Zero-Click NTLM Patch Bypass (CVE-2025-50154)
A zero-click NTLM credential leak exploit bypasses Microsoft’s patch, exposing NTLM hashes and silently staging binaries on patched systems.
https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154/
#NTLM #credentialleak
Zero Click, One NTLM: Microsoft Security Patch Bypass (CVE-2025-50154)
Learn about CVE-2025-50154 and its risk of NTLM attacks and RCE even after Microsoft’s fix for CVE-2025-24054.
16 billion credentials exposed—from your favorite tech giants to government sites. This isn’t just another hack; it’s a wake-up call that proves our digital defenses may be outdated. How secure are you really?
https://thedefendopsdiaries.com/understanding-the-16-billion-credentials-leak-causes-and-consequences/
#credentialleak
#cybersecurity
#databreach
#infostealer
#passwordsecurity
New York Times source code stolen using exposed GitHub token
Internal source code and data belonging to The New York Times was leaked on the 4chan message board after being stolen from the company's GitHub repositories in January 2024, The Times confirmed to BleepingComputer.
Containerd Bug Exposes Cloud Account Credentials
The flaw (CVE-2020-15157) is located in the container image-pulling process.
kriware 
The DefendOps Diaries
Evostrix
smeg
ITSEC News