Alejandro A.

⚠️ Cisco IOS 0-Day RCE Vulnerability Actively Exploited in the Wild | Read more: https://lnkd.in/dmBj4_5p Cisco has disclosed a zero-day vulnerability, CVE-2025-20352, in its widely used IOS and IOS XE software, confirming it is being actively exploited in the wild. The flaw exists in the Simple Network Management Protocol (SNMP) subsystem and can allow a remote attacker to achieve remote code execution (RCE) or cause a denial-of-service (DoS) condition on vulnerable devices. The vulnerability is rooted in a stack overflow condition (CWE-121) within the SNMP subsystem of both Cisco IOS and IOS XE software. An attacker can trigger this flaw by sending a crafted SNMP packet over an IPv4 or IPv6 network to an affected device. #cybersecuritynews #vulnerability

588

17 comentarios

🚨 𝗨𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱𝗶𝗻𝗴 𝗗𝗗𝗼𝗦 𝗔𝘁𝘁𝗮𝗰𝗸𝘀: 𝗧𝗖𝗣 𝗦𝗬𝗡 𝗙𝗹𝗼𝗼𝗱 𝗘𝘅𝗽𝗹𝗮𝗶𝗻𝗲𝗱 A Distributed Denial of Service (DDoS) attack uses compromised devices to flood a website or server with excessive traffic, making it unavailable to legitimate users. One common technique is the TCP SYN Flood Attack, which exploits the 3-way handshake in the TCP protocol: 1️⃣ The client sends a SYN (synchronize) packet to the server. 2️⃣ The server responds with a SYN-ACK (synchronize-acknowledge) packet. 3️⃣ Normally, the client replies with an ACK, but in an attack, this step never happens, leaving the server with "half-open" connections and exhausted resources. Key Takeaway: DDoS attacks can cripple services if proper mitigation measures (like firewalls, intrusion detection, and rate limiting) are not in place. 🔔 Follow Cyber Threat Intelligence ® for more cybersecurity tips! #CyberSecurity #DDoS #NetworkSecurity #TCP #InfoSec #CyberThreats

91

7 comentarios

🚨 New CTI Labs: CVE-2025-53770 (ToolShell SharePoint RCE) 🚨 This critical zero-day vulnerability allows for a full, unauthenticated takeover of on-premise SharePoint servers and has already been added to the CISA KEV Catalog. With a public exploit now available, the threat is immediate. We've just launched two new CTI Labs giving teams hands-on experience with this exact threat from both sides of the attack. 🛡️ Defensive Lab: For System Admins, SOC Analysts, Incident Responders, and Threat Hunters to practice detection and response: https://hubs.ly/Q03yNqNm0 ⚔️ Offensive Lab: For Red Teamers, Penetration Testers, and Threat Hunters to understand and execute the exploit chain: https://hubs.ly/Q03yNq5w0 Prepare your teams for the real world. Get hands-on with CVE-2025-53770 today. #CTI #SharePointRCE #CVE

92

5 comentarios

CVE-2025-53770 (CVSS 9.8) and CVE-2025-53771 - also known as the SharePoint Zero Days - allow unauthenticated attackers to seize control of servers, steal cryptographic keys, and plant persistent backdoors. What started as 75 confirmed breaches has now grown to 400+ organizations worldwide, including major corporations and U.S. government agencies. If you run on-prem SharePoint, immediate mitigation is essential. 🔍 Explore key remediation strategies: https://xtra.li/4lPqP7L

