Threadmark Cyber

[Threadmark Cyber @Threadmark_IT]

@CENTCOM It's a shame this issue is politicised. WW3 is about to break out and the 5 eyes get cold feet? It feels like a mix of all hell is about to break loose. Best be about your father's business.

[Threadmark Cyber @Threadmark_IT]

Transperth interactive map

https://t.co/9Gucs9WLMg

[Threadmark Cyber @Threadmark_IT]

Critical flaw in Windows Server 2025 dMSAs (Delegated Managed Service Accounts) allows attackers with KDS root key to generate passwords for ALL dMSAs & gMSAs, enabling lateral movement & persistent access across Active D #Cybersecurity #WindowsServer #ActiveDirectory #GoldendMSA

[Threadmark Cyber @Threadmark_IT]

UNC6148 is targeting fully-patched, end-of-life SonicWall SMA 100 appliances, deploying OVERSTEP backdoor via potential zero-day exploit, stolen credentials or OTP seeds. This allows for persistent access, credential theft & data e #Cybersecurity #ThreatIntel #SonicWall #OVERSTEP

[Threadmark Cyber @Threadmark_IT]

Louis Vuitton UK confirms data breach exposing customer names, contact info, and purchase history. No financial data compromised. Authorities notified. This is the third LVMH cyberattack in 3 months. #Cybersecurity #DataBreach #LouisVuitton #Privacy

[Threadmark Cyber @Threadmark_IT]

14 arrested in UK & Romania for a massive phishing scam defrauding UK taxpayers of £47M. Coordinated raids targeted a cybercrime network that compromised over 100,000 accounts. #Cybercrime #PhishingScam #Fraud #UKNews

[Threadmark Cyber @Threadmark_IT]

Critical FortiWeb SQLi (CVE-2025-25257) allows pre-auth RCE! Proof-of-concept exploits are now public. Patch immediately to FortiWeb 7.6.4, 7.4.8, 7.2.11, 7.0.11 or later. #Fortinet #Cybersecurity #SQLi #RCE

[Threadmark Cyber @Threadmark_IT]

UK arrests four suspects, aged 17-20, allegedly linked to Scattered Spider hacking group targeting retailers like Marks & Spencer and previously MGM Resorts. Charges include computer misuse, blackmail & money laundering. #Cybercrime #ScatteredSpider #UKCrime #Cybersecurity

[Threadmark Cyber @Threadmark_IT]

Trend Micro Password Manager has a security flaw (versions 5.8.0.1327 & below) that could let attackers delete files and escalate privileges via link following. Update now! #CyberSecurity #InfoSec #Vulnerability #PasswordManager

[Threadmark Cyber @Threadmark_IT]

Critical Chromium V8 vulnerability! Remote attackers can potentially read/write data via malicious HTML. Update Chrome, Edge, Opera ASAP! #Cybersecurity #Vulnerability #Chrome #Edge

[Threadmark Cyber @Threadmark_IT]

Russian basketball player Daniil Kasatkin arrested in France on US hacking charges related to ransomware attacks. He denies involvement, claiming he unknowingly bought a compromised computer. Extradition pending. #Cybercrime #Hacking #Ransomware #France

[Threadmark Cyber @Threadmark_IT]

Honeywell Experion PKS & OneWireless WDM have a memory buffer vulnerability (CDA) that could lead to remote code execution. Update to Experion PKS 520.2 TCU9 HF1/530.1 TCU3 HF1 & OneWireless 322.5/331.1 ASAP. #Cybersecurity #ICS #Vulnerability #Honeywell

[Threadmark Cyber @Threadmark_IT]

Critical vulnerabilities (stack-based buffer overflows) found in Tenda O3V2 1.0.0.12(3880) httpd component. Remote exploitation possible, exploits publicly available. Consider updating firmware! #Tenda #Vulnerability #Cybersecurity #RouterSecurity

[Threadmark Cyber @Threadmark_IT]

McDonald's Australia job applicants' data exposed after AI chatbot, Olivia, hacked using default password "123456". Security flaw in https://t.co/VtXp8XZAPg's system revealed access to millions of records. McDonald's "disappointed." #Cybersecurity #DataBreach #Privacy #McDonalds

[Threadmark Cyber @Threadmark_IT]

Researchers found eSIM vulnerabilities that could allow cloning and spying on communications. Attack requires temp physical access to extract key. Kigen has been notified and is mitigating. Other eSIM vendors may be vulnerable too. #eSIM #Security #Cybersecurity #JavaCard

[Threadmark Cyber @Threadmark_IT]

Supply chain attack hit VS Code extension Ethcode (6k+ installs) via malicious GitHub pull request. Attackers injected obfuscated code to download malware, potentially stealing crypto or poisoning contracts. Extension was removed #Cybersecurity #SupplyChainAttack #VSCode #Ethcode

[Threadmark Cyber @Threadmark_IT]

AMD CPUs have a new vulnerability called Transient Scheduler Attacks (TSA) allowing potential data leaks via speculative execution timing. Microcode updates are available for affected Ryzen & EPYC processors. Requires local code execution. #AMD #CPU #Security #Vulnerability

[Threadmark Cyber @Threadmark_IT]

Beware ATO tax scams! Cybercriminals impersonating the ATO are using AI to create convincing fake emails & calls. The ATO primarily communicates via MyGov. Never click suspicious links or share personal info. Verify directly via the ATO websit #TaxScams #ATO #Cybersecurity #Fraud

[Threadmark Cyber @Threadmark_IT]

Pakistan police busted a scam call center in Faisalabad, arresting 149 people including 71 foreigners (mostly Chinese) involved in Ponzi schemes and investment fraud. Victims were lured via social media with promises of returns. #Cybercrime #Pakistan #Fraud #Scam

[Threadmark Cyber @Threadmark_IT]

Qantas customers hit by the recent cyberattack are receiving *another* email, as more of their data (phone numbers, in many cases) was stolen than initially reported. Stay vigilant against unexpected calls. #CyberSecurity #DataBreach #Qantas #Privacy