Mastodawn

Updated breach: A further 4M email addresses and 9M passwords from the StealC malware operation targeted by the 4th wave of Operation Endgame have been added to HIBP. 64% of the combined corpus was already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/OperationEndgame4

Have I Been Pwned: Operation Endgame 4.0 Data Breach

On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. Coordinated by international law enforcement agencies with support from Europol and Eurojust, the operation remediated almost 15,000 compromised websites and disrupted more than 100 servers and domains used to distribute malware. Authorities also provided HIBP with 154k impacted email addresses and more than half a million previously unseen passwords.

Have I Been Pwned

Show thread

decio 1d ago

Melancholic post-everything liberty, like a seagull flying from the sea to the Alps Listening Session

#NowSpinning

Yes by Vanessa Van Basten

#vinyl
👇
https://subsoundrecords.bandcamp.com/album/yes

🤘

#alternativerock #postmetal #postrock #Italy

( #Bandcamp )

decio 1d ago

Bobe'bot on security 1d ago

Opération Endgame, acte II : trois infrastructures majeures du cybercrime-as-a-service démantelées. Ce qui est notable, c'est la cible : pas les opérateurs finaux, mais les couches intermédiaires — loaders, droppers, botnets. Attaquer la supply chain du crime, c'est une stratégie plus durable qu'une arrestation isolée. À suivre dans la…
https://www.numerama.com/cyberguerre/2285137-operation-endgame-comment-les-autorites-ont-demantele-trois-piliers-du-cybercrime-as-a-service.html

Opération Endgame : comment les autorités ont démantelé trois piliers du cybercrime-as-a-service

Des centaines de serveurs mis hors ligne, 27 millions d'identifiants récupérés, 41 millions d'euros en crypto gelés : l'opération Endgame vient de frapper deux des outils les plus répandus dans l'écosystème cybercriminel. Le 24 juin 2026, Europol a annoncé une nouvelle vague de l'opération Endgame, déjà connue pour

Numerama

Show thread

decio 1d ago

[related]
"La Poste mettra fin à sa plateforme de dossier électronique du patient fin 2026"

"La Poste cessera d’exploiter sa plateforme de dossier électronique du patient (DEP) à la fin de l’année 2026 afin de se concentrer sur le futur dossier électronique de santé (DES). Cette décision s’explique par le recul de la demande pour le DEP actuel. Environ 70'000 dossiers devront être migrés et jusqu’à 37 postes à plein temps pourraient être supprimés."
👇
https://www.ictjournal.ch/news/2026-06-25/la-poste-mettra-fin-a-sa-plateforme-de-dossier-electronique-du-patient-fin-2026

La Poste mettra fin à sa plateforme de dossier électronique du patient fin 2026

La Poste cessera d’exploiter sa plateforme de dossier électronique du patient (DEP) à la fin de l’année 2026 afin de se concentrer sur le futur dossier électronique de santé (DES). Cette décision s’explique par le recul de la demande pour le DEP actuel. Environ 70'000 dossiers devront être migrés et jusqu’à 37 postes à plein temps pourraient être supprimés.

decio 4d ago

The Shadowserver Foundation 4d ago

Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV. 4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US

https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48907%2B&data_set=count&scale=log&auto_update=on

Raw IP data shared in our Vulnerable HTTP reporting https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ tagged 'cve-2026-48907' filtered by network/constituency

Dashboard Tree Map view: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48907%2B&data_set=count&scale=log&auto_update=on

Patch info: https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites

World map · General statistics · The Shadowserver Foundation

decio 4d ago

swissinfo (RSS 🤖 )5d ago

🇬🇧 Google’s business dealings with Israel: Swiss servers raise sensitive questions
https://www.swissinfo.ch/eng/neutrality/googles-business-dealings-with-israel-the-servers-in-switzerland-raise-sensitive-questions/91628399?utm_source=multiple&utm_campaign=swi-rss&utm_medium=rss&utm_content=o

Google’s business dealings with Israel: Swiss servers raise sensitive questions

Google provides Israel with cloud services that are co-developed in Switzerland and may also be used for military purposes.

www.swissinfo.ch

decio 4d ago

Hacker News 50 4d ago

Steam Machine

Link: https://store.steampowered.com/hardware/steammachine
Discussion: https://news.ycombinator.com/item?id=48632884

Steam Machine

Your games on the big screen

decio 5d ago

abuse.ch

5d ago

Our platforms were recently targeted by a large-scale web scraping operation originating from devices that are apparently participating in residential proxy networks 🏘️ 🖥️ . The vast majority of these requests were successfully blocked by our existing mitigations 🛑 . However, the sheer volume of traffic caused temporary disruptions to both the MalwareBazaar and URLhaus platforms ⚠️

To put the scale into perspective, our web platforms typically handle approximately 1,500 requests per second (excluding traffic to our community API and commercial APIs). During this incident, the scraping operation leveraged more than 135,000 unique IP addresses, most of which could be identified as nodes in residential proxy networks 🔍

The offender attempted to remain undetected by sending very few requests (less than 5) per IP address to the platforms 🕵

Below are the top networks sourcing this traffic (by unique IPs):

2,961 AS25019 SAUDINETSTC 🇸🇦
1,995 AS206206 KNET 🇮🇶
1,984 AS9121 TTNet 🇹🇷
1,954 AS3215 Orange 🇫🇷
1,871 AS12322 PROXAD 🇫🇷
1,550 AS5410 BOUYGTEL-ISP 🇫🇷
1,531 AS37705 TOPNET 🇹🇳
1,413 AS8193 BRM-AS 🇺🇿

We are sharing details of the involved IPs, along with the relevant timestamps, here for your awareness ⤵️

https://raw.githubusercontent.com/abusech/misc/refs/heads/main/2026-06-22_Residential-Proxy-Scraping-IPs.csv

decio 5d ago

Adfichter Jun 20

How Google Switzerland works for Israel

The tech company advises the Israeli government from Zurich and responds to inquiries from its armed forces.

Now, the authorities are taking action.

https://www.republik.ch/2026/06/20/how-google-switzerland-works-for-israel

How Google Switzerland works for Israel

The tech company advises the Israeli government from Zurich. Now, the authorities are taking action.

Republik

decio 6d ago

meteo (dark mode)6d ago

Evening 21. Jun – Tᴇᴍᴘ

🇫🇷▪️▪️▪️▪️▪️🟧🟧🟨▪️▪️🇩🇪
▪️▪️▪️🟥🥵🟥🥵🟧🟨🟥▪️🇦🇹
▪️▪️🟨🟨🟥🟥🥵🟨🟥🟥▪️▪️
▪️🟧🟧🟨🥵🟧🟥🥵🟩🟩🟩🟩
🟨🟧🟨🟨🟩🟨🟩🟨🟩🟩🟩▪️
🟥▪️🥵🟥🥵🥵🟧🥵🥵▪️▪️▪️
▪️▪️▪️🟧🟩🟩▪️▪️🥵▪️▪️🇮🇹

🥵 29.7–33.2 °C
🟥 28.5–29.7
🟧 27.9–28.5
🟨 24.4–27.9
🟩 <24.4

whoami	https://decio.ch/about/
$localization	fr-🇨🇭 $lang(FR - IT🤌 - EN)
signal	decio.10
pixelfed	https://pixelfed.social/decio
fil de veille infosec FR	https://cyberveille.ch
key	https://keyoxide.org/aspe:keyoxide.org:G7LSZRRNGQKLDMVZQPMCPRD364