Belk hit by May cyberattack: DragonForce stole 150GB of data
Source: https://securityaffairs.com/179958/data-breach/belk-hit-by-may-cyberattack-dragonforce-stole-150gb-of-data.html
AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe
Source: https://thehackernews.com/2025/07/asyncrats-open-source-code-sparks-surge.html
Microsoft Remote Procedure Call (MS-RPC) is a protocol used within Windows operating systems to enable inter-process communication, both locally and across networks.
Researching MS-RPC interfaces, however, poses several challenges. Manually analyzing RPC services can be time-consuming, especially when faced with hundreds of interfaces spread across different processes, services and accessible through various endpoints.
This post will dive into the new algorithm/method I designed and implemented for fuzzing. It will describe some results and why these results differ from the default fuzzing approach. Apart from the additional implemented features, the tool will be released with this post as well! All security researchers from over the world can now freely use this tool in their research.
This report analyzes a historical class of security flaws known as “reflected vulnerabilities,”
which were once potent zero-day attack vectors targeting early Windows versions and antivirus
software. We examine classic exploitation techniques, such as parser attacks, packet fragmen-
tation, and syscall abuse, which could lead to remote code execution (RCE) or privilege esca-
lation. The objective is educational, demonstrating how modern defenses in Windows 11 and
Windows Defender—such as Address Space Layout Randomization (ASLR), Data Execution
Prevention (DEP), Control Flow Guard (CFG), and hardened parsers—have rendered this class
of vulnerabilities obsolete. Proof-of-concept (PoC) code is provided solely to illustrate histor-
ical concepts and is non-functional on modern systems, ensuring compliance with responsible
disclosure principles.
Hey folks,
Just published a write-up where I turned a blind XSS into Remote Code Execution , and the final step?
Injecting commands via Accept-Language header, parsed by a vulnerable PHP script.
No logs. No alert. Just clean shell access.
Would love to hear your thoughts or similar techniques you've seen!
🧠🛡️
[https://is4curity.medium.com/from-blind-xss-to-rce-when-headers-became-my-terminal-d137d2c808a3](https://is4curity.medium.com/from-blind-xss-to-rce-when-headers-became-my-terminal-d137d2c808a3)
Silent Lynx, a persistent cyber espionage threat actor, has conducted targeted intrusion campaigns against government ministries, diplomatic missions, and civil society organizations across Central Asia since 2024. The group focuses on high-value public sector organizations in Commonwealth of Independent States countries, leveraging spear-phishing campaigns through compromised government email accounts and malware staging via GitHub. Operations from late 2024 through 2026 reveal extensive infrastructure including exposed open directories, newly registered domains, and GitHub repositories. The actor employs lightweight reverse shells, PowerShell scripts, proprietary tools, and commodity utilities. Recent activity shows adoption of exploit-assisted delivery via CVE-2025-8088, expanding focus on Linux systems, and interest in FortiWeb vulnerability CVE-2025-25257. Attribution indicators point to Russian-speaking operators likely based in Kazakhstan, with targeting concentrated on water resources, environmenta...
Exploiting Public APP_KEY Leaks to Achieve RCE in Hundreds of Laravel Applications
Source: https://blog.gitguardian.com/exploiting-public-app_key-leaks/