37

1 comentario

How do you get to become a PNPT (Practical Network Penetration Tester) from the TCMS Academy coursework? Here's each step of the way and some optional "nice to haves" you can consider. 𝗢𝗽𝘁𝗶𝗼𝗻𝗮𝗹: 𝗙𝗿𝗲𝗲 𝗙𝘂𝗻𝗱𝗮𝗺𝗲𝗻𝘁𝗮𝗹𝘀 - Get your feet wet with free foundational courses we are happy to offer to the community. Right now, we've got Programming 100, Linux 100, Soft Skills for the Job Market, Practical Security Fundamentals, and Practical Help Desk. 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗘𝘁𝗵𝗶𝗰𝗮𝗹 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 - This is our most popular course, and we have designed it to serve as a one-stop-shop for getting started in offensive security. You don't need any prior experience before taking on PEH. 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗝𝘂𝗻𝗶𝗼𝗿 𝗣𝗲𝗻𝗲𝘁𝗿𝗮𝘁𝗶𝗼𝗻 𝗧𝗲𝘀𝘁𝗲𝗿 - The counterpart to the PNPT, once you've completed PEH you can move on to the PJPT exam. This is an entry-level pentesting exam that will help you build confidence. 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗣𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲 𝗘𝘀𝗰𝗮𝗹𝗮𝘁𝗶𝗼𝗻 - Learn how to perform lateral movement in a Windows environment, which you will undoubtedly need as a pentester. 𝗟𝗶𝗻𝘂𝘅 𝗣𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲 𝗘𝘀𝗰𝗮𝗹𝗮𝘁𝗶𝗼𝗻 - Once you complete Windows PrivEsc, move on to Linux! Discover several techniques that are key to know when testing Linux OS. 𝗢𝗦𝗜𝗡𝗧 𝗙𝘂𝗻𝗱𝗮𝗺𝗲𝗻𝘁𝗮𝗹𝘀 - Every pentester needs to know how to do recon, right? This course from Heath Adams is an exceptional intro to all things open source intelligence. 𝗢𝗣𝗧𝗜𝗢𝗡𝗔𝗟: 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗢𝗦𝗜𝗡𝗧 𝗥𝗲𝘀𝗲𝗮𝗿𝗰𝗵 𝗣𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹 (𝗣𝗢𝗥𝗣) - If you find you really like OSINT, we'd invite you to consider the PORP. It's not mandatory for the PNPT, but it can prove useful in finessing your OSINT abilities. 𝗣𝗡𝗣𝗧 - Finally, you are ready to face the PNPT with the skills you need to claim victory. You will need to practically display your prowess in an external and internal penetration test. At this point though, you should be 𝘮𝘰𝘳𝘦 than prepared. Ready? Let's get started: https://lnkd.in/gsPWPnfX

107

10 comentarios

🚨 New #LockBit Variant Tagets ESXi and Linux: Critical Infrastructure at Risk. In September 2025, the LockBit group released LockBit 5.0, a new version of its #ransomware. The new variant introduces stronger obfuscation, flexible configurations, and advanced anti-analysis techniques. ⚠️ The most alarming development is the expansion to #Linux and #VMware ESXi, signaling a clear focus on server environments and critical infrastructure. Ransomware has shifted from targeting endpoints to directly disrupting core infrastructure. ❗️ A single intrusion can cause outages with severe financial and reputational impact. LockBit 5.0 comes in three builds, each optimized for its target OS. 🚨 VMware ESXi: The most critical new variant, a dedicated encryptor for hypervisors that can simultaneously disable all VMs on a host. Its CLI resembles the other builds but adds VM datastore and config targeting. See live execution: https://lnkd.in/eVy9fwfu 📌 Windows: Main variant. Runs with DLL reflection, supports both GUI and console, encrypts local and network files, removes VSS shadow copies, stops services, clears event logs, and drops ransom notes linking to live chat support. See live execution: https://lnkd.in/efDmAAUQ 📌 Linux: Console-based, replicates Windows functionality with mount point filters, post-encryption disk wiping, and anti-analysis checks such as geolocation restrictions and build expiry. See live execution: https://lnkd.in/erQugDNg 🔍 Use these TI Lookup search queries to enrich detection logic with live threat data: ESXi Lockbit 5.0: https://lnkd.in/ehTxKDS2 Linux Lockbit 5.0: https://lnkd.in/ekchCh39 Windows Lockbit 5.0: https://lnkd.in/e4mtH7bF 🚀 Strengthen resilience, protect business continuity through proactive security with #ANYRUN. #ExploreWithANYRUN #CybersecurityAwarenessMonth

99

1 comentario

Microsoft has released its September security updates. This included: • 81 vulnerabilities patched. • 0 vulnerabilities with evidence of exploitation. • 9 'Critical' rated. The ASD’s ACSC encourages all users to apply the available patch updates ASAP👉 https://lnkd.in/dHpTjmk8

91

1 comentario

[TRAINING] Attacking Web Applications 🏴 Web applications represent a large part of the attack surface exposed on the Internet. With technology constantly evolving, new vulnerabilities and exploitation methods continue to emerge, making intrusion stages more complex. To address this, our ninjas have designed an intensive 5-day training course based on their experience in #pentesting. What you will learn: ▪️ Understand the security mechanisms of modern web applications. ▪️ Refine your intrusion methods to exploit the most complex vulnerabilities. ▪️ Master the specifics of languages and frameworks such as Java, PHP, Python, and ASP.NET. This 35-hour training course includes more than 30 practical exercises to help you quickly develop your skills. 🗓️ 17 to 21 November 2025 💰 €4500 per person 🎯 Penetration testers and developers with experience in web intrusion techniques ℹ️ https://lnkd.in/evdSDSAk Ready to take your skills to the next level? Join us and become an expert in web application auditing. 🔗 To find out more and register, contact us at [email protected]

31