ModeloRAT and Mistic Backdoor Tied to Ransomware Initial Access Broker

1e41c7bfaa6aa3b93b6cc024274a10e33f3e12fe7c1db387ef8927f9d1984.

Pulse ID: 6a3dcc0606d356a2b4feff05
Pulse Link: https://otx.alienvault.com/pulse/6a3dcc0606d356a2b4feff05
Pulse Author: cryptocti
Created: 2026-06-26 00:47:01

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #InfoSec #OTX #OpenThreatExchange #RAT #RansomWare #bot #cryptocti

Best Buy is still selling the Ninja Slushi for its lowest price ever - and I recommend buying now

The popular Ninja Slushi is officially sold out at Amazon and Walmart, but it's still on sale (and in stock) for its best price ever at Best Buy.

https://www.zdnet.com/article/ninja-slushi-amazon-prime-day-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Amazon is selling Pokemon Mega Lucario Battle Decks for $28 off during Prime Day

This Prime Day deal discounts the Mega Lucario ex League Battle Deck to just $22, and it's the perfect way to get into competitive play.

https://www.zdnet.com/article/mega-lucario-ex-league-battle-deck-amazon-prime-day-deal-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

☕ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
🟣 Dialog, la sociedad secreta de Peter Thiel, quedó expuesta porque su web estaba mal hecha, no por un hackeo
🔗 https://es.wired.com/articulos/dialog-la-sociedad-secreta-de-peter-thiel-quedo-expuesta-porque-su-web-estaba-mal-hecha-no-por-un-hackeo

El grupo secreto, cofundado por Peter Thiel, afirma que un hacker está detrás de la filtración que expuso los datos

Possible Phishing 🎣
on: ⚠️hxxps[:]//custertell[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a3db3093b77500002b876e3
#cybersecurity #phishing #infosec #urldna #scam #infosec

Thousands of readers bought these 15+ tech deals on Amazon Prime Day - most are still live

You keep hearing about Prime Day deals, but what are people actually buying? We examined the data across ZDNET, CNET, PCMag, Mashable, and other Ziff Davis publications to find out.

https://www.zdnet.com/article/what-readers-on-zdnet-cnet-mashable-and-more-are-actually-buying-this-amazon-prime-day-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

These are the 20+ best Prime Day phone deals I'd actually buy for myself

Prime Day 2026 has officially started. Save hundreds right now on smartphones, including the Google Pixel 10 Pro and Samsung Galaxy S26.

https://www.zdnet.com/article/best-amazon-prime-day-phone-deals-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxps[:]//sccoastservicemail[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a3dd7003b77500002b87a3f
#cybersecurity #phishing #infosec #urldna #scam #infosec

🛡️ #Cybersecurity news & tips across the #fediverse

“https://www. europesays.com/people/129066/ Meta’s surveillance tool leaked employee private data # Facebook # MarkZuckerberg # Meta # Privacy # surveillance # WorkplaceMonitoring”

https://pubeurope.com/@people/116812036503431935

🤖 via RSS feed. Not an endorsement.

Our Lab tests show the iPad Pro M5 has the longest lasting tablet battery. Get it for $100 off before Apple prices spike

Prices on Apple devices are rising, but you can still get the award-winning iPad Pro M5 at a great discount for Prime Day.

https://www.zdnet.com/article/apple-ipad-pro-m5-amazon-prime-day-2026-deal/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Qihoo 360 Unveils AI Bug-Finder to Rival Anthropic's Mythos

Qihoo 360 CEO Zhou Hongyi has unveiled an AI bug-finder, positioning it as a powerful countermeasure to restricted Western tools, likening Anthropic's Mythos to a "cyber nuclear weapon". This new Chinese innovation aims to level the playing field in cybersecurity.

https://osintsights.com/qihoo-360-unveils-ai-bug-finder-to-rival-anthropics-mythos?utm_source=mastodon&utm_medium=social

#AiBugFinder #China #Cybersecurity #EmergingThreats #NationState

I wore the best Garmin and Amazfit smartwatches for a month - is the $250 price gap noticeable?

How does the latest Amazfit Cheetah 2 Ultra stack up against the Garmin Fenix 8? Here's what I discovered after living with both for a month.

https://www.zdnet.com/article/amazfit-cheetah-2-ultra-vs-garmin-fenix-8/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxps[:]//left-places-540753[.]framer[.]app/
🧬 Analysis at: https://urldna.io/scan/6a3d7ac03b77500003c35edf
#cybersecurity #phishing #infosec #urldna #scam #infosec

Instagram wants to monopolize your attention

This week, Instagram launched a series of new features for its smart TV app that are all designed to get people to spend more time on the platform through the biggest screens in their homes. In addition to vertical Reel…

https://www.theverge.com/tech/956456/instagram-for-tv-youtube-microdramas-longform-video

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Score a discounted Xbox console before the prices jump

The Xbox Series S and Series X consoles together. | Photo by Vjeran Pavic / The Verge Microsoft announced today that the price of all Xbox models will rise in August, the second time in less than a year as memory prices…

https://www.theverge.com/gadgets/957170/xbox-series-s-x-prime-day-deal-sale

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🚨 EUVD-2026-39572

📊 Score: 2.0/10 (CVSS v3.1)
📦 Product: wolfSSL
🏢 Vendor: wolfSSL
📅 Updated: 2026-06-25

📝 Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39572

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39571

📊 Score: 6.0/10 (CVSS v3.1)
📦 Product: wolfSSL
🏢 Vendor: wolfSSL
📅 Updated: 2026-06-25

