ZeroSecurity

Stay updated with the latest in #InfoSec & #Blockchain news along with the threat trends impacting both sectors.

[ZeroSecurity @Zer0Security]

Hackers Exploit Maximum-Severity Cisco Zero-Day Bug Since 2023 (CVE-2026-20127) https://t.co/qvzqBD9TpW

[ZeroSecurity @Zer0Security]

How Hackers Still Manage to Compromise Multi-factor authentication (MFA) https://t.co/jZJX7Caqoy

[ZeroSecurity @Zer0Security]

Anthropic Unveils Claude Code Security to Detect and Fix Critical Vulnerabilities https://t.co/eL2vAuVuFn

[ZeroSecurity @Zer0Security]

Panera Hacked – Exposes 5.1 Million Customer Records https://t.co/AWMhxLoa7G

[ZeroSecurity @Zer0Security]

Chinese Hackers Hijack Notepad++ Updates in 6-Month Supply Chain Campaign https://t.co/fa4nU6p8mk

[ZeroSecurity @Zer0Security]

Malicious Chrome Extensions Steal AI Data and Hijack Revenue in DarkSpectre Campaign https://t.co/98JapAS8vk

[ZeroSecurity @Zer0Security]

#KPMG Netherlands Listed as Victim by Nova Ransomware Group https://t.co/H9Db0M1nkr

[ZeroSecurity @Zer0Security]

#RansomHouse Claims Breach of Key Apple Assembler Luxshare https://t.co/8rtTHljYPN

[ZeroSecurity @Zer0Security]

#Copilot Hacked – Researchers Reveal “Reprompt” Attack https://t.co/l4MpX99HsO

[ZeroSecurity @Zer0Security]

Dutch Police Arrest Alleged AVCheck Operator in ‘Operation Endgame’ Breakthrough https://t.co/0vZsR8rN6o

[ZeroSecurity @Zer0Security]

Bigfork Man Sentenced to 46 Months After FBI Traces 1,100 IP Addresses in Cyberstalking Case https://t.co/Xsy90N17no

[ZeroSecurity @Zer0Security]

#BreachForums Database Leak Exposes Over 320,000 Users https://t.co/K2szxNIaRX

[ZeroSecurity @Zer0Security]

Europol Dismantles Black Axe Cell in Spain, Arrests 34 for €5.9M Fraud https://t.co/nhAG6x6PFn

[ZeroSecurity @Zer0Security]

Betterment Investment Users Targeted by “Triple #Crypto” Scam Notification https://t.co/Iy4vcwsO2r

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Bypasses paywalls:

- https://t.co/J888Dh0EiX

#infosec #cybersec

[ZeroSecurity @Zer0Security]

Rainbow Six Siege Hacked: Players Gifted Billions of Credits as Ubisoft Forces Servers Offline https://t.co/0yAwiDs34P

[Florian Roth ⚡️ @cyb3rops]

MongoBleed (CVE-2025-14847) is basically Heartbleed for MongoDB

- unauthenticated memory disclosure
- public POC, trivial to exploit
- leaks creds, tokens, cloud keys straight from RAM
- huge exposed surface on the internet

Good writeups and technical details here:
https://t.co/LgK4RABmJu
https://t.co/DWtByJQ3au
https://t.co/LUwfnF6uXG

Patch fast, rotate secrets, and assume exposed instances were scanned(!)

[ZeroSecurity @Zer0Security]

Gravy Analytics Breached: A Massive Data Leak Exposes Millions of Location Traces https://t.co/Rdl5Utifh2

[Baptiste Robert @fs0c131y]

Hackers claim to have breached Gravy Analytics, a US location data broker selling to government agencies.

They shared 3 samples on a Russian forum, exposing millions of location points across the US, Russia, and Europe.

It's OSINT time! 👇

[ZeroSecurity @Zer0Security]

#Phishing 2.0: How #AI is Turning Cyber Attacks into a Science https://t.co/4CRENbybtP