med-mastodon.com is one of the many independent Mastodon servers you can use to participate in the fediverse.
Medical community on Mastodon

Administered by:

Server stats:

410
active users

#vulnerabilities

7 posts7 participants3 posts today
Marcus "MajorLinux" Summers<p>This time I'm begging you to update yo shit!</p><p>PSA: iOS 18.5 patches over 30 iPhone security vulnerabilties - 9to5Mac </p><p><a href="https://9to5mac.com/2025/05/12/ios-18-5-security-fixes/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">9to5mac.com/2025/05/12/ios-18-</span><span class="invisible">5-security-fixes/</span></a></p><p><a href="https://toot.majorshouse.com/tags/iOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iOS</span></a> <a href="https://toot.majorshouse.com/tags/Patching" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Patching</span></a> <a href="https://toot.majorshouse.com/tags/iPhone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iPhone</span></a> <a href="https://toot.majorshouse.com/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a> <a href="https://toot.majorshouse.com/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a> <a href="https://toot.majorshouse.com/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerabilities</span></a> <a href="https://toot.majorshouse.com/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Apple</span></a> <a href="https://toot.majorshouse.com/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tech</span></a></p>
Brian Honan<p>The <span class="h-card" translate="no"><a href="https://respublicae.eu/@enisa_eu" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>enisa_eu</span></a></span> has officially launched the European Vulnerability Database. </p><p>Good to see this happening particularly in light of the recent concerns around the funding model for the CVE program</p><p><a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> <a href="https://mastodon.social/tags/ENISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ENISA</span></a> <a href="https://mastodon.social/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a></p><p><a href="https://www.enisa.europa.eu/news/consult-the-european-vulnerability-database-to-enhance-your-digital-security" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">enisa.europa.eu/news/consult-t</span><span class="invisible">he-european-vulnerability-database-to-enhance-your-digital-security</span></a></p>
Pyrzout :vm:<p>EU Vulnerability Database Officially Launches Amid CVE Program Concerns <a href="https://thecyberexpress.com/eu-vulnerability-database-officially-launches-amid-cve-program-concerns/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">thecyberexpress.com/eu-vulnera</span><span class="invisible">bility-database-officially-launches-amid-cve-program-concerns/</span></a> <a href="https://social.skynetcloud.site/tags/TheCyberExpressNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TheCyberExpressNews</span></a> <a href="https://social.skynetcloud.site/tags/TheCyberExpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TheCyberExpress</span></a> <a href="https://social.skynetcloud.site/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerabilities</span></a> <a href="https://social.skynetcloud.site/tags/FirewallDaily" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FirewallDaily</span></a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> <a href="https://social.skynetcloud.site/tags/CyberNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberNews</span></a> <a href="https://social.skynetcloud.site/tags/ENISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ENISA</span></a> <a href="https://social.skynetcloud.site/tags/MITRE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MITRE</span></a> <a href="https://social.skynetcloud.site/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE</span></a> <a href="https://social.skynetcloud.site/tags/NVD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NVD</span></a> <a href="https://social.skynetcloud.site/tags/EU" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EU</span></a></p>
Benjamin Carr, Ph.D. 👨🏻‍💻🧬<p><a href="https://hachyderm.io/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a> announced Monday that going forward, only urgent alerts tied to emerging threats or major <a href="https://hachyderm.io/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyber</span></a> activity will appear on its website. Routine updates, guidance, and other notifications will instead be shared via email, RSS, and <a href="https://hachyderm.io/tags/Musk" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Musk</span></a>'s <a href="https://hachyderm.io/tags/X" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>X</span></a>.<br>Up until now, its website has been posting a variety of bulletins, including known <a href="https://hachyderm.io/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> under attack, flaws found in everything from industrial control systems to smart TVs, and warnings about specific products.<br><a href="https://www.theregister.com/2025/05/12/cisa_vulnerabilities_updates_x/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">theregister.com/2025/05/12/cis</span><span class="invisible">a_vulnerabilities_updates_x/</span></a></p>
