Klue Supply Chain Compromised, Icarus Hacked, Data in Circulation https://deafnews.it/en/article/klue-supply-chain-compromised-icarus-hacked-data-in-circulation #Cybersecurity

This massive 8TB SanDisk SSD is $1,200 off at Best Buy - but not for long

The price of SSDs has been skyrocketing, but you can still save nearly 64% on the 8TB SanDisk Desk Drive external SSD from Best Buy - until the deal ends tomorrow.

https://www.zdnet.com/article/sandisk-8tb-desk-drive-ssd-best-buy-deal-amazon-prime-day-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

How to safely explore the hidden web #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/how-to-safely-explore-the-hidden-web/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

This mesh system will make your at-home Wi-Fi lightning fast - and it's still 30% off for Prime Day

The TP-Link Deco 7 Pro is perfect for large houses with many devices, and each configuration is on sale right now.

https://www.zdnet.com/article/tp-link-deco-7-pro-deal-amazon-prime-day-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxps[:]//dcncgbhug[.]web[.]app
🧬 Analysis at: https://urldna.io/scan/6a3f12903b77500008446c8a
#cybersecurity #phishing #infosec #urldna #scam #infosec

OpenAI details what to expect from the three new models in its GPT-5.6 preview

Meet the heavenly Sol, Terra, and Luna trio.

https://www.androidauthority.com/gpt-5-6-models-3681960/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Expect a brutal price tag for one of the first Snapdragon 8 Elite Gen 6 Pro phones

Xiaomi's next flagship could break the 6,000 yuan mark.

https://www.androidauthority.com/xiaomi-18-pro-price-rumor-3681992/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Our favorite Prime Day gadgets under $100 you don’t need but will really want

Govee’s floor lamps are just $60. | Image: Govee: Prime Day has a funny way of convincing you to buy things you weren’t shopping for in the first place. You sign on intending to buy something sensible you actually need,…

https://www.theverge.com/gadgets/957473/prime-day-2026-fun-gadgets-under-100-deal-sale

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🚨 EUVD-2026-39913

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: budibase
🏢 Vendor: budibase
📅 Updated: 2026-06-26

📝 Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id (app_...) and an S3-source datasource id (ds_...) can call this endpoint with no auth and obtain a 15-minute pre-signed PUT URL m...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39913

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-55645

📊 Score: 6.7/10 (CVSS v3.1)
📦 Product: Traveler for Microsoft Outlook
🏢 Vendor: HCLSoftware
📅 Updated: 2026-06-26

📝 The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55645

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39912

📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: budibase
🏢 Vendor: budibase
📅 Updated: 2026-06-26

📝 Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentials stored in a workspace datasource. The route is protected only by the reca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39912

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39911

📊 Score: 7.3/10 (CVSS v3.1)
📦 Product: budibase
🏢 Vendor: budibase
📅 Updated: 2026-06-26

📝 Budibase is an open-source low-code platform. Prior to 3.39.0, `GET /api/chat-links/:instance/:token/handoff` is a public endpoint (no auth required) that performs a permanent, state-changing operation: it binds an external chat identity (Slack/Discord/MS ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39911

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39910

📊 Score: 9.6/10 (CVSS v3.1)
📦 Product: budibase
🏢 Vendor: budibase
📅 Updated: 2026-06-26

📝 Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts it with extract-zip@2.0.1 into a temp directory, then for each entry listed ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39910

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39909

📊 Score: n/a
📦 Product: golang.org/x/image/tiff
🏢 Vendor: golang.org/x/image
📅 Updated: 2026-06-26

📝 The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39909

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39908

📊 Score: 5.0/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-06-26

📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepad++ using the COPYDATA_FULL_CMDLINE path. The handler appe...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39908

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39907

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-06-26

📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter witho...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39907

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39906

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-06-26

📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment a user command fires (Time-of-Check). However, the command payload is taken from the in-m...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39906

