toad.social

Lenin alevski 🕵️💻New Open-Source Tool Spotlight 🚨🚨🚨Pivotnacci is a toolkit for network pivoting in pentesting. It automates SOCKS proxies, SSH tunnels, and port forwards, making lateral movement more efficient during red team operations. Great for complex multi-hop environments. <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/PenTesting" class="mention hashtag" rel="nofollow noopener" target="_blank">#PenTesting</a>🔗 Project link on <a href="https://infosec.exchange/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitHub</a> 👉 <a href="https://github.com/blackarrowsec/pivotnacci" rel="nofollow noopener" translate="no" target="_blank">https://github.com/blackarrowsec/pivotnacci</a><a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Software" class="mention hashtag" rel="nofollow noopener" target="_blank">#Software</a> <a href="https://infosec.exchange/tags/Technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#Technology</a> <a href="https://infosec.exchange/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a> <a href="https://infosec.exchange/tags/CTF" class="mention hashtag" rel="nofollow noopener" target="_blank">#CTF</a> <a href="https://infosec.exchange/tags/Cybersecuritycareer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecuritycareer</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#blueteam</a> <a href="https://infosec.exchange/tags/purpleteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#purpleteam</a> <a href="https://infosec.exchange/tags/tips" class="mention hashtag" rel="nofollow noopener" target="_blank">#tips</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a>— ✨ 🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

Shodan SafariASN: AS262199 Location: Antiguo Cuscatlán, SV Added: 2025-07-28T04:11<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

nemo™ 🇺🇦⚠️ Python developers are being targeted by a sophisticated phishing scam! Attackers spoof PyPI with a fake site (pypj.org) to steal login credentials via "email verification" requests. Never click suspicious links; always verify by visiting PyPI.org directly! Stay safe 👉 <a href="https://www.techradar.com/pro/security/python-devs-targeted-with-dangerous-phishing-attacks-heres-how-to-stay-safe" rel="nofollow noopener" translate="no" target="_blank">https://www.techradar.com/pro/security/python-devs-targeted-with-dangerous-phishing-attacks-heres-how-to-stay-safe</a> <a href="https://mas.to/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mas.to/tags/Phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Phishing</a> <a href="https://mas.to/tags/PythonDev" class="mention hashtag" rel="nofollow noopener" target="_blank">#PythonDev</a> <a href="https://mas.to/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> <a href="https://mas.to/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> 🐍🔒 <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a>

nemo™ 🇺🇦🚨 New research shows spikes in malicious activity like scanning & brute-forcing often precede new CVEs by up to 6 weeks—80% of cases! Attackers target older flaws to map out next moves. Vigilance & proactive defense are key. 🛡️🔍 <a href="https://mas.to/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mas.to/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://mas.to/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a> <a href="https://mas.to/tags/ThreatIntel" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatIntel</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a> Read more: <a href="https://www.bleepingcomputer.com/news/security/spikes-in-malicious-activity-precede-new-cves-in-80-percent-of-cases/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/spikes-in-malicious-activity-precede-new-cves-in-80-percent-of-cases/</a>

nemo™ 🇺🇦🚨 New social engineering alert: <a href="https://mas.to/tags/ClickFix" class="mention hashtag" rel="nofollow noopener" target="_blank">#ClickFix</a> tricks users into pasting malicious code from the browser clipboard into their device terminal, leading to malware like RATs and stealers. Stay vigilant and protect your browser! 🛡️🔐 Read more: <a href="https://www.bleepingcomputer.com/news/security/inside-a-real-clickfix-attack-how-this-social-engineering-hack-unfolds/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/inside-a-real-clickfix-attack-how-this-social-engineering-hack-unfolds/</a> <a href="https://mas.to/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mas.to/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://mas.to/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a>

nemo™ 🇺🇦🚨 Microsoft reveals Russian hackers (Secret Blizzard) using ISP-level AiTM attacks to spy on embassies in Moscow 🇷🇺🕵️‍♂️. They deploy ApolloShadow malware disguised as Kaspersky antivirus to maintain long-term access 🔐. High alert for diplomats relying on local ISPs! <a href="https://mas.to/tags/CyberEspionage" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberEspionage</a> <a href="https://mas.to/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://mas.to/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Russia</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a> 🔗 <a href="https://www.bleepingcomputer.com/news/security/microsoft-russian-hackers-use-isp-access-to-hack-embassies-in-aitm-attacks/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/microsoft-russian-hackers-use-isp-access-to-hack-embassies-in-aitm-attacks/</a>

