Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
bolha.us is one of the many independent Mastodon servers you can use to participate in the fediverse.
We're a Brazilian IT Community. We love IT/DevOps/Cloud, but we also love to talk about life, the universe, and more. | Nós somos uma comunidade de TI Brasileira, gostamos de Dev/DevOps/Cloud e mais!

Administered by:

Server stats:

252
active users

bolha.us: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.6

#infosec

206 posts123 participants15 posts today
Public
BeyondMachines :verified:

Lubbock, Texas utility payment site has malicious code injected, compromises financial data of 12K customers
#cybersecurity #infosec #incident #databreach
beyondmachines.net/event_detai

BeyondMachinesLubbock, Texas utility payment site has malicious code injected, compromises financial data of 12K customersThe city of Lubbock, Texas experienced an e-skimming attack where hackers implanted malicious code creating a fake pop-up window on the utility payment website, stealing financial data including names, billing addresses, payment card numbers, security codes, and expiration dates from at least 12,503 Texas residents who made utility payments between December 18, 2024, and January 6, 2025.
Public
BeyondMachines :verified:

State Bar of Texas reports data breach, INC Ransomware gang claims responsibility
#cybersecurity #infosec #incident #databreach
beyondmachines.net/event_detai

BeyondMachinesState Bar of Texas reports data breach, INC Ransomware gang claims responsibilityThe State Bar of Texas, representing over 100,000 licensed attorneys, has confirmed a data breach that occurred between January 28 and February 9, 2025, with the INC ransomware gang claiming responsibility and leaking samples of allegedly stolen legal documents on their dark web extortion page. The State Bar is offering affected individuals free credit monitoring services through Experian and recommending credit freezes or fraud alerts to mitigate potential risks from the exposed data.
Public
Redhotcyber

🔥 ISCRIVITI AL WEBINAR DEL CORSO ETHICAL HACKER EXTREME EDITION

💻 La nuova Extreme Edition è il programma completo che ti porta dalle basi agli attacchi più avanzati, in 34 settimane di formazione blended learning, in italiano, con accesso esclusivo alla piattaforma HackMeUp! 🚀

🔹 5 anni di accesso a 50+ scenari di hacking
🔹 Lezioni avanzate su tecniche e strategie d’attacco
🔹 Piano quinquennale per il mantenimento della certificazione professionale

📅 WEBINAR 8 APRILE 2025 ORE 18

cybersecurityup.webinargeek.co

📞 3755931011 ✉️ e.picconi@fatainformatica.it

#redhotcyber#rhc#webinar
Public
shellsharks

The 10th edition of Scrolls is now live!

https://shellsharks.com/scrolls/scroll/2025-04-04

Thanks as usual to everyone who continues to awesome it up each week across the #IndieWeb, #Fediverse and #Cybersecurity / #Infosec communities. WIthout you all, my feeds would be dark and this newsletter wouldn't exist. Everyone below contributed in some way, so thanks! 🤗

@thisismissem @lown @ov @chadswhite @stammy @sharan @bixfrankonis @travisj @mttaggart @_elena @preslavrachev @mttaggart @Xkeeper @thesmallweb @jadedtwin @funkwhale @gynvael @hamatti @Soblow @JuliusGoat @flamed @maya @j @chuckya @StuntmAEn_Bob @predrag @shaferbrown @mho @pedoneb @lazcorp @jasonsantamaria @gedankenstuecke @securestep9 @annie @lars

shellsharks · Scroll decem
More from shellsharks
Public
BeyondMachines :verified:

RansomHub ransomware group targets Minnesota's Lower Sioux Indian community
#cybersecurity #infosec #incident #ransomware
beyondmachines.net/event_detai

BeyondMachinesRansomHub ransomware group targets Minnesota's Lower Sioux Indian communityThe Lower Sioux Indian Community in Minnesota is experiencing widespread operational disruptions following a ransomware attack claimed by the RansomHub operation, which has crippled their healthcare facilities, government functions, casino and hotel systems, digital gaming machines, and communication infrastructure since March 28, 2025. This incident appears to be part of a concerning trend targeting tribal communities, following a similar attack against Michigan's Sault Tribe of Chippewa Indians a month earlier.
Public
BeyondMachines :verified:

Suspected China-Nexus threat actor actively exploiting critical Ivanti Connect Secure flaw
#cybersecurity #infosec #attack #activeexploit
beyondmachines.net/event_detai

BeyondMachinesSuspected China-Nexus threat actor actively exploiting critical Ivanti Connect Secure flawA critical buffer overflow vulnerability (CVE-2025-22457, CVSS 9.0) in Ivanti Connect Secure VPN appliances is being actively exploited by UNC5221, a suspected Chinese espionage actor who studied the February 2025 patch to discover how to achieve remote code execution on vulnerable systems. Following exploitation, attackers deploy sophisticated malware including the new TRAILBLAZE in-memory dropper and BRUSHFIRE passive backdoor, while using compromised network devices to mask their origin.
Public
BeyondMachines :verified:

Critical Remote Code Execution flaw reported in Apache Parquet Java library
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesCritical Remote Code Execution flaw reported in Apache Parquet Java libraryA critical remote code execution vulnerability (CVE-2025-30065, CVSS 10) has been discovered in Apache Parquet's Java library affecting all versions up to 1.15.0, allowing attackers to execute arbitrary code through deserialization of untrusted data when processing specially crafted Parquet files, potentially impacting major data processing frameworks, cloud services, and companies like Netflix and Uber until patched in version 1.15.1.
Public
BeyondMachines :verified:

Multiple flaws reported in Hitachi Energy MicroSCADA Pro/X SYS600, at least one critical
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesMultiple flaws reported in Hitachi Energy MicroSCADA Pro/X SYS600, at least one criticalCISA has issued an advisory for multiple security vulnerabilities in Hitachi Energy's MicroSCADA Pro/X SYS600 products, with the most severe being a critical SQL injection flaw (CVE-2024-4872, CVSS 9.9) that allows authenticated attackers to inject code into persistent data, while other vulnerabilities enable path traversal, authentication bypass, session hijacking, and phishing attacks that collectively could compromise operational technology systems if exploited.
Public
BeyondMachines :verified:

ImageRunner: critical privilege escalation vulnerability in Google Cloud Platform
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesImageRunner: critical privilege escalation vulnerability in Google Cloud PlatformThe critical "ImageRunner" vulnerability in Google Cloud Platform allowed attackers with Cloud Run edit permissions to access private container images by exploiting how the Cloud Run service agent pulls images, enabling them to bypass normal registry access requirements and potentially extract secrets or sensitive data from private containers until Google fixed it on January 28, 2025, by implementing validation checks requiring explicit image access permissions.
Public
Lockdownyourlife

If you would like to do some good today while doomscrolling your multiple timelines.

New month, new goal to help a Domestic Violence family with safe housing and new devices. We're already 5% funded already!

Support here: ko-fi.com/lockdownyourlife

Ko-fiSupport Lock Down Your Life on Ko-fi! ❤️. ko-fi.com/lockdownyourlifeSupport Lock Down Your Life On Ko-fi. Ko-fi lets you support the people and causes you love with small donations
#tech#infosec#community
ExploreLive feeds
About