6@br13l

[Cyber Security News @The_Cyber_News]

🛡️ New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory

Source: https://t.co/826wkR79uO

A Windows process injection method disclosed by security researcher Two Seven One Three sidesteps two APIs closely associated with remote code injection: VirtualAllocEx and WriteProcessMemory.

Dubbed console named-pipe injection, the technique delivers payload bytes through a child console process’s redirected standard input and repurposes memory Windows has already populated.

It can disrupt detections built around the familiar allocate-write-execute sequence. Process injection executes arbitrary code inside another process, potentially masking activity behind a legitimate application.

#cybersecuritynews

[BleepingComputer @BleepinComputer]

This $790 AI automation course bundle is $20 today
https://t.co/x1WleuWnwl

https://t.co/x1WleuWnwl

[The Hacker News @TheHackersNews]

Mozilla updates Firefox’s Terms of Use after user concerns over data rights.

The new revisions clarify that Mozilla doesn’t own your data—but the language change follows a wave of community criticism.

Read the full breakdown here: https://t.co/hmmTjaKiBu

[John Hammond @_JohnHammond]

@0xTib3rius @kaitlyn_devalk i hate that these are so good

[The Hacker News @TheHackersNews]

🔒 Silent Lynx's Multi-Stage Attack Exposed: Targeting Embassies, Law Firms, and Banking Institutions

The group leverages RAR files, C++ binaries, and PowerShell scripts to infiltrate systems and exfiltrate sensitive data.

Read the full article here: https://t.co/5gOncJBqRO

[The Hacker News @TheHackersNews]

🚨 A new PHP-based backdoor, Glutton, is wreaking havoc across the globe, targeting China, the US, Cambodia, Pakistan, and South Africa.

This APT41's toolkit doesn’t stop there—it’s also attacking cybercriminals!

👉 Read the full story: https://t.co/DL6ojRlUeT

[The Hacker News @TheHackersNews]

Cybercriminals are using new #ransomware disguised as LockBit to pressure victims, while embedding AWS credentials for data exfiltration—highlighting the evolving tactics of threat actors.

Learn more: https://t.co/ZoDUlfHBKb

#infosec #cybersecurity #hacking

[vids that go hard @vidsthatgohard]

Fuck it, the full Deadpool & Wolverine movie🍿

[John Hammond @_JohnHammond]

Holy shit this is such a fucking incredible tweet

[vx-underground @vxunderground]

The local UK government entity recommends users to disable HTTPS enforcement when logging into their online web portal

Good advice, HTTPS is illegal and for nerds

[vx-underground @vxunderground]

Google confirms they will disable uBlock Origin in Chrome in 2024

More information: https://t.co/H7wYrNv8th

[NCSC UK @NCSC]

@UK_Daniel_Card Keep those reports coming 😉

[rootsecdev @rootsecdev]

This is going to be fun for bypassing MFA

Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs https://t.co/VbB1g04kqp

[PentesterLab @PentesterLab]

Giveaway time!

We are going to send a t-shirt and few goodies to one person who follows
@PentesterLab
and likes this tweet !!

And we are going to give a 1-year voucher to someone who RT this tweet!

[BleepingComputer @BleepinComputer]

GoDaddy hack causes data breach affecting 1.2 million customers - @serghei
https://t.co/fb7bnyYKyk

[BleepingComputer @BleepinComputer]

Malicious NPM libaries have been found installing ransomware and a password-stealing trojan.
https://t.co/DpdkCBCc9y

[Nicolas Krassas @Dinosn]

PoC for VMware vCenter CVE-2021-22005 https://t.co/9BcHuLSsi3

[Pedro Tavares @sirpedrotavares]

Fraude personificando a marca Continente espalha-se através do WhatsApp: Não se deixe enganar! #Continente #phishing #fraude #portugal #whatsapp #segurancainformatica https://t.co/ePsjR0L3bw via @sirpedrotavares

[BleepingComputer @BleepinComputer]

New Linux kernel bug lets you get root on most modern distros - @serghei
https://t.co/rAme1sGDIG

[BleepingComputer @BleepinComputer]

New Windows 10 vulnerability allows anyone to get admin privileges - @LawrenceAbrams
https://t.co/EZH12zTAWc