Kim Crawley 😷 (she/her)Cryptocurrency made enterprise ransomware a lot more common. Now LLMs make injection attacks child's play.
urlDNA.io 
Possible Phishing 🎣
on: ⚠️hxxps[:]//talktalkghfd[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a1dec893b77500008765cf6
#cybersecurity #phishing #infosec #urldna #scam #infosec
on: ⚠️hxxps[:]//talktalkghfd[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a1dec893b77500008765cf6
#cybersecurity #phishing #infosec #urldna #scam #infosec
TheHackerWire🟠 CVE-2026-43958 - High (7.8)
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crash...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43958/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🟠 CVE-2026-45281 - High (8.1)
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, with the knowledge of other users’ principal URL an attacker could possibly send a request to gai...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45281/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🟠 CVE-2026-45302 - High (8.2)
parse-nested-form-data is a tiny node module for parsing FormData by name into objects and arrays. Prior to version 1.0.1, parseFormData() walks bracket and dot-notation FormData field names into nested objects without filtering reserved property ...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45302/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🟠 CVE-2026-45545 - High (8.2)
Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1.0.0 to before 1.0.4, an authenticated attacker with access to the Tables app may be able to execu...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45545/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🟠 CVE-2026-47294 - High (8)
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47294/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
Shodan Safari
Possible Phishing 🎣
on: ⚠️hxxps[:]//ex-cmetamask-wallet-cdn[.]groovehq[.]com
🧬 Analysis at: https://urldna.io/scan/6a1dde873b77500008765ae5
#cybersecurity #phishing #infosec #urldna #scam #infosec
on: ⚠️hxxps[:]//ex-cmetamask-wallet-cdn[.]groovehq[.]com
🧬 Analysis at: https://urldna.io/scan/6a1dde873b77500008765ae5
#cybersecurity #phishing #infosec #urldna #scam #infosec
🟠 CVE-2026-7770 - High (8.8)
IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7770/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
