Xploitzone

cyber security researcher

[Xploitzone @Xploitzone_01]

🚨 Router Security Alert

A critical D-Link DIR-X1860Z flaw allows attackers to bypass authentication and access protected functions without valid credentials.

⚠️ Check your router firmware now.

🔗 https://t.co/06P021Futa

#CyberSecurity #DLink #RouterSecurity

[Xploitzone @Xploitzone_01]

🚨 AI Account Theft Alert

Infostealers are now targeting Claude AI sessions, stealing browser tokens that can let attackers hijack active accounts without needing the user's password.

🔗 https://t.co/FSWSdaJQbG

#CyberSecurity #AI #Infostealer

[Xploitzone @Xploitzone_01]

🚨 Cisco Router Attack

Fire Ant turned Cisco IOS XR routers, TACACS servers and Linux hosts into an espionage control plane—using trusted infrastructure to pivot toward high-value networks.

🔗 https://t.co/5rnrBlwNCV

#CyberSecurity #Cisco #ThreatIntel

[Xploitzone @Xploitzone_01]

🚨 Blind Eagle Exposed

Researchers uncovered Blind Eagle’s GitHub infrastructure, revealing malware loaders, multiple RAT families, and an organized setup built for rapid deployment and espionage.

🔗 https://t.co/DaqOCOom5o

#CyberSecurity #APT #ThreatIntel

[Xploitzone @Xploitzone_01]

🚨 AI-Powered Phishing Alert

AnonymousKit uses AI-generated phishing pages to target iPhone users stealing Apple credentials and sensitive data through highly convincing fake login screens.

🔗 https://t.co/XB6A2zDxHK

#CyberSecurity #Phishing #iPhone

[Xploitzone @Xploitzone_01]

🚨 UK Energy Sector Hit

Iran-linked hackers reportedly disrupted a small British power plant for 4 days marking a rare cyberattack against UK energy infrastructure.

⚠️The incident highlights growing risks to critical infrastructure.

🔗 https://t.co/DkoQcNRBhi

#Irannews

[Xploitzone @Xploitzone_01]

🚨 WordPress Security Alert

A miniOrange WordPress plugin flaw allows attackers to bypass authentication and gain unauthorized access to vulnerable sites.

⚠️ WordPress admins should update affected plugins immediately.

🔗 https://t.co/Y4KCRO3ZAc

#WordPress #CyberSecurity

[Xploitzone @Xploitzone_01]

🚨 npm Security Alert

Attackers are abusing fake npm mirror sites to trick developers into downloading malicious packages, turning trusted-looking developer resources into a malware delivery channel.

🔗 https://t.co/Ut7XutJFbP

#CyberSecurity #npm #Phishing

[Xploitzone @Xploitzone_01]

🚨 WordPress Security Alert

Avada Theme flaws are being chained to gain remote code execution, putting vulnerable WordPress sites at risk of full takeover.

⚠️ Update Avada and check for signs of compromise.

🔗 https://t.co/WCb5COj7y5

#WordPress #CyberSecurity #RCE

[Xploitzone @Xploitzone_01]

🚨 Fake Gemini Alert

Attackers are using a fake Google Gemini installer hosted on Google Colab to deliver Vidar stealer, targeting saved browser passwords and session data.

⚠️ Trusted platforms can still host malicious files.

🔗 https://t.co/lMbjozkgJm

#Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Android Car Malware Alert

Researchers uncovered malware targeting Android car head units, turning infected infotainment systems into BADBOX proxy nodes that can hide attacker traffic and abuse your device.

🔗 https://t.co/BvEQyKN9P0

#CyberSecurity #Android #BADBOX

[Xploitzone @Xploitzone_01]

🚨 Fake AI Tools Alert

Attackers are using fake ChatGPT, Claude & Copilot installers to spread malware, steal credentials, and compromise users searching for popular AI tools.

🔗 https://t.co/xFwUzKlzwH

#CyberSecurity #Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Fake PoC Warning

Attackers are uploading fake AI vulnerability PoCs to GitHub, using popular CVE names to trick researchers into downloading malware disguised as exploit code.

🔗 https://t.co/Blix5XGlDB

#CyberSecurity #GitHub #Malware

[Xploitzone @Xploitzone_01]

🚨 China-Linked Espionage Alert

SilkParasite is targeting Central Asian organizations with seven custom RAT families, using advanced persistence and stealth techniques for long-term espionage.

🔗 https://t.co/ROezr5ueRO

#CyberSecurity #APT #ThreatIntel

[Xploitzone @Xploitzone_01]

🚨 Camera Security Alert

Operation CameraSwarm targets exposed Dahua cameras through a P2P vulnerability, allowing attackers to hijack devices, spy on video feeds, and build large-scale surveillance networks.

🔗 https://t.co/rzrBYUZy8S

#CyberSecurity #IoT #Dahua

[Xploitzone @Xploitzone_01]

🚨 Microsoft 365 Phishing Alert

Mirage2FA uses AiTM phishing to bypass MFA and steal authenticated Microsoft 365 session cookies—giving attackers access even when MFA is enabled.

⚠️ 2FA alone may not stop it.

🔗 https://t.co/uaP9KVxHrK

#CyberSecurity #Phishing #MFA

[Xploitzone @Xploitzone_01]

🚨 Medusa Ransomware Alert

Medusa is exploiting CVE-2026-1731 in BeyondTrust to gain access, steal credentials, and move deeper into victim networks.

⚠️ CISA added the flaw to its KEV catalog.

🔗 https://t.co/4JjZnszhdZ

#Ransomware #CyberSecurity #CVE

[Xploitzone @Xploitzone_01]

🚨 npm Supply Chain Attack

ChainDrop uses an SLSA bypass and Ethereum-based C2 to spread a self-propagating npm worm, stealing developer credentials and spreading through compromised packages.

🔗 https://t.co/TWVR7Pk0Rd

#CyberSecurity #npm #SupplyChain #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Spyware Alert

GhostDesk is spreading through fake CCleaner downloads, abusing Chrome extensions to steal browser data and maintain persistence on infected Windows systems.

🔗 https://t.co/arxDTifF2q

#CyberSecurity #Spyware #Malware #InfoSec

[Xploitzone @Xploitzone_01]

🚨 Supply Chain Attack

Dragon Breath abused a stolen DigiCert certificate to sign RONINGLOADER, using trusted signatures to bypass security controls and deliver malware through trojanized installers.

🔗 https://t.co/e1gYNSaBF3

#CyberSecurity #Malware #ThreatIntel #InfoSec