Cisco got hit twice in the same week.

A China-linked zero-day gave attackers root access to email security appliances.
Days later, millions of VPN login attempts slammed exposed edge systems.

https://blackoutvpn.au/blog/cisco-two-threat-campaigns-december

#infosec #cybersecurity #netsec #privacy #zeroday

How Two Threat Campaigns Targeted Cisco in December

Two unrelated attacks hit Cisco systems days apart, exposing zero-day risk and persistent VPN credential failures

Blackout VPN

PH4NTXM 1.3 — RELEASE DATE ANNOUNCEMENT

PH4NTXM 1.3 "Zero Point" is locked in and scheduled for release on 12 December.

This update delivers the new session-identity indicator, expanded global identity randomization, and all the underlying stability work that ties it together. Final polishing is underway — the build lands on the 12th.

#PH4NTXM #Linux #Privacy #Freedom #Debian #Pentest #Security #CyberSecurity #Hacking #Hack #FOSS #OpenSource #Tech #Technology #Future #InfoSec #OpSec #NetSec

🔎 CVE-2025-14141: HIGH severity buffer overflow in UTT 进取 520W (v1.7.7-180627) via /goform/formArpBindConfig. No patch; public exploit available. Isolate devices, restrict access, monitor traffic. https://radar.offseq.com/threat/cve-2025-14141-buffer-overflow-in-utt-520w-c6cc8954 #OffSeq #Vuln #NetSec #Exploit

Marquis Software Solutions has reported a ransomware incident affecting data from 74 banks and credit unions. Attackers accessed the network through a SonicWall firewall, obtaining files containing personal details. No confirmed misuse so far.

Marquis has added additional controls: MFA everywhere, credential rotation, geo-IP filtering, VPN lock-out policies, and increased firewall logging.

Source: https://www.bleepingcomputer.com/news/security/marquis-data-breach-impacts-over-74-us-banks-credit-unions/

💬 What’s your take on VPN/firewall-based access paths still being so commonly exploited?
👍 Follow us for more unbiased security reporting.

#InfoSec #CyberSecurity #Ransomware #DataBreach #ThreatIntel #NetSec #FinancialSecurity

Words cannot describe how happy I am that Digital Ocean now allows descriptions for trusted IPs.

#netsec #iaas

Proton VPN expands its network by adding 800 new global exit nodes, funded directly by early Black Friday sales. The company reiterates its independence from investors, keeping its privacy-focused mission intact.
Full details: https://www.technadu.com/proton-vpn-expands-network-using-early-black-friday-revenue/613838/

Follow us for more security-focused updates.

#infosec #cybersecurity #vpn #protonvpn #privacy #securitynews #netsec #datasecurity #blackfriday2025

PH4NTXM 1.2 — Build & Release

Dropping November 17.

A date that carries weight — the anniversary of the Polytechnic Uprising, when students stood up to a dictatorship and refused to back down.

PH4NTXM was born on a ThinkPad X220 — carved out of metal, intent, and pure stubborn will.

#PH4NTXM #Linux #Privacy #Freedom #Debian #Pentest #Security #CyberSecurity #Hacking #Hack #FOSS #OpenSource #Tech #Technology #Future #InfoSec #OpSec #NetSec #Anon #DigitalSovereignty #CyberOps #RedTeam #Defense

Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk

Learn how the JFrog Security research team discovered and disclosed CVE-2025-11953 which poses a threat to developers using the popular React Native CLI.

JFrog
4/4… 🧩 DNSCheck.Tools gives a quick, deep scan on your DNS requests—vital to spot leaks that may expose your online activity. See which servers know what you’re doing. Keep DNS private: https://dnscheck.tools/ #NetSec #ProtectYourData #DNS 🔎
dnscheck.tools - check your dns resolvers

A tool to test for DNS leaks, DNSSEC validation, and more

How does Internet Censorship work and how can we detect/measure it? We surveyed existing methodology (incl. datasets/measurement platforms and human aspects) in a paper published in Computers & Security. I am very grateful for the joint work with my co-authors Simon Volpert, Sebastian Zillien, Julia Lenz, Philip Rünz, and @lucacav
#censorship #internet #internetcensorship #infosec #netsec

https://www.sciencedirect.com/science/article/pii/S0167404825004213