Vincent Monroux

🚨 Oracle just rushed a patch for CVE-2025-61882 — a 9.8 critical flaw in E-Business Suite already exploited by Cl0p in live data theft attacks. The zero-day lets attackers seize control without a username or password. Experts warn many may already be breached. Details here ↓ https://lnkd.in/gifXEzUq

269

3 commentaires

The Q3 2025 Issue of the FreeBSD Journal is here! This edition focuses on Embedded FreeBSD and features articles covering: - Starting Firewall Development: Interview with Igor Ostapenko - FreeBSD, Home Assistant, ant rtl_433 - Writing Effective Bug Reports - Implementing a Quantum-Safe Website on FreeBSD And much more! Read it here https://buff.ly/to25H4h #FreeBSD #FreeBSDJournal

197

2 commentaires

🛡 𝟭𝟱 𝗙𝗿𝗲𝗲 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗼𝗼𝗹𝘀 𝗘𝘃𝗲𝗿𝘆 𝗣𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹 𝗦𝗵𝗼𝘂𝗹𝗱 𝗞𝗻𝗼𝘄 🛡 Cybersecurity doesn’t always require expensive tools — many powerful, open-source solutions are freely available to help you scan, detect, test, and secure systems. 💻 From the List: 🔹 Nmap – Network scanning 🔹 Wireshark – Packet analysis 🔹 Metasploit – Exploitation framework 🔹 Burp Suite – Web security testing 🔹 Autopsy – Digital forensics These tools cover everything from penetration testing and vulnerability scanning to intrusion detection and password cracking — all without breaking the budget. 💡 Which one is your go-to? 🔔 Follow Ethical Hackers Academy ® for more cybersecurity tips! #CyberSecurity #EthicalHacking #OpenSource #InfoSec #PenTest #VulnerabilityManagement

1 657

47 commentaires

🔍 𝟯𝟬 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 𝗘𝘃𝗲𝗿𝘆 𝗔𝗻𝗮𝗹𝘆𝘀𝘁 𝗦𝗵𝗼𝘂𝗹𝗱 𝗞𝗻𝗼𝘄 🧠 Whether you're threat hunting, conducting red team recon, or responding to incidents, having the right search engines in your toolbox is essential. This curated list from Cyber Threat Intelligence includes tools to search for: 🕵️‍♂️ Leaked credentials – Dehashed 🌐 DNS data – Security Trails, DNSDumpster 💥 Vulnerabilities – ExploitDB, Vulners, Packet Storm 🎯 Threat intelligence – Pulsedive, FullHunt, AlienVault, Onyphe 🔍 Google dorks – DorkSearch 📡 Devices on the internet – Shodan, Censys, GreyNoise, Netlas 📨 Email intel – Hunter 📂 Source code & Git repos – SearchCode, Grep App 🌐 Archived content – WayBackMachine … and many more. 🛡️ This is your go-to cheat sheet for powerful cybersecurity reconnaissance and research. 💬 Which tools are your favorites, or what would you add to this list? 🔔 Follow Cyber Threat Intelligence ® for more cybersecurity tips! #CyberSecurity #ThreatIntel #ReconTools #CTI #OSINT #RedTeam #InfoSec #VulnerabilityManagement #CyberTools #CyberThreatIntelligence #SecurityAnalyst #SOCtools #CyberAwareness

1 485

34 commentaires

🚨 𝗙𝗼𝗿𝘁𝗶𝗻𝗲𝘁 𝗦𝗦𝗟 𝗩𝗣𝗡 𝗙𝗮𝗰𝗲𝘀 𝗖𝗼𝗼𝗿𝗱𝗶𝗻𝗮𝘁𝗲𝗱 𝗕𝗿𝘂𝘁𝗲 𝗙𝗼𝗿𝗰𝗲 𝗔𝘁𝘁𝗮𝗰𝗸 𝗳𝗿𝗼𝗺 𝟳𝟴𝟬 𝗜𝗣𝘀 🚨 | Read more: https://lnkd.in/gHmEYN7c On August 3, 2025, Fortinet SSL VPN infrastructure was hit by its largest single-day brute force campaign in months — over 780 unique IPs took part. GreyNoise researchers spotted two distinct attack waves, with traffic shifting from FortiOS to FortiManager FGFM profiles, pointing to targeted probing for vulnerabilities. Some malicious traffic even originated from residential ISPs, hinting at compromised home networks or proxy abuse. With 80% of similar campaigns followed by CVE disclosures within six weeks, organizations using Fortinet should act now — enhance monitoring, block identified IP ranges, and stay alert for vendor updates. #CyberSecurity #Fortinet #VPN #ThreatIntelligence #Infosec #CVE #NetworkSecurity #BruteForceAttack