Shodan SafariASN: AS23650 Location: Zhenjiang, CN Added: 2025-07-27T00:26<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

gtbarryHundreds of registered data brokers ignore user requests around personal dataresearchers exercised their rights under the California Consumer Privacy Act by contacting all registered data brokers and requesting details about the t data the companies had collected on them. Of the 543 companies contacted, 40% failed to respond in any way, showing “rampant noncompliance” among the registered brokers. <a href="https://mastodon.social/tags/CCPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#CCPA</a> <a href="https://mastodon.social/tags/data" class="mention hashtag" rel="nofollow noopener" target="_blank">#data</a> <a href="https://mastodon.social/tags/bigdata" class="mention hashtag" rel="nofollow noopener" target="_blank">#bigdata</a> <a href="https://mastodon.social/tags/databrokers" class="mention hashtag" rel="nofollow noopener" target="_blank">#databrokers</a> <a href="https://mastodon.social/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://mastodon.social/tags/technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#technology</a> <a href="https://mastodon.social/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a><a href="https://cyberscoop.com/data-brokers-california-ccpa-non-compliance-privacy/" rel="nofollow noopener" translate="no" target="_blank">https://cyberscoop.com/data-brokers-california-ccpa-non-compliance-privacy/</a>

Shodan SafariASN: AS9533 Location: Bangkok, TH Added: 2025-07-28T09:50<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

Shodan SafariASN: AS396073 Location: Dallas, US Added: 2025-07-26T11:32<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

AAKLPC World: Proton launches its own free 2FA app with a native desktop version <a href="https://www.pcworld.com/article/2864602/proton-launches-its-own-free-2fa-app-with-native-desktop-version.html" rel="nofollow noopener" translate="no" target="_blank">https://www.pcworld.com/article/2864602/proton-launches-its-own-free-2fa-app-with-native-desktop-version.html</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

PheonixAge verification laws are a trojan horse, endgame is destroying anonymity.The path seems clear: normalize checks -> ban circumvention tools (VPNs) -> roll out state-controlled digital IDs -> build a permanent record of your digital life for corporations and "pre-crime" analytics.You are trading a free, open internet for digital chains. If there ever was a moment to defend decentralized and anonymous systems, it is this.<a href="https://fosstodon.org/tags/enshittification" class="mention hashtag" rel="nofollow noopener" target="_blank">#enshittification</a> <a href="https://fosstodon.org/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://fosstodon.org/tags/surveillance" class="mention hashtag" rel="nofollow noopener" target="_blank">#surveillance</a> <a href="https://fosstodon.org/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://fosstodon.org/tags/artist" class="mention hashtag" rel="nofollow noopener" target="_blank">#artist</a> <a href="https://fosstodon.org/tags/music" class="mention hashtag" rel="nofollow noopener" target="_blank">#music</a> <a href="https://fosstodon.org/tags/vpn" class="mention hashtag" rel="nofollow noopener" target="_blank">#vpn</a>

Quad9DNSWe saw something really interesting last week - significant ramp up of blocks on a particular domain (>2B in ~30 hrs) - then a sharp drop off. No indication it was a false positive, nor any evidence it was an active threat. 🤷‍♀️ The domain is using the njalla nameservers, which are responsible for a very large number of blocklisted domains. So the moral of the story...if you hang out in a bad neighborhood, you might end up on the blocklist. <a href="https://mastodon.social/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

Shodan SafariASN: AS14315 Location: Phoenix, US Added: 2025-07-26T22:05<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

LMG SecurityLabor Day is right around the corner—are you prepared for a holiday cyberattack?Hackers love long weekends, and history proves it. From the Kaseya ransomware outbreak on the 4th of July to the MOVEit breach over Memorial Day, cybercriminals know exactly when to strike: when your team is offline and defenses are down.In our latest blog, we dive into some of the most infamous holiday-timed cyberattacks, including MOVEit, the Bangladesh Bank heist, and more, and share practical steps your organization can take to stay protected before and during holiday breaks.Read our blog: <a href="https://www.lmgsecurity.com/cyberattacks-dont-take-holidays-why-hackers-love-long-weekends-and-how-to-prepare/" rel="nofollow noopener" translate="no" target="_blank">https://www.lmgsecurity.com/cyberattacks-dont-take-holidays-why-hackers-love-long-weekends-and-how-to-prepare/</a><a href="https://infosec.exchange/tags/Cyberattacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberattacks</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/IncidentResponse" class="mention hashtag" rel="nofollow noopener" target="_blank">#IncidentResponse</a> <a href="https://infosec.exchange/tags/HolidaySecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HolidaySecurity</a> <a href="https://infosec.exchange/tags/Ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ransomware</a> <a href="https://infosec.exchange/tags/LMGSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#LMGSecurity</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/CyberRisk" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberRisk</a> <a href="https://infosec.exchange/tags/Cyberaware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberaware</a> <a href="https://infosec.exchange/tags/SMB" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMB</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/CEO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CEO</a> <a href="https://infosec.exchange/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITSecurity</a>

