Xploitzone

cyber security researcher

[Xploitzone @Xploitzone_01]

🚨 AI-Powered Phishing Alert

AnonymousKit uses AI-generated phishing pages to target iPhone users stealing Apple credentials and sensitive data through highly convincing fake login screens.

🔗 https://t.co/XB6A2zDxHK

#CyberSecurity #Phishing #iPhone

[Xploitzone @Xploitzone_01]

🚨 UK Energy Sector Hit

Iran-linked hackers reportedly disrupted a small British power plant for 4 days marking a rare cyberattack against UK energy infrastructure.

⚠️The incident highlights growing risks to critical infrastructure.

🔗 https://t.co/DkoQcNRBhi

#Irannews

[Xploitzone @Xploitzone_01]

🚨 WordPress Security Alert

A miniOrange WordPress plugin flaw allows attackers to bypass authentication and gain unauthorized access to vulnerable sites.

⚠️ WordPress admins should update affected plugins immediately.

🔗 https://t.co/Y4KCRO3ZAc

#WordPress #CyberSecurity

[Xploitzone @Xploitzone_01]

🚨 npm Security Alert

Attackers are abusing fake npm mirror sites to trick developers into downloading malicious packages, turning trusted-looking developer resources into a malware delivery channel.

🔗 https://t.co/Ut7XutJFbP

#CyberSecurity #npm #Phishing

[Xploitzone @Xploitzone_01]

🚨 WordPress Security Alert

Avada Theme flaws are being chained to gain remote code execution, putting vulnerable WordPress sites at risk of full takeover.

⚠️ Update Avada and check for signs of compromise.

🔗 https://t.co/WCb5COj7y5

#WordPress #CyberSecurity #RCE

[Xploitzone @Xploitzone_01]

🚨 Fake Gemini Alert

Attackers are using a fake Google Gemini installer hosted on Google Colab to deliver Vidar stealer, targeting saved browser passwords and session data.

⚠️ Trusted platforms can still host malicious files.

🔗 https://t.co/lMbjozkgJm

#Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Android Car Malware Alert

Researchers uncovered malware targeting Android car head units, turning infected infotainment systems into BADBOX proxy nodes that can hide attacker traffic and abuse your device.

🔗 https://t.co/BvEQyKN9P0

#CyberSecurity #Android #BADBOX

[Xploitzone @Xploitzone_01]

🚨 Fake AI Tools Alert

Attackers are using fake ChatGPT, Claude & Copilot installers to spread malware, steal credentials, and compromise users searching for popular AI tools.

🔗 https://t.co/xFwUzKlzwH

#CyberSecurity #Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Fake PoC Warning

Attackers are uploading fake AI vulnerability PoCs to GitHub, using popular CVE names to trick researchers into downloading malware disguised as exploit code.

🔗 https://t.co/Blix5XGlDB

#CyberSecurity #GitHub #Malware

[Xploitzone @Xploitzone_01]

🚨 China-Linked Espionage Alert

SilkParasite is targeting Central Asian organizations with seven custom RAT families, using advanced persistence and stealth techniques for long-term espionage.

🔗 https://t.co/ROezr5ueRO

#CyberSecurity #APT #ThreatIntel

[Xploitzone @Xploitzone_01]

🚨 Camera Security Alert

Operation CameraSwarm targets exposed Dahua cameras through a P2P vulnerability, allowing attackers to hijack devices, spy on video feeds, and build large-scale surveillance networks.

🔗 https://t.co/rzrBYUZy8S

#CyberSecurity #IoT #Dahua

[Xploitzone @Xploitzone_01]

🚨 Microsoft 365 Phishing Alert

Mirage2FA uses AiTM phishing to bypass MFA and steal authenticated Microsoft 365 session cookies—giving attackers access even when MFA is enabled.

⚠️ 2FA alone may not stop it.

🔗 https://t.co/uaP9KVxHrK

#CyberSecurity #Phishing #MFA

[Xploitzone @Xploitzone_01]

🚨 Medusa Ransomware Alert

Medusa is exploiting CVE-2026-1731 in BeyondTrust to gain access, steal credentials, and move deeper into victim networks.

⚠️ CISA added the flaw to its KEV catalog.

🔗 https://t.co/4JjZnszhdZ

#Ransomware #CyberSecurity #CVE

[Xploitzone @Xploitzone_01]

🚨 npm Supply Chain Attack

ChainDrop uses an SLSA bypass and Ethereum-based C2 to spread a self-propagating npm worm, stealing developer credentials and spreading through compromised packages.

🔗 https://t.co/TWVR7Pk0Rd

#CyberSecurity #npm #SupplyChain #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Spyware Alert

GhostDesk is spreading through fake CCleaner downloads, abusing Chrome extensions to steal browser data and maintain persistence on infected Windows systems.

🔗 https://t.co/arxDTifF2q

#CyberSecurity #Spyware #Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Supply Chain Attack

Dragon Breath abused a stolen DigiCert certificate to sign RONINGLOADER, using trusted signatures to bypass security controls and deliver malware through trojanized installers.

🔗 https://t.co/e1gYNSaBF3

#CyberSecurity #Malware #ThreatIntel #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Phishing Campaign Alert

UNC6671 is using vishing and AiTM phishing to steal Microsoft 365 credentials and session tokens, targeting users through fake IT support and malicious WorkPanel pages.

🔗 https://t.co/pf4gnYtFD6

#CyberSecurity #Phishing #AiTM #InfoSec

[Xploitzone @Xploitzone_01]

🚨 macOS Malware Alert

Overlord RAT is spreading through fake Zoom updates, using a .NET-based loader to compromise macOS devices and steal sensitive data while maintaining remote access.

🔗 https://t.co/s9AaLKIJk8

#CyberSecurity #macOS #Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Critical RCE Alert

CVE-2026-16812 affects Arista VeloCloud SD-WAN, allowing unauthenticated attackers to execute commands remotely and potentially take control of vulnerable systems.

🔗 https://t.co/Q7sRFNvNbu

#CyberSecurity #RCE #CVE #InfoSec

[Xploitzone @Xploitzone_01]

🚨 New Oracle Threat

Khunt abuses SQL injection to gain RCE on Oracle databases, deploys a stealthy toolkit, and maintains long-term access for espionage and data theft.

🔗 https://t.co/Lp36YFj4xj

#CyberSecurity #Oracle #ThreatIntel #InfoSec