputer @BleepinComputer]

📲 Phishing isn’t just email anymore. Attackers use social media, chat apps & ads to steal credentials.

@PushSecurity explains the latest tactics and how to stop multi-channel phishing where it happens — inside the browser.

➡️ https://t.co/ndUzxbqEPI
#cybersecurity #sponsored

[FalconFeeds.io @FalconFeedsio]

🚨 CRITICAL STEALER ALERT - Last 12 Hours
4 active stealer families detected:

Lumma: Mimicking RuStore (rustore[.]iosif-brodskiy[.]su)
Stealc: German C2s (89[.]191[.]234[.]128)
ACR: Finnish infrastructure
Rhadamanthys: US-based (port 11453)

8 C2 servers actively exfiltrating credentials, crypto wallets & 2FA tokens. Peak activity: 06:00-08:00 UTC targeting banking/corporate data.

[BGP6-Table @bgp6_table]

Current prefix range distribution for IPv6 (10-Sep-2025)

[BGP6-Table @bgp6_table]

I see 230484 IPv6 prefixes. This is 4 more prefixes than 6 hours ago and 644 more than a week ago. 44.82% of prefixes are /48.

[CrowdStrike @CrowdStrike]

🚨 BREAKING: New CrowdStrike research unmasks MURKY PANDA's sophisticated cloud-based attacks targeting North American organizations.

This China-nexus adversary is actively compromising government, tech, academic, legal, and professional services.

Read more: https://t.co/hG9IHkKpVz

[BleepingComputer @BleepinComputer]

Major password managers can leak logins in clickjacking attacks - @billtoulas
https://t.co/FGqu6RyNIF

https://t.co/FGqu6RyNIF

[BleepingComputer @BleepinComputer]

Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks - @LawrenceAbrams
https://t.co/R4kPiB7HVb

https://t.co/R4kPiB7HVb

[0b1d1 @_0b1d1]

HTTP STATUS CODE | SAVE IT FOR LATER

[LetsDefend @LetsDefendIO]

Cybersecurity Advice

[The Hacker News @TheHackersNews]

SentinelOne and 70+ global targets hit by a China-linked espionage campaign from mid-2024 to early 2025.

The attackers exploited zero-day SAP and network flaws—using advanced tools previously unseen in state attacks.

Details here → https://t.co/5ibyJxj9Il