Ian CampbellOh this looks like some seriously neat data-crunching from GreyNoise! Excited to dive into it later.<a href="https://masto.deoan.org/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://masto.deoan.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/@hrbrmstr/114948035250197965" rel="nofollow noopener" translate="no" target="_blank">https://mastodon.social/@hrbrmstr/114948035250197965</a>

Sebastian KübeckGestohlener Azure-Master-Key: Microsofts Sicherheitsversagen ist jetzt amtlich "Die US-Regierungsbehörde für Cybersecurity wirft Microsoft vielfaches Versagen bei der Cybersicherheit vor und empfiehlt, die Entwicklung neuer Features für die Cloud zurückzustellen, bis substanzielle Sicherheitsverbesserungen gemacht sind."<a href="https://www.heise.de/news/Klatsche-fuer-Microsoft-US-Behoerde-wirft-MS-Sicherheitsversagen-vor-9674431.html" rel="nofollow noopener" translate="no" target="_blank">https://www.heise.de/news/Klatsche-fuer-Microsoft-US-Behoerde-wirft-MS-Sicherheitsversagen-vor-9674431.html</a>EDIT: Der Link zu "Review of the Summer 2023 Microsoft Exchange Online Intrusion": <a href="https://www.cisa.gov/sites/default/files/2024-03/CSRB%20Review%20of%20the%20Summer%202023%20MEO%20Intrusion%20Final_508c.pdf" rel="nofollow noopener" translate="no" target="_blank">https://www.cisa.gov/sites/default/files/2024-03/CSRB%20Review%20of%20the%20Summer%202023%20MEO%20Intrusion%20Final_508c.pdf</a><a href="https://graz.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://graz.social/tags/microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#microsoft</a> <a href="https://graz.social/tags/MicrosoftAzure" class="mention hashtag" rel="nofollow noopener" target="_blank">#MicrosoftAzure</a>

FIRST.orgEffective cybersecurity capacity building in action: FIRST’s partnership with PaCSON showcases collaborative incident response development!<a href="https://infosec.exchange/tags/FIRSTCON25" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIRSTCON25</a> brought together Pacific region CSIRTs from Kiribati, Palau, Tonga, New Zealand, Vanuatu, and Australia for workshops on digital forensics, AI applications, and incident case studies.Read more: <a href="https://go.first.org/p5yeY" rel="nofollow noopener" translate="no" target="_blank">https://go.first.org/p5yeY</a><a href="https://infosec.exchange/tags/CyberDefense" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberDefense</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/IncidentResponse" class="mention hashtag" rel="nofollow noopener" target="_blank">#IncidentResponse</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

Ian CampbellGood morning! New research out from <a href="https://infosec.exchange/@DomainTools" class="u-url mention" rel="nofollow noopener" target="_blank">@DomainTools</a> Investigations today!We leaned on some deep natsec experience as well as available tools and data to lay out the DPRK fake IT worker scheme - the people, the infrastructure, and the behaviors involved, as well as what to watch out for.<a href="https://masto.deoan.org/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://masto.deoan.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://masto.deoan.org/tags/espionage" class="mention hashtag" rel="nofollow noopener" target="_blank">#espionage</a> <a href="https://masto.deoan.org/tags/fraud" class="mention hashtag" rel="nofollow noopener" target="_blank">#fraud</a> <a href="https://dti.domaintools.com/from-laptops-to-laundromats-how-dprk-it-workers-infiltrated-the-global-remote-economy/" rel="nofollow noopener" translate="no" target="_blank">https://dti.domaintools.com/from-laptops-to-laundromats-how-dprk-it-workers-infiltrated-the-global-remote-economy/</a>

Shodan SafariASN: AS4812 Location: Shanghai, CN Added: 2025-07-26T05:13<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

Recent searches

Search options

Administered by:

Server stats:

#infosec

Recent searches

Search options

Administered by:

Server stats:

infoSec

#infosec