♫Why♥Not♪

رحمك الله يا أبو عبدالرحمن يا أطيب شخص عرفته فـX
الهلال أولاً 💙 Python 💙 Swift
أرضي هي عرضي🔥
افتخر بنفسك، لكن لا تتعنصر…فأنا من أعالي الجبال 🐅

[♫Why♥Not♪ @Python_s_]

#ذا_اللي_حصل_يا_ناس

مابين طرفة عين .. راح الحبيب الزين
وراحت معه أحلى ليالي حبي الغالي الثمين
ذا اللي حصل ياناس

كله مقدر من الله إنني أقهر ..
في الحب واسهر .. واتحمل وأتحسر

على حبيب الروح عقلي تاه
يروح يروح يا ويلاه .. ياويلاه

رح ياحبيبي روح ليلي تم
اتهدم المبنى

يكفي معي طيفك بعيني عم
والقلب لك مغنى

هات يا قليبي هات وردد الاهات
مابين طرفة عين راح الحبيب الزين
وراحت معه أحلى ليالي حبي الغالي الثمين

ذا اللي حصل ياناس

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #PostgreSQL #SecurityAdvisory: Compromised Publisher Threatens Subscriber
12 Nov 2026

CVE-2026-120145 (CVSS 8.8): A compromised logical-replication publisher can target subscriber system catalogs and execute code as the subscriber PostgreSQL OS user—but only when the subscription is owned by a database superuser. It is not an unconditional network attack.

First fixes: 18.7 / 17.12 / 16.16 / 15.20 / 14.25. Audit superuser-owned subscriptions and publisher trust; preserve evidence, contain suspect replication with availability planning, apply tested updates and verify subscriber processes. PostgreSQL 14 is EOL.

https://t.co/VJJvi6ejL2

https://t.co/Ea4CTjTV4w

#CVE #DatabaseSecurity #IncidentResponse

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #PostgreSQL #SecurityAdvisory: Database User Can Escalate to OS Code Execution
12 Nov 2026

CVE-2026-120139 (CVSS 8.8): Oversized tuple data can trigger integer wraparound in PostgreSQL’s in-memory size calculation, potentially executing code as the database server’s OS account. The attacker needs database-user access; this is not unauthenticated remote execution.

First fixes: 18.7 / 17.12 / 16.16 / 15.20 / 14.25. Preserve relevant logs, review untrusted database roles, take a restorable backup, deploy the appropriate update with a planned restart and verify the running server. PostgreSQL 14 is now EOL.

https://t.co/XB9lsIoEX9

https://t.co/Ea4CTjTV4w

#CVE #DatabaseSecurity #PrivilegeEscalation

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #PostgreSQL #SecurityAdvisory: Crafted Archive Executes Code in pg_restore
12 Nov 2026

CVE-2026-116314 (CVSS 8.8): Running pg_restore on a malicious non-plain archive can execute arbitrary code with the operating-system privileges of the restore process. This requires a user or automation to process the crafted file; it is not unauthenticated server-side execution.

First fixes: 18.7 / 17.12 / 16.16 / 15.20 / 14.25. Use trusted backups, isolate restores under least privilege, and verify the installed pg_restore binary. Patching does not make SQL inside an untrusted archive safe. PostgreSQL 14.25 is its final EOL update.

https://t.co/BOM6EAi4fV

https://t.co/Ea4CTjTV4w

#CVE #DatabaseSecurity #BackupSecurity

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #AspireDashboard #SecurityAdvisory: Unauthenticated Telemetry Deletion
10 Nov 2026

CVE-2026-118740 (CVSS 9.1): An exposed unauthenticated NotFound route can permit telemetry deletion in standalone and AppHost-hosted dashboards; standalone browser-token mode can also expose that token.

Microsoft’s CVE record scopes 13.6.1–13.6.4; its project advisory lists Dashboard/SDK releases before 13.6.5. Update the actual Dashboard, SDK/AppHost or CLI bundle to 13.6.5+, redeploy pinned container images and verify running artifacts.

A .NET runtime update alone is insufficient. Microsoft reported no known exploitation.

https://t.co/b48iDtXesy

https://t.co/7iioNnh9IH

#CVE #DevSecOps #AppSec

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #NCentral #ActiveExploitation: Miner Campaign Reaches HF2 Servers
12 Nov 2026

Huntback observed 4EverAble2Shell exploit traffic and linked 21 active Monero-mining rigs to N-central-facing servers; 19 reported HF2 build 2026.4.1.26. These are researcher findings, not a vendor-confirmed victim count.

