César Pose<p>90% of code will be writen by AI, they say...<br>And Bug Bounty Hunters...<br>😅😅😅😅😅😅</p><p><a href="https://infosec.exchange/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ai</span></a> <a href="https://infosec.exchange/tags/aicoding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>aicoding</span></a> <a href="https://infosec.exchange/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>programming</span></a> <a href="https://infosec.exchange/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bugbounty</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a></p>
Recent searches
Search options
#infosec
309 posts115 participants44 posts today
ASN: AS200350
Location: Reutov, RU
Added: 2025-03-26T14:04
UK Royal Mail third party breach exposes 144GB of customer information
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/uk-royal-mail-third-party-breach-exposes-144gb-of-customer-information-o-5-v-w-v/gD2P6Ple2L
BeyondMachinesUK Royal Mail third party breach exposes 144GB of customer informationThe Royal Mail is investigating a potential data breach after a threat actor named "GHNA" leaked 144GB of files allegedly containing customer information, with the breach traced to a security incident at third-party service provider Spectos GmbH. Attackers possibly used credentials stolen in a 2021 malware incident to access sensitive data including names, addresses, phone numbers, delivery information, and internal recordings.
ASN: AS396073
Location: Garland, US
Added: 2025-03-24T00:08
Bamford Skincare security breach exposes customer payment information
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/bamford-skincare-security-breach-exposes-customer-payment-information-p-j-r-3-e/gD2P6Ple2L
BeyondMachinesBamford Skincare security breach exposes customer payment informationLuxury skincare brand Bamford experienced a security breach in March 2025 that potentially exposed customers' credit and debit card information, prompting the company to notify affected customers to check their bank accounts and consider canceling their cards. The UK's Information Commissioner's Office has closed the case after providing data protection advice.
decio ah tiens, ce serait donc celle-là la mystérieuse vulnérabilité en exploitation observée par les honeypots ? 
Vulnérabilité critique chez Ivanti Connect Secure (CVE-2025-22457)
Mandiant signale qu’une faille critique affectant certaines versions des VPN Ivanti est activement exploitée depuis mars 2025. Des acteurs liés à la Chine (UNC5221) ont déployé plusieurs malwares furtifs, comme TRAILBLAZE (dropper en mémoire) et BRUSHFIRE (porte dérobée passive), via cette faille.
Un patch est dispo depuis février, mais la menace a été sous-estimée au départ. Si vous utilisez Ivanti ICS, mettez à jour rapidement vers la version 22.7R2.6 ou ultérieure.
(Utilisez les outils d'intégrité d'Ivanti pour détecter toute activité anormale.)
"Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)"
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/?hl=en
Google Cloud BlogSuspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457) | Google Cloud Blog
I'm a sucker for behavior-based investigations, especially for stuff off the beaten path, so I love the insights we were able to come up with on this one. @DomainTools Investigations researchers found exposed criminal infrastructure and went down a rabbit hole.
#threatintel #infosec #cybersecurity
https://dti.domaintools.com/proton66-where-to-find-aspiring-hackers/
DomainTools Investigations | DTI · Where to Find Aspiring Hackers - DomainTools Investigations | DTIThis research analyzes Proton66, a bulletproof hosting network enabling cybercrime operations, serving as a hub for aspiring cybercriminals. It focuses on threat actor Coquettte and their ties to the Horrid hacking group.