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39905

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-06-26

📝 Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installation, the installer invokes powershell.exe without using an abs...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39905

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39904

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-06-26

📝 Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read by NppXml::value(aNode) (Parameters.cpp:3658) in the feedUserCmds() function an...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39904

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39903

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: notepad-plus-plus
🏢 Vendor: notepad-plus-plus
📅 Updated: 2026-06-26

📝 Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. It uses a prefix-based check (PathIsPrefix() or equivalent) that matches paths starting with trust...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39903

#cybersecurity #infosec #euvd #cve #vulnerability

🛡️ #Cybersecurity news & tips across the #fediverse

“License Plate Cameras Are Tracking Your Life Without a Warrant Automatic license plate readers sold by surveillance companies are now using a technology called SignalTrace that uses sensors in the ALPRs to scrape electr...”

https://mastodon.social/@gtbarry/116817007231939856

🤖 via RSS feed. Not an endorsement.

How I use Siri mode in the iOS 27 Camera app to ask questions about anything I see

Now in iOS 27 developer beta, the Camera app adds a new Siri mode that provides AI-based assistance for anything within view. Here's what you need to try it yourself.

https://www.zdnet.com/article/how-i-use-siri-mode-in-the-ios-27-camera-app-to-ask-questions-about-anything-i-see/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Robinhood Cuts Access Approval Time to Support High-Velocity Development
🔗 https://www.darkreading.com/application-security/robinhood-reengineered-access-approvals-for-high-velocity-development

The fintech company's engineering-first application security team re-engineered the process for granting system access, making it easier and more secure for developers

3 flagship Android phones are cheaper now than they were on day one of Prime Day, but not for long

Prime Day is nearly over, but these three flagship deals have actually improved since the sale started.

https://www.androidauthority.com/flagship-android-phones-deals-prime-day-3682004/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxp[:]//amazon-clone-green-seven[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a3e3fd33b77500008e7fb5a
#cybersecurity #phishing #infosec #urldna #scam #infosec

OpenAI unveils GPT-5.6 amid US AI regulatory drama

Less than 24 hours after news broke that OpenAI would stagger its next model release at the request of the Trump administration, that model, GPT-5.6, is here. On Friday, the company unveiled the limited preview of its n…

https://www.theverge.com/ai-artificial-intelligence/957845/openai-gpt-5-6-trump-administration-ai-preview

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Oura Ring 5 vs. Oura Ring 4: I compared both smart rings for health tracking - you should buy this one

Your favorite smart ring is getting slimmer. Is the Oura Ring 5 worth the upgrade? I break it down.

https://www.zdnet.com/article/oura-ring-5-vs-oura-ring-4/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Using T-Mobile abroad just got a lot pricier

Price increases make prepaid passes look like a better deal.

https://www.androidauthority.com/t-mobile-international-rates-3681888/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Assessments: Front-End
Front-end development is the process of building the visual and interactive parts of websites or web applications that users interact with directly. It bridges the gap between design and backend systems, relying on three core technologies: HTML for structure, CSS for styling, and JavaScript for behavior.

#CyberSecurity #Governance #RiskManagement #Technology #Gaming #ITSecurity #Programming #AI #Business

Link: https://blackcatwhitehatsecurity.com/theGame14.cfm

Alt...

Assessments: Front-End Front-end development is the process of building the visual and interactive parts of websites or web applications that users interact with directly. It bridges the gap between design and backend systems, relying on three core technologies: HTML for structure, CSS for styling, and JavaScript for behavior.