📝 PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS#12 verify path compared the locally computed HMAC against the MAC parsed from the PKCS#12 ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39571

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39570

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: wolfSSL
🏢 Vendor: wolfSSL
📅 Updated: 2026-06-25

📝 The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encry...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39570

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39569

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: EVoke CSMS
🏢 Vendor: EVoke
📅 Updated: 2026-06-25

📝 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no aut...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39569

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39568

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: EVoke CSMS
🏢 Vendor: EVoke
📅 Updated: 2026-06-25

📝 The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39568

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39567

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6
🏢 Vendor: Red Hat
📅 Updated: 2026-06-25

📝 A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39567

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39566

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: EVoke CSMS
🏢 Vendor: EVoke
📅 Updated: 2026-06-25

📝 The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers. This vulnerability may allow u...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39566

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39565

📊 Score: 2.1/10 (CVSS v3.1)
📦 Product: wolfSSL
🏢 Vendor: wolfSSL
📅 Updated: 2026-06-25

📝 HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC verification. In the OpenSSL-compatibility HMAC verify path the supplied signature length was only checked as not exceeding the MAC length, ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39565

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39564

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: EVoke CSMS
🏢 Vendor: EVoke
📅 Updated: 2026-06-25

📝 Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39564

#cybersecurity #infosec #euvd #cve #vulnerability

Notion Mail is shutting down, but your Gmail inbox isn’t going anywhere

Notion is killing its email client because users prefer AI agents to an inbox.

https://www.androidauthority.com/notion-mail-is-shutting-down-3681674/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

CVE-2026-54479 - DoS in Websocket backend. Predictable session IDs allow auth bypass or resource exhaustion. CVSS 7.3. No patch yet. Monitor systems closely. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-54479/

Framework has good news and bad news

Thanks to the component crisis, it's a bad time to want a new computer. But if you are waiting on a preorder for the Framework Laptop 13 Pro - which Framework's CEO has called the "MacBook Pro for Linux users" - the com…

https://www.theverge.com/gadgets/957338/framework-laptop-13-pro-ssd-price-cpu

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Europe Evolves Into Ransomware's Favorite Region
🔗 https://www.darkreading.com/cybersecurity-analytics/europe-evolves-ransomware-favorite-region

After a global lull, ransomware gangs are setting sights on a rich new arena: attacking EU organizations and their suppliers.

Possible Phishing 🎣
on: ⚠️hxxps[:]//yuvarajsadam[.]github[.]io/netflix_clone/
🧬 Analysis at: https://urldna.io/scan/6a3ce7ea3b77500003c3503b
#cybersecurity #phishing #infosec #urldna #scam #infosec

OpenAI will delay GPT-5.6 after Trump administration request

The Trump administration, apprehensive of potential security issues, has reportedly asked OpenAI to stagger the release of its next big-ticket model, GPT-5.6. The Information reported that OpenAI CEO Sam Altman told emp…

https://www.theverge.com/ai-artificial-intelligence/957372/openai-will-delay-gpt-5-6-after-trump-administration-request

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Per CNN:

Bad cybersecurity practices from Secret Service agents have left their phones vulnerable to hacking and risked the lives of senior US officials they are charged with protecting, according to a new inspector general report.

#cybersecurity #mobile #SecretService #OPSEC

https://www.cnn.com/2026/06/25/politics/secret-service-cyber-security-put-protectees-risk

YouTube updates Shorts to make it even more like TikTok

YouTube is adding even more TikTok-like features to Shorts, including a new "clear screen" mode that removes the icons and text from the video you're watching. In a blog post on Thursday, YouTube says it's also replacin…

https://www.theverge.com/streaming/957422/youtube-shorts-update-tiktok

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

The future of mental health online #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/the-future-of-mental-health-online/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

Organized cybercrime: how investigators track cybercrime networks #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/organized-cybercrime-how-investigators-track-cybercrime-networks/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

🚨 EUVD-2026-39487

📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: pnpm
🏢 Vendor: pnpm
📅 Updated: 2026-06-25

📝 pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-controlled package name and version fields. A crafted manifest could escape the selected download directory and overwrite another reachable file. The ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39487

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39486

📊 Score: 6.0/10 (CVSS v3.1)
📦 Product: wolfSSL
🏢 Vendor: wolfSSL
📅 Updated: 2026-06-25

📝 Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an intermediate they control and have it accepted as v...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39486

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39485

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: pnpm, pnpm
🏢 Vendor: pnpm
📅 Updated: 2026-06-25

📝 pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Manifest bin object keys such as "", ".", and ".." passed pnpm's bin-name guard. When a malicious package was installed globally, later global remove, update, or add-replacement flows could re-derive th...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39485

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39484

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: pnpm, pnpm
🏢 Vendor: pnpm
📅 Updated: 2026-06-25

📝 pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can persist package-manager bootstrap metadata in the first YAML document of pnpm-lock.yaml. Before the patch, direct pnpm execution trusted an already resolved packageManagerDependencies entry whe...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39484

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-39483

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: pnpm, pnpm
🏢 Vendor: pnpm
📅 Updated: 2026-06-25

📝 pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can install configDependencies declared in pnpm-workspace.yaml before command dispatch. Before the patch, a repository could declare pacquet or @pnpm/pacquet as a config dependency and pnpm treated...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39483

#cybersecurity #infosec #euvd #cve #vulnerability