🔴 No Login Needed To Own Your Server

Hackers need zero credentials to hijack your entire server right now.

https://www.youtube.com/shorts/DKcU8AR01Rw

#cybersecurity #zeroday #infosec #hacking #dataprotection #cve #vulnerability #threatintel #security #redteam

fast16: il framework di cybersabotaggio pre-Stuxnet riemerso dai tool segreti NSA dei ShadowBrokers

https://insicurezzadigitale.com/fast16-il-framework-di-cybersabotaggio-pre-stuxnet-riemerso-dai-tool-segreti-nsa-dei-shadowbrokers/

🔴 New security advisory:

CVE-2026-34275 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-34275-oracle-e-biz-unauth-takeover

#InfoSec #ZeroDay #ThreatIntel

we're hacking PDFs again?

https://www.youtube.com/watch?v=WMZRHpq-0lk

#vulnerability #exploit #zeroday

🔴 New security advisory:

CVE-2026-6771 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-6771-firefox-mitigation-bypass-unauthenticated

#InfoSec #ZeroDay #ThreatIntel

Lukasz Olejnik (@lukOlejnik)

중국계 AI가 소프트웨어 취약점을 안정적으로 탐지하며 비용 효율적이라는 연구 결과가 소개됐다. 오픈웨이트 모델 Kimi K2.5를 Chrome 대상 에이전틱 프레임워크에 적용해 이전에 알려지지 않은 제로데이 10건을 찾아냈고, 이 중 2건은 치명적인 샌드박스 탈출 CVE였다.

https://x.com/lukOlejnik/status/2047324127338303942

#cybersecurity #opensource #agenticai #llm #zeroday

CISA just ordered federal agencies to patch a Microsoft Defender flaw actively exploited as a zero-day. The patch exists. The exploitation is real. The window between "known vulnerability" and "patched system" is exactly where attackers live.

Every day that gap stays open is a day too many. 🔍

#infosec #CVE #zeroday
https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-microsoft-defender-flaw-exploited-in-zero-day-attacks/

🟡 THREAT INTELLIGENCE

Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages

Vulnerability | MEDIUM

Apple has released out-of-band security updates for iPhone and iPad devices to fix a Notification Services flaw that could allow notifications marked...

Full analysis:
https://www.yazoul.net/news/article/apple-fixes-ios-flaw-that-let-fbi-recover-deleted-signal-messages

#InfoSec #ZeroDay #ThreatHunting

🔴 New security advisory:

CVE-2026-41679 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41679-paperclip-unauthenticated-remote-code-execution

#InfoSec #ZeroDay #ThreatIntel

Anthropic's Mythos Model Exposes Limited Capabilities

Anthropic's highly anticipated Mythos model, designed to proactively identify vulnerabilities, has been compromised - with a small group of individuals reportedly gaining unauthorized access to the preview through a third-party vendor environment. The incident has raised concerns about the model's limited capabilities to protect itself from…

https://osintsights.com/anthropics-mythos-model-exposes-limited-capabilities?utm_source=mastodon&utm_medium=social

#ZeroDay #Anthropic #MythosModel #ProjectGlasswing #ThirdpartyVendor