PrivacyDigest<p>Open source project <a href="https://mas.to/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>curl</span></a> is sick of users submitting “AI slop” <a href="https://mas.to/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> - Ars Technica</p><p>"One way you can tell is it's always such a nice report," founder tells Ars.<br><a href="https://mas.to/tags/aislop" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>aislop</span></a> <a href="https://mas.to/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ai</span></a> <a href="https://mas.to/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a></p><p><a href="https://arstechnica.com/gadgets/2025/05/open-source-project-curl-is-sick-of-users-submitting-ai-slop-vulnerabilities/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">arstechnica.com/gadgets/2025/0</span><span class="invisible">5/open-source-project-curl-is-sick-of-users-submitting-ai-slop-vulnerabilities/</span></a></p>
Marcus "MajorLinux" Summers<p>Okay. Every now and then, I may use some AI to help write something.</p><p>But if I can't articulate what's wrong or where something is broken to get it fixed, maybe I should leave that up to someone who can.</p><p>Open source project curl is sick of users submitting “AI slop” vulnerabilities </p><p><a href="https://arstechnica.com/gadgets/2025/05/open-source-project-curl-is-sick-of-users-submitting-ai-slop-vulnerabilities/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">arstechnica.com/gadgets/2025/0</span><span class="invisible">5/open-source-project-curl-is-sick-of-users-submitting-ai-slop-vulnerabilities/</span></a></p><p><a href="https://toot.majorshouse.com/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OpenSource</span></a> <a href="https://toot.majorshouse.com/tags/cURL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cURL</span></a> <a href="https://toot.majorshouse.com/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AI</span></a> <a href="https://toot.majorshouse.com/tags/AISlop" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AISlop</span></a> <a href="https://toot.majorshouse.com/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerabilities</span></a> <a href="https://toot.majorshouse.com/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tech</span></a></p>
Ars Technica News<p>Open source project curl is sick of users submitting “AI slop” vulnerabilities <a href="https://arstechni.ca/LAhpm" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">arstechni.ca/LAhpm</span><span class="invisible"></span></a> <a href="https://c.im/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> <a href="https://c.im/tags/bugreports" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bugreports</span></a> <a href="https://c.im/tags/hackerone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hackerone</span></a> <a href="https://c.im/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a> <a href="https://c.im/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tech</span></a> <a href="https://c.im/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>curl</span></a> <a href="https://c.im/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AI</span></a></p>
Xavier «X» Santolaria :verified_paw: :donor:<p>📨 Latest issue of my curated <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> and <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> list of resources for week #18/2025 is out!</p><p>It includes the following and much more:</p><p>🇫🇷 🇷🇺 France has linked Russian APT to 12 <a href="https://infosec.exchange/tags/cyberattacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberattacks</span></a> on French Orgs.; </p><p>🇺🇸 Cybersecurity experts demand the reinstatement of Chris Krebs' security clearances and the withdrawal of the investigation;</p><p>🐛 🍎 <a href="https://infosec.exchange/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerabilities</span></a> in Apple's <a href="https://infosec.exchange/tags/AirPlay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AirPlay</span></a> Protocol;</p><p>🚉 New York's Metropolitan Transportation Authority plans to use <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AI</span></a> and cameras to detect potential subway crimes before they happen;</p><p>🇨🇳 <span class="h-card" translate="no"><a href="https://infosec.exchange/@SentinelOne" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>SentinelOne</span></a></span> Targeted by Chinese <a href="https://infosec.exchange/tags/PurpleHaze" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PurpleHaze</span></a> Group;</p><p>🔐 <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Microsoft</span></a> sets all new accounts <a href="https://infosec.exchange/tags/passwordless" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordless</span></a> by default;</p><p>🇺🇸 💸 The <a href="https://infosec.exchange/tags/Trump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Trump</span></a> administration plans to cut $491 million from <a href="https://infosec.exchange/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a>'s budget;</p><p>Subscribe to the <a href="https://infosec.exchange/tags/infosecMASHUP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosecMASHUP</span></a> newsletter to have it piping hot in your inbox every week-end ⬇️</p><p><a href="https://infosec-mashup.santolaria.net/p/infosec-mashup-18-2025" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">infosec-mashup.santolaria.net/</span><span class="invisible">p/infosec-mashup-18-2025</span></a></p>
