Beralock

See Threats First. Stay Secure Always.

[Beralock @Beralock]

🚨 XSS2Shell — From XSS to Shell

Interesting PoC demonstrating how an XSS vulnerability can potentially be chained toward deeper system compromise.

🔗 Full PoC: https://t.co/GgkedJeRKh

#CyberSecurity #XSS #XSS2Shell #ExploitDevelopment #BugBounty #InfoSec #RedTeam

[Beralock @Beralock]

Threat Intelligence Observation

An underground forum post claims to offer leaked information associated with Iranian intelligence personnel.

The dataset's authenticity and provenance remain unverified.

#ThreatIntel #DarkWeb #DataLeak #CyberSecurity

[Beralock @Beralock]

https://t.co/OGWPoXIHG3 — Threat Intelligence Alert

An underground forum post claims compromise of https://t.co/OGWPoXIHG3 infrastructure and advertises an SQL database dump.

The post also displays server and system information.

#CyberSecurity #ThreatIntel #DataLeak #DarkWeb

[Beralock @Beralock]

Alcon Data Leak Claim

Beralock Threat Intelligence observed an underground listing claiming an Alcon database containing approximately 219,566 unique email records.

Potential risks include phishing, social engineering and targeted account attacks.

#Alcon #DataLeak #ThreatIntel

[Beralock @Beralock]

Threat Intel Alert

An underground post claims exposed Firebase infrastructure associated with https://t.co/rdx0SXVwXj and multiple enterprise environments.

#CloudSecurity #ThreatIntel #Firebase

[Beralock @Beralock]

Threat Intel Alert: Allstate

An underground post claims an exposed Allstate staging environment allegedly provided access to Firebase-hosted data and records.

#Allstate #CloudSecurity #ThreatIntel

[Beralock @Beralock]

Threat Intelligence Alert

An underground forum post claims an alleged Extramarks data leak involving a ~1.8 GB compressed archive.

Claimed contents include:

Source code
Databases
Media
SEO files
Configurations
Logs

#Extramarks #DataLeak #DarkWeb #ThreatIntel #CyberSecurity

[Beralock @Beralock]

New Threat Intelligence Observation: https://t.co/6Qqn6vyfg0

Beralock identified https://t.co/6Qqn6vyfg0, a proxy platform advertising support for SOCKS5, SOCKS4/4a, HTTP/HTTPS and multi-hop proxy chains.

#ThreatIntel #CyberSecurity #Proxy #OSINT #NetworkSecurity #Beralock

[Beralock @Beralock]

New ransomware group identified: BOLT TeamBeralock Threat Intelligence identified emerging ransomware infrastructure operating under the name BOLT Team.

#Ransomware #BOLTTeam #ThreatIntel #CyberSecurity #DarkWeb #Beralock

[Beralock @Beralock]

DATA BREACH | Wyndham Hotels
9,000+ employee records stolen from Azure/Entra — names, job titles, managers, org chart.

Same actor as IHG breach. Same day. Same method.

Full report 👇
https://t.co/RN9cQEFeSk

#DataBreach #WyndhamHotels #Azure #CyberSecurity #Hospitality

[Beralock @Beralock]

CORPORATE BREACH | IHG Hotels
185,000+ employee records stolen DIRECTLY from Azure/Entra portal

Holiday Inn, Crowne Plaza, Kimpton, Hotel Indigo all under one breached identity system.

Full report 👇
https://t.co/RN9cQEFeSk

#DataBreach #IHG #HolidayInn #Azure #CyberSecurity

[Beralock @Beralock]

🇮🇳 DATA BREACH | Kotak Securities
6 LAKH Indian investor records leaked — name, email, phone, date of birth, account type.

Kotak clients: check your account NOW

Full report - https://t.co/myHun6UDDd

#DataBreach #KotakSecurities #India #CyberSecurity #InfoSec #SEBI 🇮🇳

[Beralock @Beralock]

DATA BREACH | Skywalk Group
Paragliding & wind sports manufacturer hit — full WordPress source code + database stolen and posted on dark web.

Registered users: change your password NOW.

Full report 👇
https://t.co/myHun6UDDd

#DataBreach #SkywalkGroup #WordPress #CyberSecurity

[Beralock @Beralock]

DATA BREACH | Zoomshift
10,000+ restaurant & retail business accounts leaked — MRR revenue data, GPS clock-in locations, employee records. 865K rows of PII + 4.1M event logs.
Full report - https://t.co/RN9cQEFeSk

#DataBreach #Zoomshift #CyberSecurity #InfoSec #Hospitality

[Beralock @Beralock]

DATA BREACH | DanteAI
73,547 users exposed — GPS coordinates, Facebook/TikTok/LinkedIn ad IDs, Stripe data, AI model usage logs. 2.9 MILLION rows total across 200+ countries.

Full report 👇
https://t.co/myHun6UDDd

#DataBreach #DanteAI #AI #CyberSecurity #InfoSe

[Beralock @Beralock]

A major database belonging to the Argentine Army (Ejército Argentino) has been leaked/claimed by the group "EsqueleSquad."

Full Intelligence Report: 🔗 https://t.co/dovZtGz2ei

#Argentina #CyberSecurity #BreakingNews #MilitaryLeak #DarkWeb #EsqueleSquad #Infosec #BeralockIntel

[Beralock @Beralock]

Threat actor "The Gentlemen" has targeted 2 Indian firms: Delkart Industries & Kontakt Consortium India. 📉

Dark web leak site listings are active with countdown timers.

Full Intel: https://t.co/RN9cQEFeSk

#CyberAttack #Ransomware #TheGentlemen #India #Beralock #ThreatIntel

[Beralock @Beralock]

🚨 DATA LEAK ALERT 🚨

Beralock Intel spotted an open directory on a @bankofbaroda subdomain leaking sensitive India First Insurance documents & regional vouchers. 📉

Full details: https://t.co/RN9cQEFeSk
#CyberSecurity #DataLeak #Infosec #Beralock #BankOfBaroda #OSINT

[Beralock @Beralock]

Beralock Threat Intelligence observed an underground forum advertisement offering a Microsoft-themed phishing infrastructure targeting Microsoft users.

#CyberSecurity #ThreatIntel #Phishing #DarkWeb #BrandProtection #InfoSec #BeralockIntel

[Beralock @Beralock]

TikTok isn't just for short videos—it's also a valuable source of OSINT.
Read the full blog👇
https://t.co/I8BejdwdUy
#OSINT #SOCMINT #CyberSecurity #ThreatIntel #TikTok #InfoSec #Beralock