The chain depends on the nondefault Legacy API being enabled and reachable in on-premises deployments. Disable it immediately, coordinate affected integrations and restrict exposure. HF2 remains required for earlier fixes but is insufficient alone.

Preserve evidence; investigate xvd.service, /tmp/.xvd and suspicious SOAP traffic. Assess managed-endpoint exposure. N-able continues investigating.

https://t.co/soOpCA3lnM

https://t.co/LADnxN1w0e

#RMM #ThreatIntel #IncidentResponse

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #FortiOS #SecurityAdvisory: OSPF LSA Injection, Not Code Execution
10 Nov 2026

CVE-2026-126253 (CVSS 9.3) permits crafted OSPF link-state advertisements by an unauthenticated adjacent-network attacker when the vulnerable OSPF daemon is reachable. Fortinet reports no known exploitation.

Affected/fixed FortiOS: 7.2.0–7.2.13 → 7.2.14; 7.4.0–7.4.12 → 7.4.13; 7.6.0–7.6.7 → 7.6.8; 8.0.0–8.0.1 → 8.0.2; affected 7.0 releases require migration. FortiSASE 26.3.1/26.3.1_a was remediated in 26.3.2.

Restrict OSPF adjacencies, plan tested upgrades and verify routing stability.

https://t.co/qQxjJLfHV7

https://t.co/XMvWSh8cqu

#CVE #RoutingSecurity #NetworkSecurity

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #FortiMail #SecurityAdvisory: Unauthenticated HA Command Injection
10 Nov 2026

CVE-2026-126148 (CVSS 9.8): Crafted HA join-request packets can allow unauthenticated OS command execution where the affected service is reachable.

Affected: 7.6.0–7.6.6 and 8.0.0–8.0.1; first fixes: 7.6.7 and 8.0.2. FortiMail 7.2/7.4 are unaffected; FortiMail Cloud was remediated on 5 October. Fortinet reports no known exploitation.

Restrict HA traffic to trusted peers without disrupting cluster continuity; stage the correct update, preserve relevant logs and verify running firmware.

https://t.co/jyRe5vEcum

https://t.co/CYPhjetIVM

#CVE #EmailSecurity #NetworkSecurity

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #CheckPoint #ActiveExploitation: Local Root Escalation in Gateway Intrusions
12 Nov 2026

CVE-2026-123039 (CVSS 7.8) is a local DynamicCLI privilege-escalation flaw requiring existing local execution; Check Point observed exploitation after PHP2Shell initial access. Its investigation identified persistent backdoors and an ESXi wiper in one intrusion. Management/log servers are also affected; that does not establish they were compromised.

First fixed Jumbo takes: R81.20/174, R82/132, R82.10/52, R82.20/14. Preserve evidence, inspect /var/log/dynamicCli.log and persistence, deploy the applicable hotfix and verify socket permissions. Patching does not remove implants.

https://t.co/ZaTDTCiRlq

https://t.co/PQh1wyzvDU

#CVE #ThreatIntel #IncidentResponse

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #OperationEndgame #ConfirmedDisruption: Three Malware Networks Targeted
12 Nov 2026

Europol reports coordinated action against 235 servers and 257 domains associated with Gootloader, CastleRAT and StealC, and identification of over six million stolen credentials—not six million unique victims.

Separately, the U.S. Justice Department reports removing Gootloader from more than 100 compromised servers, including WordPress sites. These figures must not be added as independent totals.

Investigate affected systems, preserve evidence, replace verified exposed credentials and enable MFA. Infrastructure disruption does not erase existing infections.

https://t.co/zKkbBcJa5u

https://t.co/refNYH0WxX

#Malware #IncidentResponse #CredentialSecurity

[♫Why♥Not♪ @Python_s_]

#NØØT_Security_Alerts
🚨 #ALERT — #ChromeAndroid #SecurityAdvisory: Critical Skia Sandbox Escape
11 Nov 2026

CVE-2026-126846: Google identifies an Android Skia use-after-free that may allow code execution outside Chrome’s sandbox through a crafted web page. User interaction is required; the cited primary records do not report malicious exploitation.