Marco Ivaldi<p>A couple of days ago, I unearthed my first <a href="https://infosec.exchange/tags/computer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>computer</span></a>, an <a href="https://infosec.exchange/tags/MSX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MSX</span></a> straight from the ‘80s. It was lost in some box in the basement for who knows how long. Just feeling its power switch gave me the goosebumps…</p><p>This discovery came after sharing my hacker’s origin story with Nic Fillingham and Wendy Zenone in a new episode of Microsoft’s <a href="https://infosec.exchange/tags/BlueHat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>BlueHat</span></a> <a href="https://infosec.exchange/tags/Podcast" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Podcast</span></a>. </p><p><a href="https://thecyberwire.com/podcasts/the-bluehat-podcast/52/notes" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">thecyberwire.com/podcasts/the-</span><span class="invisible">bluehat-podcast/52/notes</span></a></p><p>Join us while we chat about my first-ever <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE</span></a>, overlooked <a href="https://infosec.exchange/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> that continue to pose significant risks today, <a href="https://infosec.exchange/tags/ActiveDirectory" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ActiveDirectory</span></a> and <a href="https://infosec.exchange/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>password</span></a> security, my unexpected journey into <a href="https://infosec.exchange/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bugbounty</span></a> hunting and my involvement in the <a href="https://infosec.exchange/tags/ZeroDayQuest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ZeroDayQuest</span></a>, how to learn new things, mentorship and positive leadership, and of course pineapple pizza 🍍🍕</p>
knoppix<p>Researchers have revealed that defenses against "juice jacking" on <a href="https://mastodon.social/tags/iOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iOS</span></a> and <a href="https://mastodon.social/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Android</span></a> can be easily bypassed.</p><p>Malicious chargers exploit <a href="https://mastodon.social/tags/USB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>USB</span></a> <a href="https://mastodon.social/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> to steal <a href="https://mastodon.social/tags/data" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>data</span></a>.</p><p>The new "ChoiceJacking" technique allows attackers to <a href="https://mastodon.social/tags/spoof" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spoof</span></a> user consent and access sensitive files.</p><p>Avoid using public charging USB ports to <a href="https://mastodon.social/tags/protect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>protect</span></a> your data.</p><p><a href="https://arstechnica.com/security/2025/04/ios-and-android-juice-jacking-defenses-have-been-trivial-to-bypass-for-years/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">arstechnica.com/security/2025/</span><span class="invisible">04/ios-and-android-juice-jacking-defenses-have-been-trivial-to-bypass-for-years/</span></a></p><p><a href="https://mastodon.social/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Technology</span></a> <a href="https://mastodon.social/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tech</span></a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechNews</span></a> <a href="https://mastodon.social/tags/JuiceJacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>JuiceJacking</span></a> <a href="https://mastodon.social/tags/ChoiceJacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ChoiceJacking</span></a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a> <a href="https://mastodon.social/tags/DataProtection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataProtection</span></a></p>
knoppix<p><a href="https://mastodon.social/tags/4chan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>4chan</span></a> has partially resumed operations after a significant <a href="https://mastodon.social/tags/hack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hack</span></a> that exposed <a href="https://mastodon.social/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> and led to a nearly two-week <a href="https://mastodon.social/tags/shutdown" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>shutdown</span></a>.</p><p>The site attributes its struggles to financial constraints and pressure from advertisers, which have limited its ability to maintain <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a>.</p><p>4chan's team remains defiant, emphasizing the site's unique role in online culture.</p><p><a href="https://techcrunch.com/2025/04/27/4chan-is-back-online-says-its-been-starved-of-money/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">techcrunch.com/2025/04/27/4cha</span><span class="invisible">n-is-back-online-says-its-been-starved-of-money/</span></a></p><p><a href="https://mastodon.social/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Technology</span></a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechNews</span></a> <a href="https://mastodon.social/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tech</span></a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersecurity</span></a> <a href="https://mastodon.social/tags/OnlineCommunity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OnlineCommunity</span></a> <a href="https://mastodon.social/tags/DigitalCulture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DigitalCulture</span></a> <a href="https://mastodon.social/tags/InternetFreedom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InternetFreedom</span></a> <a href="https://mastodon.social/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Hacking</span></a></p>
