Créer un compteSe connecter

Recherches récentes

Aucune recherche récente

Options de recherche

Disponible uniquement lorsque vous êtes connecté.
pouet.chapril.org est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Chapril https://www.chapril.org est un projet de l'April https://www.april.org

Administré par :

Statistiques du serveur :

1,1K
comptes actifs

pouet.chapril.org: À proposAnnuaire des profilsPolitique de confidentialité

Mastodon: À proposTélécharger l’applicationRaccourcis clavierVoir le code sourcev4.3.7

#vulnerability

30 messages22 participants5 messages aujourd’hui
Public
Danie van der Merwe

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

“Threat actors are using the “mu-plugins” directory in WordPress sites to conceal malicious code with the goal of maintaining persistent remote access and redirecting site visitors to bogus sites.mu-plugins, short for must-use plugins, refers to plu ...continues

See gadgeteer.co.za/hackers-exploi

A laptop displaying a WordPress login screen, featuring a password field and a faint handprint in the background.
GadgeteerZA · Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images“Threat actors are using the “mu-plugins” directory in WordPress sites to conceal malicious code with the goal of maintaining persistent remote access and
#security#technology#vulnerability
Public
OTX Bot

OttoKit WordPress Plugin Vulnerability has been Patched

This vulnerability is tracked as CVE-2025-3102 with a
CVSS score of 8.1.

Pulse ID: 67f86f3e478f6cc0306f815b
Pulse Link: otx.alienvault.com/pulse/67f86
Pulse Author: cryptocti
Created: 2025-04-11 01:24:14

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#InfoSec#OTX
Public
OTX Bot

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware

Pulse ID: 67f71a9514c00a52486bcf28
Pulse Link: otx.alienvault.com/pulse/67f71
Pulse Author: cryptocti
Created: 2025-04-10 01:10:45

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#InfoSec#OTX
Public
Ilan Kelman

Two new blogs:
1. "#Disasters that never happened: 6 preventive actions" preventionweb.net/drr-communit
2. "Mental Health #FirstAid for #Bangladesh"
psychologytoday.com/us/blog/di
 
#DisastersAvoided #DRR #DisastersAreNotNatural #NoNaturalDisasters (so we avoid the phrases #NaturalDisaster #NaturalDisasters) #SendaiFramework #Switch2Sendai #SFDRR #DisasterRisk #DisasterRiskReduction #Health #MentalHealth #MHFA #MentalHealthAwareness #GlobalHealth #PublicHealth #vulnerability #resilience

www.preventionweb.net · Disasters that never happened: Six preventive actionsWhat if the next big flood, wildfire, or heatwave didn't make headlines? Not because it didn't happen, but because communities, governments and local authorities were so well-prepared that a disaster was avoided?
Public
OTX Bot

Exploitation of CLFS zero-day leads to ransomware activity

A zero-day elevation of privilege vulnerability in Windows Common Log File System (CLFS) has been exploited against targets in IT, real estate, finance, software, and retail sectors across multiple countries. The exploit, deployed by PipeMagic malware and attributed to Storm-2460, enables privilege escalation and ransomware deployment. The vulnerability, CVE-2025-29824, was patched on April 8, 2025. The attack involves downloading malicious MSBuild files, using PipeMagic, and exploiting CLFS to inject payloads into system processes. Post-exploitation activities include credential theft and ransomware deployment, with similarities to RansomEXX. Microsoft recommends immediate patching and provides mitigation strategies, detection methods, and hunting queries to counter this threat.

Pulse ID: 67f6b1c7251291d51de23a7a
Pulse Link: otx.alienvault.com/pulse/67f6b
Pulse Author: AlienVault
Created: 2025-04-09 17:43:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#InfoSec#MSBuild
Public
BeyondMachines :verified:

WhatsApp flaw can let attackers send a file that looks like JPEG but is malicious program, update now
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesWhatsApp flaw can let attackers send a file that looks like JPEG but is malicious program, update nowMeta has patched a critical vulnerability (CVE-2025-30401) in WhatsApp's Windows application where the mismatch between how attachments are displayed (based on MIME type) versus how they're executed (based on filename extension) allows attackers to send files appearing harmless but containing malicious code that executes when opened.
Public
OTX Bot

Exploitation of CLFS zero-day leads to ransomware activity

A zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS) has been exploited against targets in various sectors across multiple countries. The exploit, deployed by PipeMagic malware and attributed to Storm-2460, enables privilege escalation and ransomware deployment. Post-exploitation activities include credential theft and file encryption. The vulnerability, tracked as CVE-2025-29824, has been patched. Mitigation strategies include applying security updates, enabling cloud-delivered protection, and implementing advanced security measures. Multiple detection methods and hunting queries are provided for identifying and responding to this threat.

Pulse ID: 67f5d9cac64a676c99e7a36c
Pulse Link: otx.alienvault.com/pulse/67f5d
Pulse Author: AlienVault
Created: 2025-04-09 02:22:02

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#Cloud#CyberSecurity#Encryption
Public
thereisnoanderson

NEW - ⛸️🧱🖥️

DCG Domain Blocklist available - last updated 2025/04/08

1689244 - Domains blocked with that build !

🦜
🐻
Supercharging your content blocker to increase privacy and security.

All available lists:
- uBlockOrigin
- Hosts format & Hosts format with wildcards
- dnsmasq with wildcards

🌳
Ready to use lists combined from many permissively licensed sources.

divested.dev/pages/dnsbl

#divested #DivestedComputingGroup

#DCG

#fsf #FUTO #Fedora #codeberg #hardening #linuxtech #cybersec #cybersecurity #infosec #antivirus #hackernews
#opensource #linuxsecurity #vulnerabilities #vulnerability #alpinelinux #router #skynet #foss #freeyourmind

divested.devDnsbl - Divested Computing
ExplorerFlux en direct
À propos