Threats tagged 'high-priority'

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others Source: https://thehackernews.com/2025/08/socgholish-malware-spread-via-ad-tools.html

Malware#infosecnews#redditGermany+6

Fake WhatsApp developer libraries hide destructive data-wiping code Source: https://www.bleepingcomputer.com/news/security/fake-whatsapp-developer-libraries-hide-destructive-data-wiping-code/

Phishing#infosecnews#redditGermany+6

Cracking the Vault: how we found zero-day flaws in authentication, identity, and authorization in HashiCorp Vault Source: https://cyata.ai/blog/cracking-the-vault-how-we-found-zero-day-flaws-in-authentication-identity-and-authorization-in-hashicorp-vault/

Air France and KLM disclose data breaches impacting customers Source: https://www.bleepingcomputer.com/news/security/air-france-and-klm-disclose-data-breaches-impacting-customers/

News#infosecnews#redditFrance+6

Akira ransomware abuses CPU tuning tool to disable Microsoft Defender Source: https://www.bleepingcomputer.com/news/security/akira-ransomware-abuses-cpu-tuning-tool-to-disable-microsoft-defender/

Malware#infosecnews#redditGermany+9

Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft Source: https://thehackernews.com/2025/08/researchers-uncover-ecscape-flaw-in.html

News#infosecnews#redditGermany+6

ReVault flaws let hackers bypass Windows login on Dell laptops Source: https://www.bleepingcomputer.com/news/security/revault-flaws-let-hackers-bypass-windows-login-on-dell-laptops/

News#infosecnews#redditGermany+9

Google suffers data breach in ongoing Salesforce data theft attacks Source: https://www.bleepingcomputer.com/news/security/google-suffers-data-breach-in-ongoing-salesforce-data-theft-attacks/

Breach#infosecnews#redditGermany+6

MFA matters… But it isn’t enough on its own Source: https://www.bleepingcomputer.com/news/security/mfa-matters-but-it-isnt-enough-on-its-own/

News#infosecnews#redditGermany+9

New Ghost Calls tactic abuses Zoom and Microsoft Teams for C2 operations Source: https://www.bleepingcomputer.com/news/security/new-ghost-calls-tactic-abuses-zoom-and-microsoft-teams-for-c2-operations/

Botnet#infosecnews#redditGermany+7

PBS confirms data breach after employee info leaked on Discord servers Source: https://www.bleepingcomputer.com/news/security/pbs-confirms-data-breach-after-employee-info-leaked-on-discord-servers/

Breach#infosecnews#redditGermany+5

KLM Airlines Confirms Customer Data Breach Linked to Third-Party System Source: https://hackread.com/klm-customer-data-breach-linked-third-party-system/

Breach#infosecnews#redditNetherlands+5

Can you review my new security testing tool [https://github.com/MohamedKarrab/odoomap](https://github.com/MohamedKarrab/odoomap) Features: • Detect Odoo version & exposed metadata • Enumerate databases and accessible models • Authenticate & verify CRUD permissions per model • Extract data from chosen models (e.g.res.users, res.partner) • Brute-force login credentials (default, custom user/pass, wordlists) • Brute-force internal model names when listing fails

Breach#netsec#redditGermany+7

Cisco discloses data breach impacting Cisco.com user accounts Source: https://www.bleepingcomputer.com/news/security/cisco-discloses-data-breach-impacting-ciscocom-user-accounts/

Breach#infosecnews#redditGermany+9

SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported Source: https://thehackernews.com/2025/08/sonicwall-investigating-potential-ssl.html

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign Source: https://thehackernews.com/2025/08/15000-fake-tiktok-shop-domains-deliver.html

Malware#infosecnews#redditGermany+7

Android gets patches for Qualcomm flaws exploited in attacks Source: https://www.bleepingcomputer.com/news/security/android-gets-patches-for-qualcomm-flaws-exploited-in-attacks/

News#infosecnews#redditGermany+9

Proton fixes Authenticator bug leaking TOTP secrets in logs Source: https://www.bleepingcomputer.com/news/security/proton-fixes-authenticator-bug-leaking-totp-secrets-in-logs/

News#infosecnews#redditGermany+5

Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally Source: https://thehackernews.com/2025/08/vietnamese-hackers-use-pxa-stealer-hit.html

Malware#infosecnews#redditGermany+6

New Plague Linux malware stealthily maintains SSH access Source: https://www.bleepingcomputer.com/news/security/new-plague-malware-backdoors-linux-devices-removes-ssh-session-traces/

Malware#infosecnews#redditGermany+9