43

5 commentaires

A bioluminescent hacking turtle 🐢⚡️ - via Vicarius CVE‑2025‑9074 is a container escape vulnerability in Docker Desktop for both Windows and macOS. This flaw permits local Linux containers to access the Docker Engine API without authentication, enabling attackers to create new containers with arbitrary host mounts. Recommended actions: ✅ Update Docker Desktop to version 4.44.3 or later, where this vulnerability has been patched. ✅ Ensure that the Docker Engine API isn't inadvertently exposed via TCP, especially within Docker-in-Docker or SSRF-susceptible setups. 👨‍🔬 Vicarius Labs created a mitigation script to apply temporary protection, blocking insecure access to the Docker Engine API ->> https://lnkd.in/gdpUHkWs Thanks to Philippe Dugre and Felix Boulet for the discovery and research of this vulnerability.

58

2 commentaires

🚨 New #LockBit Variant Tagets ESXi and Linux: Critical Infrastructure at Risk. In September 2025, the LockBit group released LockBit 5.0, a new version of its #ransomware. The new variant introduces stronger obfuscation, flexible configurations, and advanced anti-analysis techniques. ⚠️ The most alarming development is the expansion to #Linux and #VMware ESXi, signaling a clear focus on server environments and critical infrastructure. Ransomware has shifted from targeting endpoints to directly disrupting core infrastructure. ❗️ A single intrusion can cause outages with severe financial and reputational impact. LockBit 5.0 comes in three builds, each optimized for its target OS. 🚨 VMware ESXi: The most critical new variant, a dedicated encryptor for hypervisors that can simultaneously disable all VMs on a host. Its CLI resembles the other builds but adds VM datastore and config targeting. See live execution: https://lnkd.in/eVy9fwfu 📌 Windows: Main variant. Runs with DLL reflection, supports both GUI and console, encrypts local and network files, removes VSS shadow copies, stops services, clears event logs, and drops ransom notes linking to live chat support. See live execution: https://lnkd.in/efDmAAUQ 📌 Linux: Console-based, replicates Windows functionality with mount point filters, post-encryption disk wiping, and anti-analysis checks such as geolocation restrictions and build expiry. See live execution: https://lnkd.in/erQugDNg 🔍 Use these TI Lookup search queries to enrich detection logic with live threat data: ESXi Lockbit 5.0: https://lnkd.in/ehTxKDS2 Linux Lockbit 5.0: https://lnkd.in/ekchCh39 Windows Lockbit 5.0: https://lnkd.in/e4mtH7bF 🚀 Strengthen resilience, protect business continuity through proactive security with #ANYRUN. #ExploreWithANYRUN #CybersecurityAwarenessMonth

96

1 commentaire

[TRAINING] Attacking Web Applications 🏴 Web applications represent a large part of the attack surface exposed on the Internet. With technology constantly evolving, new vulnerabilities and exploitation methods continue to emerge, making intrusion stages more complex. To address this, our ninjas have designed an intensive 5-day training course based on their experience in #pentesting. What you will learn: ▪️ Understand the security mechanisms of modern web applications. ▪️ Refine your intrusion methods to exploit the most complex vulnerabilities. ▪️ Master the specifics of languages and frameworks such as Java, PHP, Python, and ASP.NET. This 35-hour training course includes more than 30 practical exercises to help you quickly develop your skills. 🗓️ 17 to 21 November 2025 💰 €4500 per person 🎯 Penetration testers and developers with experience in web intrusion techniques ℹ️ https://lnkd.in/evdSDSAk Ready to take your skills to the next level? Join us and become an expert in web application auditing. 🔗 To find out more and register, contact us at [email protected]

29

🚨 Critical Linux Vulnerability – CVE-2025-8067 🚨 A high-severity flaw in the UDisks daemon (CVSS 8.5) could allow local attackers to read sensitive memory or crash the service. Affects RHEL 6–10 (udisks2, libudisks2, iscsi, lsm, lvm2) Exploitable via a crafted D-BUS call No active exploitation yet, but risk of local privilege escalation is real ✅ Patch now via Red Hat Customer Portal (RHEL 7–10). 🔒 Limit D-BUS access, monitor anomalies, and enable SELinux/AppArmor for extra protection. Stay ahead of threats — act before exploits emerge. #ThreatMon #Linux #CVE20258067 #CyberSecurity #RedHat

23