Organized cybercrime: nation states and criminal partnerships #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/organized-cybercrime-nation-states-and-criminal-partnerships/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

Hacked #Klue says criminals are deleting stolen customer data, but now other hackers are making threats

https://techcrunch.com/2026/06/25/hacked-klue-says-criminals-are-deleting-stolen-customer-data-but-now-other-hackers-are-making-threats/

#cybersecurity #privacy #DataBreach

🚨 EUVD-2026-39781

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: SiteGround Email Marketing
🏢 Vendor: SiteGround
📅 Updated: 2026-06-26

📝 Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39781

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210360

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Image Carousel
🏢 Vendor: GhozyLab
📅 Updated: 2026-06-26

📝 Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210360

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210354

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Donation Thermometer
🏢 Vendor: rhewlif
📅 Updated: 2026-06-26

📝 Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210354

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210351

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: Forget About Shortcode Buttons
🏢 Vendor: Code Amp
📅 Updated: 2026-06-26

📝 Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210351

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210358

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Splash - Sport Club WordPress Theme for Basketball, Football, Hockey
🏢 Vendor: StylemixThemes
📅 Updated: 2026-06-26

📝 Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210358

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210356

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: BookPro
🏢 Vendor: About Envato
📅 Updated: 2026-06-26

📝 Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210356

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210361

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: BNE Testimonials
🏢 Vendor: Kerry
📅 Updated: 2026-06-26

📝 Contributor Cross Site Scripting (XSS) in BNE Testimonials <= 2.0.8 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210361

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210357

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Eagle Booking
🏢 Vendor: Eagle-Themes
📅 Updated: 2026-06-26

📝 Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210357

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210359

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Goya Core
🏢 Vendor: everthemess
📅 Updated: 2026-06-26

📝 Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210359

#cybersecurity #infosec #euvd #cve #vulnerability

🛡️ #Cybersecurity news & tips across the #fediverse

“RE: https:// mastodon.social/@Tutanota/1168 15262001889776 # NoMeansNo # Privacy # Surveillance”

https://mastodon.art/@707Kat/116816645520605655

🤖 via RSS feed. Not an endorsement.

Operation DragonReturn: China-Nexus Cyber Espionage Campaign Targeting Govt. of India/MoF Tax Infrastructure via Multi-Stage DcRAT Deployment

A sophisticated China-aligned cyber espionage campaign targeting India's tax infrastructure was identified between May and June 2026. The operation impersonates the Income Tax Department, Ministry of Finance, exploiting the AY2026-27 ITR filing season to target corporate entities, tax professionals, chartered accountants, and taxpayers. The attack employs spear-phishing emails with malicious attachments mimicking legitimate government utilities. The multi-stage infection chain deploys DcRAT through steganographic payload concealment, fileless .NET execution, AMSI bypass, and Windows service persistence. The threat actor demonstrates operational maturity through active payload rotation achieving 0/66 detection rates, encrypted TLS-based C2 communications, and infrastructure hosted across multiple ASNs linked to China. The campaign shows overlaps with the China-nexus threat actor Silver Fox, featuring screen capture capabilities, data exfiltration, and systematic intelligence collection from high-value India...

Pulse ID: 6a3e75975494e990e7421b4d
Pulse Link: https://otx.alienvault.com/pulse/6a3e75975494e990e7421b4d
Pulse Author: AlienVault
Created: 2026-06-26 12:50:31

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#China #CyberSecurity #DCRat #Email #Espionage #Government #India #InfoSec #Mimic #NET #OTX #OpenThreatExchange #Phishing #RAT #SpearPhishing #TLS #Windows #bot #AlienVault

CL-STA-1062: From Taiwanese Web Hosting to Power Plants with TinyRCT Backdoor https://deafnews.it/en/article/cl-sta-1062-from-taiwanese-web-hosting-to-power-plants-with-tinyrct-backdoor #Cybersecurity

Trump administration gets OpenAI to slow-track new model release over security concerns

OpenAI limits initial rollout of new model at Trump administration's request.

https://www.androidauthority.com/openai-limits-new-model-release-3681883/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

T-Mobile just made satellite messaging far more practical with new app support

T-Mobile satellite data quietly adds support for Discord, Signal, and LINE.

https://www.androidauthority.com/t-mobile-t-satellite-app-support-expanded-3681917/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]