Daily Dose of Dark Web Informer - 28th of May 2025
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
Aggregator
OneDrive File Picker Flaw Gives Apps Full Access to User Drives
10 months ago
A recent investigation by cybersecurity researchers at Oasis Security has revealed a data overreach in how Microsoft’s OneDrive…
Waqas
Threat Attack Daily - 28th of May 2025
10 months ago
Threat Attack Daily - 28th of May 2025
Dark Web Informer - Cyber Threat Intelligence
Ransomware Attack Update for the 28th of May 2025
10 months ago
Ransomware Attack Update for the 28th of May 2025
Dark Web Informer - Cyber Threat Intelligence
Windows 11 KB5058499 update rolls out new Share and Click to Do features
10 months ago
Microsoft has released the KB5058499 preview cumulative update for Windows 11 24H2 with forty-eight new features or changes, with many gradually rolling out, such as the new Windows Share feature and tje Click to Do Preview. [...]
Lawrence Abrams
APT41 malware abuses Google Calendar for stealthy C2 communication
10 months ago
The Chinese APT41 hacking group uses a new malware named 'ToughProgress' that abuses Google Calendar for command-and-control (C2) operations, hiding malicious activity behind a trusted cloud service. [...]
Bill Toulas
Play
10 months ago
You must login to view this content
cohenido
Play
10 months ago
You must login to view this content
cohenido
Czech Government Attributes Foreign Ministry Hack to China
10 months ago
APT31 Compromised the Czech Foreign Affairs Ministry in 2022
The Czech government on Wednesday said Chinese state hackers stole sensitive declassified information from the republic's foreign ministry as part of a years-long espionage campaign. Czech Ministry of Foreign Affairs attributed the hack to a Chinese nation-state group tracked as APT31.
The Czech government on Wednesday said Chinese state hackers stole sensitive declassified information from the republic's foreign ministry as part of a years-long espionage campaign. Czech Ministry of Foreign Affairs attributed the hack to a Chinese nation-state group tracked as APT31.
PumaBot Malware Targets Linux IoT Devices
10 months ago
Stealthy Malware Installs Cryptomining Software
A botnet targeting Internet of Things devices works by brute forcing credentials and downloading cryptomining software. Researchers call the botnet "PumaBot," since its malware checks for the string "Pumatronix," the name of a Brazilian manufacturer of surveillance and traffic camera systems.
A botnet targeting Internet of Things devices works by brute forcing credentials and downloading cryptomining software. Researchers call the botnet "PumaBot," since its malware checks for the string "Pumatronix," the name of a Brazilian manufacturer of surveillance and traffic camera systems.
CISA's Leadership Exodus Continues, Shaking Local Offices
10 months ago
'It's Just Totally Destabilizing,' Staffers Say Amid CISA's Leadership Exodus
An ongoing exodus of top officials and senior leadership at the Cybersecurity and Infrastructure Security Agency's regional offices has left staffers increasingly worried about a potential major shift in mission and continued cuts to staff and spending.
An ongoing exodus of top officials and senior leadership at the Cybersecurity and Infrastructure Security Agency's regional offices has left staffers increasingly worried about a potential major shift in mission and continued cuts to staff and spending.
A Peek Behind the Claude Curtain
10 months ago
Researcher Analyzes System Prompts to Show How New Claude Models Work
System-level instructions guiding Anthropic's new Claude 4 models tell it to skip praise, avoid flattery and get to the point, said independent AI researcher Simon Willison, breaking down newly released and leaked system prompts for the Claude Opus 4 and Sonnet 4 models.
System-level instructions guiding Anthropic's new Claude 4 models tell it to skip praise, avoid flattery and get to the point, said independent AI researcher Simon Willison, breaking down newly released and leaked system prompts for the Claude Opus 4 and Sonnet 4 models.
Safepay
10 months ago
You must login to view this content
cohenido
Safepay
10 months ago
You must login to view this content
cohenido
Questions mount as Ivanti tackles another round of zero-days
10 months ago
The besieged security vendor maintains the latest exploited vulnerabilities in its products are entirely linked to unspecified security issues in open-source libraries. Some researchers aren’t buying it.
The post Questions mount as Ivanti tackles another round of zero-days appeared first on CyberScoop.
Matt Kapko
Hundreds of Web Apps Have Full Access to Microsoft OneDrive Files
10 months ago
Researchers at Oasis Security say the problem has to do with OneDrive File Picker having overly broad permissions.
Jai Vijayan, Contributing Writer
GIT X IITB Trust Lab CTF
10 months ago
Name: GIT X IITB Trust Lab CTF (an GITxIITB TL CTF event.)
Date: May 28, 2025, 7:23 a.m. — 28 May 2025, 07:23 UTC [add to calendar]
Format: Jeopardy
On-site
Location: KLS GIT, Belagavi, Karnataka, India
Offical URL: https://unstop.com/p/git-x-iitb-ctf-kls-git-1461610
Rating weight: 0.00
Event organizers: fs0cie1yᶦⁿᵈᶦᵃ
Date: May 28, 2025, 7:23 a.m. — 28 May 2025, 07:23 UTC [add to calendar]
Format: Jeopardy
On-site
Location: KLS GIT, Belagavi, Karnataka, India
Offical URL: https://unstop.com/p/git-x-iitb-ctf-kls-git-1461610
Rating weight: 0.00
Event organizers: fs0cie1yᶦⁿᵈᶦᵃ
CISA Issues SOAR, SIEM Implementation Guidance
10 months ago
Among the recommendations, organizations should conduct thorough testing and manage costs, which can be hefty, before implementing the platforms.
Arielle Waldman
Microsoft Entra Design Lets Guest Users Gain Azure Control, Researchers Say
10 months ago
Researchers reveal how guest accounts with billing roles can create Azure subscriptions inside external tenants, gaining unexpected Owner access and opening hidden privilege risks.
Waqas
CVE-2022-32788 | Apple iOS/iPadOS up to 15.5 AppleAVD buffer overflow (HT213346)
10 months ago
A vulnerability was found in Apple iOS and iPadOS up to 15.5. It has been rated as critical. Affected by this issue is some unknown functionality of the component AppleAVD. The manipulation leads to buffer overflow.
This vulnerability is handled as CVE-2022-32788. The attack may be launched remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
vuldb.com