gcve.eu<p>Seven new GNAs have been registered on GCVE.EU !</p><p>We're glad to see the community grow and are open to new GNA applications </p><p>🔗 JSON <a href="https://gcve.eu/dist/gcve.json" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">gcve.eu/dist/gcve.json</span><span class="invisible"></span></a><br>🔗 Why and How to become a GNA <a href="https://gcve.eu/about/#eligibility-and-process-to-obtain-a-gna-id" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">gcve.eu/about/#eligibility-and</span><span class="invisible">-process-to-obtain-a-gna-id</span></a></p><p><a href="https://social.circl.lu/tags/cve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cve</span></a> <a href="https://social.circl.lu/tags/gcve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>gcve</span></a> <a href="https://social.circl.lu/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> <a href="https://social.circl.lu/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a></p>
Xavier «X» Santolaria :verified_paw: :donor:<p>📨 Latest issue of my curated <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> and <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> list of resources for week #17/2025 is out!</p><p>It includes the following and much more:</p><p>🇺🇸 👋🏻 Two top officials from <a href="https://infosec.exchange/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a> resigned;</p><p>🇺🇸 💬 U.S. Defense Secretary Pete Hegseth caught in another information leak;</p><p>📊 Yearly Threat Intelligence Reports Released;</p><p>🇺🇸 💸 U.S. lost record $16.6 billion to <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> in 2024;</p><p>🇺🇸 5.5 Million Patients Affected by <a href="https://infosec.exchange/tags/DataBreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DataBreach</span></a> at Yale New Haven Health;</p><p>🐛 💥 VulnCheck spotted 159 actively exploited <a href="https://infosec.exchange/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> in first few months of 2025;</p><p>🇺🇸 🇨🇳 FBI is seeking public help to identify Chinese hackers known as <a href="https://infosec.exchange/tags/SaltTyphoon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SaltTyphoon</span></a> and offers $10 million reward;</p><p>Subscribe to the <a href="https://infosec.exchange/tags/infosecMASHUP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosecMASHUP</span></a> newsletter to have it piping hot in your inbox every week-end ⬇️</p><p><a href="https://infosec-mashup.santolaria.net/p/infosec-mashup-17-2025" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">infosec-mashup.santolaria.net/</span><span class="invisible">p/infosec-mashup-17-2025</span></a></p>
gcve.eu<p>A Python client for the Global CVE Allocation System has been released.</p><p>by <span class="h-card" translate="no"><a href="https://fosstodon.org/@cedric" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>cedric</span></a></span> </p><p><a href="https://social.circl.lu/tags/cve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cve</span></a> <a href="https://social.circl.lu/tags/gcve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>gcve</span></a> <a href="https://social.circl.lu/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> <a href="https://social.circl.lu/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerability</span></a> </p><p>🔗 <a href="https://github.com/gcve-eu/gcve" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">github.com/gcve-eu/gcve</span><span class="invisible"></span></a></p>
Pyrzout :vm:<p>Cybercriminals switch up their top initial access vectors of choice – Source: www.csoonline.com <a href="https://ciso2ciso.com/cybercriminals-switch-up-their-top-initial-access-vectors-of-choice-source-www-csoonline-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ciso2ciso.com/cybercriminals-s</span><span class="invisible">witch-up-their-top-initial-access-vectors-of-choice-source-www-csoonline-com/</span></a> <a href="https://social.skynetcloud.site/tags/ThreatandVulnerabilityManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ThreatandVulnerabilityManagement</span></a> <a href="https://social.skynetcloud.site/tags/IdentityandAccessManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IdentityandAccessManagement</span></a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>rssfeedpostgeneratorecho</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/IncidentResponse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IncidentResponse</span></a> <a href="https://social.skynetcloud.site/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> <a href="https://social.skynetcloud.site/tags/cyberattacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberattacks</span></a> <a href="https://social.skynetcloud.site/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybercrime</span></a> <a href="https://social.skynetcloud.site/tags/CSOonline" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CSOonline</span></a> <a href="https://social.skynetcloud.site/tags/CSOOnline" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CSOOnline</span></a> <a href="https://social.skynetcloud.site/tags/Phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Phishing</span></a></p>
gcve.eu<p>The first publication of the GCVE-BCP-01 - Signature Verification of the Directory File</p><p>🔗 More information about BCP <a href="https://gcve.eu/bcp/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">gcve.eu/bcp/</span><span class="invisible"></span></a><br>🔗 GCVE-BCP-01 <a href="https://gcve.eu/bcp/gcve-bcp-01/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">gcve.eu/bcp/gcve-bcp-01/</span><span class="invisible"></span></a></p><p><a href="https://social.circl.lu/tags/cve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cve</span></a> <a href="https://social.circl.lu/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> <a href="https://social.circl.lu/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> <a href="https://social.circl.lu/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerability</span></a> <a href="https://social.circl.lu/tags/gcve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>gcve</span></a></p>
