Akira ransomware abuses CPU tuning tool to disable Microsoft Defender
Source: https://www.bleepingcomputer.com/news/security/akira-ransomware-abuses-cpu-tuning-tool-to-disable-microsoft-defender/
ReVault flaws let hackers bypass Windows login on Dell laptops
Source: https://www.bleepingcomputer.com/news/security/revault-flaws-let-hackers-bypass-windows-login-on-dell-laptops/
Google suffers data breach in ongoing Salesforce data theft attacks
Source: https://www.bleepingcomputer.com/news/security/google-suffers-data-breach-in-ongoing-salesforce-data-theft-attacks/
New Ghost Calls tactic abuses Zoom and Microsoft Teams for C2 operations
Source: https://www.bleepingcomputer.com/news/security/new-ghost-calls-tactic-abuses-zoom-and-microsoft-teams-for-c2-operations/
PBS confirms data breach after employee info leaked on Discord servers
Source: https://www.bleepingcomputer.com/news/security/pbs-confirms-data-breach-after-employee-info-leaked-on-discord-servers/
U.S. CISA adds D-Link cameras and Network Video Recorder flaws to its Known Exploited Vulnerabilities catalog
Source: https://securityaffairs.com/180833/security/u-s-cisa-adds-d-link-cameras-and-network-video-recorder-flaws-to-its-known-exploited-vulnerabilities-catalog.html
Over 100 Dell Laptop Models Plagued by Vulnerabilities Impacting Millions
Source: https://hackread.com/dell-laptop-models-vulnerabilities-impacting-millions/
Can you review my new security testing tool [https://github.com/MohamedKarrab/odoomap](https://github.com/MohamedKarrab/odoomap)
Features:
• Detect Odoo version & exposed metadata
• Enumerate databases and accessible models
• Authenticate & verify CRUD permissions per model
• Extract data from chosen models (e.g.res.users, res.partner)
• Brute-force login credentials (default, custom user/pass, wordlists)
• Brute-force internal model names when listing fails
Cisco discloses data breach impacting Cisco.com user accounts
Source: https://www.bleepingcomputer.com/news/security/cisco-discloses-data-breach-impacting-ciscocom-user-accounts/
New Plague Linux malware stealthily maintains SSH access
Source: https://www.bleepingcomputer.com/news/security/new-plague-malware-backdoors-linux-devices-removes-ssh-session-traces/
Northwest Radiologists data breach hits 350,000 in Washington
Source: https://securityaffairs.com/180772/data-breach/northwest-radiologists-data-breach-hits-350000-in-washington.html
SentinelLABS and Beazley Security uncovered a series of infostealer campaigns delivering the Python-based PXA Stealer. The malware, which first appeared in late 2024, has evolved to incorporate sophisticated anti-analysis techniques and a hardened command-and-control infrastructure. Over 4,000 unique victim IP addresses from 62 countries were identified, with South Korea, the United States, and the Netherlands being the most targeted. The stolen data includes passwords, credit card records, and browser cookies. The threat actors, linked to Vietnamese-speaking cybercriminal circles, monetize the stolen data through a subscription-based underground ecosystem that automates resale via Telegram's API. The campaign showcases the growing trend of weaponizing legitimate infrastructure for large-scale information theft and monetization.
A potential zero-day vulnerability in SonicWall VPNs is being actively exploited to bypass MFA and deploy ransomware. The attack chain begins with a breach of the SonicWall appliance, followed by post-exploitation techniques including enumeration, detection evasion, lateral movement, and credential theft. Attackers quickly gain administrative access, establish command and control, move laterally, disable defenses, and deploy Akira ransomware. The threat actors use a mix of automated scripts and manual activity, abusing privileged accounts and utilizing various tools for persistence and data exfiltration. Immediate action is advised, including disabling SonicWall VPN access or severely restricting it, auditing service accounts, and hunting for malicious activity using provided indicators of compromise.
