Vincent Zappy

So long and thanks for all the fish.

[Anavem.com @Anavem_]

Gitea Flaw Exposed 30,000 Private Container Images #giteavulnerability #containerregistry #authenticationbypass https://t.co/fATsCn8w5D

[Anavem.com @Anavem_]

Gogs Zero-Day Flaw Enables Remote Code Execution #gogszeroday #remotecodeexecution #gitservice https://t.co/ujG5UvQhQt

[Anavem.com @Anavem_]

JDownloader Site Hacked to Spread Python RAT Malware #jdownloadercompromise #pythonrat #supplychainattack https://t.co/NAGdo4p8Wv

[Anavem.com @Anavem_]

Claude AI Malvertising Campaign Targets Mac Users via Google Ads #claudeaimalware #googleadsmalvertising #macmalware https://t.co/ixjcDTYrtH

[Anavem.com @Anavem_]

AI-Generated Zero-Day Exploit Targets Web Admin Tool #aigeneratedexploit #zerodayvulnerability #webadministration https://t.co/ZTL86nF4YF

[Anavem.com @Anavem_]

Instructure confirms hackers exploited a Canvas LMS vulnerability to modify login portals and post extortion messages targeting educational institutions. https://t.co/KvAKZHjoPJ

[Anavem.com @Anavem_]

Windows 11 Gets Low Latency Profile for CPU Performance #windows11 #lowlatencyprofile #cpuperformance https://t.co/jCVz1K2OCv

[Anavem.com @Anavem_]

SuperGrate #supergrate #windowsmigration #systemadministration https://t.co/Bk90ZU5N6x

[ctrlaltnod @ctrlaltnod]

Major French Banking Breach Exposes 1M+ Citizens' Financial Data https://t.co/3DwD4oJpsK

[ctrlaltnod @ctrlaltnod]

LVMH Brands Hit with €25M in GDPR Fines for Data Violations https://t.co/a3i4Bq0ZTD

[ctrlaltnod @ctrlaltnod]

AWS AI Environments Compromised in 8 Minutes, Researchers Show https://t.co/UQQBU2CcAz

[ctrlaltnod @ctrlaltnod]

Microsoft Fixes Critical Outlook Bug Blocking Encrypted Emails

Microsoft has resolved a critical Outlook bug that prevented users from sendi...

#Microsoft #Outlook #Microsoft365 https://t.co/KZkFyy4bTg

[ctrlaltnod @ctrlaltnod]

Microsoft to Disable NTLM Authentication by Default in Windows

Microsoft plans to disable NTLM authentication by default in Windows to enhan...

#Microsoft #CyberSecurity #Windows11 #Windows https://t.co/KdvGR01rOe

[ctrlaltnod @ctrlaltnod]

Tenable Launches AI Tool to Combat Shadow AI and Data Leaks

Tenable unveils new AI-powered tool to detect and prevent shadow AI usage and...

#CyberSecurity #AI #Copilot https://t.co/wiPlchcqyb

[ctrlaltnod @ctrlaltnod]

Critical n8n "Ni8mare" Flaw Enables Unauthenticated RCE (CVE-10.0)

Critical n8n automation platform vulnerability dubbed "Ni8mare" allows attack...

#CyberSecurity https://t.co/WyFRY5Xen8

[Anavem.com @Anavem_]

ALERT: Cisco Unified Comms zero-day **CVE-2026-20045** is actively exploited. Unauth attackers can execute commands via the web management interface (Unified CM / IM&P / Unity Connection / Webex Calling DI).

No workaround—patch now + lock down admin access.

https://t.co/LwnHNEzeAu

#Cisco #ZeroDay #Infosec

[ctrlaltnod @ctrlaltnod]

29 Chrome Extensions Steal ChatGPT Tokens, Hijack Affiliate Links

Security researchers discover 29 malicious Chrome extensions stealing ChatGPT...

#CyberSecurity #AI https://t.co/QvtndHhxvj

[Anavem.com @Anavem_]

🚨 New “Reprompt” attack shows how Microsoft Copilot (Personal) could be abused for single-click data exfiltration.

The idea: weaponized prompts/social engineering can trick users into revealing sensitive info through the assistant, without obvious malware, just one bad interaction.What to do:

✅ Treat copilots like data tools, not chat toys
✅ Limit what’s accessible (permissions, connectors, sharing)
✅ Train users on prompt/social engineering
✅ Monitor unusual access/export patterns

Full breakdown: https://t.co/rKv7kaAYr7

#CyberSecurity #MicrosoftCopilot #AIsecurity #DataLossPrevention #SocialEngineering #ZeroTrust #Anavem

[Anavem.com @Anavem_]

🪟 Microsoft is testing a Copilot chat pane embedded directly in Windows 11 File Explorer — not just a separate app.

If it ships, it could change daily workflows: contextual help while browsing files, quick actions, and potentially tighter integration with search + productivity features.

Worth watching for IT teams:
✅ UX + productivity impact
✅ Privacy / data exposure considerations
✅ Policy controls & admin toggles for Copilot in Windows

Details: https://t.co/nwPEFfOsbz

#Windows11 #MicrosoftCopilot #FileExplorer #AI #SysAdmin #ModernWork #Anavem

[Anavem.com @Anavem_]

CodeBreach = CI/CD trust boundary failure: unanchored regex in CodeBuild webhook filters → actor-ID substring match → potential privileged build trigger + token exposure path.

Full breakdown + mitigations:
https://t.co/ALKwEyd5Yb

#DevSecOps #CICD #CloudSecurity #AWS #GitHub