이력서로 위장한 악성 바로가기(LNK) 파일이 유포되고 있습니다.
공격자는 기업명과 직무명을 활용한 파일명과 정상 디코이 문서로 의심을 낮춘 뒤, 추가 악성 파일과 백도어 실행을 시도합니다.
ASEC 블로그에서 전체 공격 흐름을 확인하세요
https://t.co/DMebSoEKp2
Azure CLI password spray attacks have increased 2000% in the last 90 days.
80% originate from three ASNs:
53667 (FranTech)
32167 (RHOISLAND)
6939 (Hurricane Electric LLC has prior Azure CLI spray abuse: https://t.co/u9ecllNdvp
53667 ASN prior abuse: https://t.co/oU4Vu8w0hk
Did you know SSPR for admins is always enabled even if you have SSPR set to None?
It also doesn't honor your authentication methods - all of these are enabled
And currently email and phone are consumed from directory attributes..
This is an unnecessary risk - disable it
‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.
Microsoft has patched it as CVE-2026-42824, rated critical.
Pick any darkweb handle...
Instantly see every other forum the same actor used.
775,621 usernames cross-referenced across 27 cybercrime forums, in one offline file with 3D link graphs.
https://t.co/Gd1Xj0hGPU
I had so many DMs about this post. I've been dealing with a bunch of schmummy gunkins so I haven't had an opportunity to read it.
Well, I finally read this post and the cited source. I had to pause almost immediately upon opening the cited link because I was blasted right in my eyes with SLOP.
> Why This Matters Now
> Why Connected TV (CTV) is the Ideal Proxy
It is pure slop. The purist of slop. It is slopium. It is radioactive AI slop @radioactivered would collect and hide in her walls.
Anyway, besides it being written by AI and being a giant stinky pile of slop shit, it is (probably) technically accurate, although to confirm their findings I would have to download the silly TV apps they listed and reverse engineer them myself to confirm their findings (I'm not going to do that)
In summary, your TVs allow you to install super sketchy apps and all sorts of other dumb gunk. These free apps on your TV are being bundled with BrightData stuff, a well-known and relatively-disliked company in Israel.
BrightData allows you to profit off your free app. The money comes from BrightData turning your application into a VPN node, basically letting random stuff use your internet. In other words, if you write some free junk application, and a bunch of people install it, you'll profit by letting BrightData connect to these peoples devices (from the junk application) and do stuff. BrightData has historically used this stuff to bypass VPN blockers because the device they're tunneling through is a legitimate home computer address.
This is a (sort of?) common occurrence on the Android app store (and probably iOS app store too, actually) and isn't a shocking revelation in my opinion.
Is this illegal? Technically no because somewhere in the fine print (that no one reads) you're agreeing to it.
Is this incredibly unethical? Yes, it is insanely unethical and many companies and people hate BrightData
🚨 Fully patched Windows 10 and 11 are still at risk from a new Microsoft Defender zero-day.
The exploit, "RoguePlanet," can hand attackers full SYSTEM control when it works.
It's the latest public drop from a researcher feuding with Microsoft.
Read: https://t.co/RbALiW3Qvj