Chrome for Android 157.0.8103.78 contains the fix; Google Play rollout is gradual. Update and verify the installed build rather than assuming automatic rollout has completed.

https://t.co/GRMwTslqKp

https://t.co/LhTi2MurGm

#CVE #BrowserSecurity #MobileSecurity

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2025-4008
Product: Smartbedded / Meteobridge

Summary:
VulnCheck reports real-world exploitation activity affecting Smartbedded / Meteobridge.

Evidence:
Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
02 Oct 2025

Source:
https://t.co/vRZGciucYW

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Meteobridge #CVE_2025_4008 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2024-9463
Product: Palo Alto Networks / Expedition

Summary:
VulnCheck reports real-world exploitation activity affecting Palo Alto Networks / Expedition.

Evidence:
Public PoC/exploit available; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
15 Oct 2024

Source:
https://t.co/FLKsd1usc0

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Expedition #CVE_2024_9463 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2023-50386
Product: Apache / Solr

Summary:
VulnCheck reports real-world exploitation activity affecting Apache / Solr.

Evidence:
Active exploitation reported; Live exploitation observed by VulnCheck canaries

Impact:
The vulnerability can materially affect exposed systems; verify vendor-specific impact and affected versions.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
18 Sep 2024

Source:
https://t.co/vRZGciucYW

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Solr #CVE_2023_50386 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2026-58115
Product: Siemens / SIMATIC IoT2050 Advanced

Summary:
VulnCheck reports real-world exploitation activity affecting Siemens / SIMATIC IoT2050 Advanced.

Evidence:
Public PoC/exploit available; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
30 Oct 2026

Source:
https://t.co/CgLfXWV0gb

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #SIMATIC_IoT2050_Advanced #CVE_2026_58115 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2026-106173
Product: Fortinet / FortiSIEM

Summary:
VulnCheck reports real-world exploitation activity affecting Fortinet / FortiSIEM.

Evidence:
Public PoC/exploit available; Active exploitation reported; Severe impact class

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
23 Oct 2026

Source:
https://t.co/1Wg2PmHr16

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #FortiSIEM #CVE_2026_106173 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2025-59528
Product: FlowiseAI / Flowise

Summary:
VulnCheck reports real-world exploitation activity affecting FlowiseAI / Flowise.

Evidence:
Public PoC/exploit available; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
05 Apr 2026

Source:
https://t.co/z5ml2yDfuM

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Flowise #CVE_2025_59528 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2023-50164
Product: Apache / Struts

Summary:
VulnCheck reports real-world exploitation activity affecting Apache / Struts.

Evidence:
Public PoC/exploit available; Active exploitation reported; Severe impact class

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
31 Jan 2024

Source:
https://t.co/GZ6N4u8lUE

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Struts #CVE_2023_50164 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Security Alerts

Classification: Critical
CVE: CVE-2023-26801
Product: lb-link / bl-lte300_firmware

Summary:
VulnCheck reports real-world exploitation activity affecting lb-link / bl-lte300_firmware.

Evidence:
Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries

Impact:
The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
01 Feb 2023

Source:
https://t.co/vRZGciucYW

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #bl_lte300_firmware #CVE_2023_26801 #ActiveExploitation #Exploit

[♫Why♥Not♪ @Python_s_]

NØØT Ransomware Watch

Classification: Critical
CVE: CVE-2021-34527
Product: Microsoft / Windows

Summary:
VulnCheck reports real-world exploitation activity affecting Microsoft / Windows.

Evidence:
Public PoC/exploit available; Ransomware use confirmed; Active exploitation reported; Severe impact class

Impact:
The vulnerability is associated with ransomware activity and may contribute to compromise of exposed systems.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
02 Jul 2021

Source:
https://t.co/sEQ1oIIlyo

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Windows #CVE_2021_34527 #ActiveExploitation #Exploit #Ransomware

[♫Why♥Not♪ @Python_s_]

NØØT Ransomware Watch

Classification: Critical
CVE: CVE-2019-2729
Product: Oracle / communications_diameter_signaling_router

Summary:
VulnCheck reports real-world exploitation activity affecting Oracle / communications_diameter_signaling_router.

Evidence:
Public PoC/exploit available; Ransomware use confirmed; Active exploitation reported; Severe impact class

Impact:
The vulnerability is associated with ransomware activity and may contribute to compromise of exposed systems.

Action:
Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable.

Date:
01 May 2019

Source:
https://t.co/ZNGLg4TRGl

#NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #communications_diameter_signaling_router #CVE_2019_2729 #ActiveExploitation #Exploit #Ransomware