Pyrzout :vm:<p>Fresh Windows NTLM Vulnerability Exploited in Attacks – Source: www.securityweek.com <a href="https://ciso2ciso.com/fresh-windows-ntlm-vulnerability-exploited-in-attacks-source-www-securityweek-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ciso2ciso.com/fresh-windows-nt</span><span class="invisible">lm-vulnerability-exploited-in-attacks-source-www-securityweek-com/</span></a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>rssfeedpostgeneratorecho</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> <a href="https://social.skynetcloud.site/tags/securityweekcom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>securityweekcom</span></a> <a href="https://social.skynetcloud.site/tags/securityweek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>securityweek</span></a> <a href="https://social.skynetcloud.site/tags/Exploited" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Exploited</span></a> <a href="https://social.skynetcloud.site/tags/FEATURED" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FEATURED</span></a> <a href="https://social.skynetcloud.site/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Windows</span></a> <a href="https://social.skynetcloud.site/tags/NTLM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NTLM</span></a></p>
PrivacyDigest<p>'Stupid and Dangerous': <a href="https://mas.to/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a> Funding Chaos Threatens Essential <a href="https://mas.to/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersecurity</span></a> Program </p><p>The <a href="https://mas.to/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE</span></a> Program is the primary way software <a href="https://mas.to/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilities</span></a> are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it.</p><p><a href="https://www.wired.com/story/cve-program-cisa-funding-chaos/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">wired.com/story/cve-program-ci</span><span class="invisible">sa-funding-chaos/</span></a></p>
Marcus "MajorLinux" Summers<p>Please make sure to update your devices!</p><p>Update Now: iOS 18.4.1 and macOS Sequoia 15.4.1 Address Actively Exploited Vulnerabilities </p><p><a href="https://www.macrumors.com/2025/04/16/ios-18-4-1-security-fixes/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">macrumors.com/2025/04/16/ios-1</span><span class="invisible">8-4-1-security-fixes/</span></a></p><p><a href="https://toot.majorshouse.com/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Apple</span></a> <a href="https://toot.majorshouse.com/tags/iOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iOS</span></a> <a href="https://toot.majorshouse.com/tags/macOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>macOS</span></a> <a href="https://toot.majorshouse.com/tags/Sequoia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Sequoia</span></a> <a href="https://toot.majorshouse.com/tags/Exploits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Exploits</span></a> <a href="https://toot.majorshouse.com/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerabilities</span></a> <a href="https://toot.majorshouse.com/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a> <a href="https://toot.majorshouse.com/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a> <a href="https://toot.majorshouse.com/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tech</span></a></p>
Tino Eberl<p>Nach dem drohenden Aus der <a href="https://mastodon.online/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE</span></a>-Liste startet die EU mit der eigenen Schwachstellendatenbank <a href="https://mastodon.online/tags/EUVD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EUVD</span></a>.</p><p>Die Plattform der der EU-<a href="https://mastodon.online/tags/Cybersicherheitsbeh%C3%B6rde" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersicherheitsbehörde</span></a> <a href="https://mastodon.online/tags/ENISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ENISA</span></a> soll laut NIS2-Richtlinie für mehr IT-Sicherheit in Europa sorgen.</p><p>Parallel arbeiten Initiativen an dezentralen und unabhängigen Lösungen. Eine mögliche Vertragsverlängerung durch die US-Behörde <a href="https://mastodon.online/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CISA</span></a> könnte den Dienst vorerst sichern.</p><p><a href="https://www.heise.de/news/Nach-drohendem-CVE-Aus-Schwachstellendatenbank-der-EU-geht-an-den-Start-10354324.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">heise.de/news/Nach-drohendem-C</span><span class="invisible">VE-Aus-Schwachstellendatenbank-der-EU-geht-an-den-Start-10354324.html</span></a></p><p><a href="https://mastodon.online/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersecurity</span></a> <a href="https://mastodon.online/tags/Sicherheitsl%C3%BCcken" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Sicherheitslücken</span></a> <a href="https://mastodon.online/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ITSecurity</span></a> <a href="https://mastodon.online/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Vulnerabilities</span></a> <a href="https://mastodon.online/tags/CVEFoundation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVEFoundation</span></a></p>