Possible Phishing 🎣
on: ⚠️hxxps[:]//mailboxupdatepage[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a64974b3b775000065c84b3
#cybersecurity #phishing #infosec #urldna #scam #infosec

#CheckPoint warns of #SmartConsole zero-day exploited in attacks

https://www.bleepingcomputer.com/news/security/check-point-patches-smartconsole-zero-day-exploited-in-attacks/

#cybersecurity

🚨 EUVD-2025-16366

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: mcp-markdownify-server
📅 Published: 2025-05-29 | Updated: 2026-07-25

📝 Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will al...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16366

#cybersecurity #infosec #euvd #cve #vulnerability

Facebook Verified Badge will offer free identity verification through a video selfie for eligible users.

#Facebook #FacebookVerified #VerifiedBadge #IdentityVerification #VideoSelfie #CyberSecurity #OnlineSecurity #DigitalIdentity #SocialMedia #AI

https://www.pashtomedium.com/2026/07/facebook-verified-badge-free-identity-verification.html

OpenAI called the incident "unprecedented," which is the corporate equivalent of a fire alarm saying "unexpected warmth detected." They are now working with Hugging Face to assess the damage and patch their sandbox protocols.

Review your AI model containment architecture and sandbox escape controls before your models review them for you.

Reward: You've received the Loose Cannon passive perk. It does nothing you want and everything you don't.

#AI #CyberSecurity #OpenAI #AISecurityRisks (2/2)

macOS 27 Beta Reworks Mail's Compose Window Around Siri AI

For macOS 27 Golden Gate, coming this fall, Apple appears to be testing a new formatting bar for the Mail app's compose window that promotes Apple Intelligence's Writing Tools and Siri AI, based on findings in the lates…

https://www.macrumors.com/2026/07/24/macos-27-beta-siri-mail-compose-window/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

Need a password manager for your team?

TeamPass is a free, open-source password manager built for teams and organizations. Securely share credentials, manage role-based permissions, integrate with LDAP/Active Directory, and self-host everything on your own infrastructure.

More details: https://digitalescapetools.com/tools/tool.html?id=teampass

#OpenSource #PasswordManager #SelfHosting #CyberSecurity #Privacy #DevOps #FOSS

Alt...

Screenshot of the TeamPass 3 project page describing it as an on-premise collaborative password manager. The page highlights GitHub badges showing approximately 1.8k stars, GPL-3.0 license, 1.9 million Docker pulls, the latest release, a passing build status, and code intelligence support.

RE: https://infosec.exchange/@aristot73/116562947812685451

New in the References bibliography for "When buffers overflow into policy" — 9 entries.

The Hugging Face incident cluster, newest first:

Claudia Plattner (@bsi) — Wenn eine KI aus ihrer Sandbox ausbricht [When an AI breaks out of its sandbox], 24 Jul 2026
https://www.bsi.bund.de/DE/Service-Navi/Presse/Alle-Meldungen-News/Blog/KI_Ausbruch_Sandbox_260724.html

@bert_hubert — Met het Oog op Morgen: Uitgebroken AI? [Escaped AI?], NPO Radio 1 interview with transcript, 23 Jul 2026
https://berthub.eu/articles/posts/ai-met-het-oog-op-morgen/

@nielsprovos — Security at Machine Speed Is the Wrong Race, 22 Jul 2026
https://www.provos.org/p/security-at-machine-speed-is-the-wrong-race/

James Shires & Max Smeets (Binding Hook) — OpenAI's agent didn't go rogue. Its governance did., 22 Jul 2026
https://bindinghook.com/the-openais-agent-didnt-go-rogue-its-governance-did/

OpenAI — OpenAI and Hugging Face partner to address security incident during model evaluation, 21 Jul 2026
https://openai.com/index/hugging-face-model-evaluation-security-incident/

Hugging Face — Security incident disclosure, July 2026, 16 Jul 2026
https://huggingface.co/blog/security-incident-july-2026

Also added:

UK AI Security Institute — Cheating behaviour in frontier model evaluations, 21 Jul 2026
https://www.aisi.gov.uk/blog/cheating-behaviour-in-frontier-model-evaluations

Ondrej Vlcek (AISLE) — The Economics of Security Vulnerabilities: Why Discovery Is Not Commoditizing, 23 Jul 2026
https://aisle.com/blog/the-economics-of-security-vulnerabilities-why-discovery-is-not-commoditizing

Microsoft and 34 co-signatories — Open Weights and American AI Leadership, 24 Jul 2026
https://www.microsoft.com/en-us/corporate-responsibility/topics/open-weight/

#cybersecurity #AI #vulnerability #AIsecurity

The MacRumors Show: Can OpenAI Really Beat the iPhone?

This week's episode of The MacRumors Show covers OpenAI's move into hardware and the trade secret lawsuit Apple filed against the company earlier this month. Subscribe to The MacRumors Show YouTube channel for more vide…

https://www.macrumors.com/2026/07/24/the-macrumors-show-can-openai-beat-the-iphone/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

#chrome extension Shieldai Web Extension seems malicious. Its #cybersecurity badness score is 98/100!

```json
{"id": "neoghgfokcamnbalpclafhiidbiafidm", "score": 98, "platform": "chrome", "name": "Shieldai Web Extension"}
```

The most cursed program that I have ever written - took 1 hour and 17 minutes exactly to write it and run it.

#c #malware #programming #cybersecurity #cprogramming #student

Can someone guess what this program is?
What this program outputs?
How can I escalate it?

Alt...

One of the best cursed programs that I have ever written.

Possible Phishing 🎣
on: ⚠️hxxps[:]//studentsmuetedu[.]godaddysites[.]com/
🧬 Analysis at: https://urldna.io/scan/6a6442f73b77500005d16cc6
#cybersecurity #phishing #infosec #urldna #scam #infosec

Anthropic's New Claude Opus 5 Nearly Matches Flagship Fable 5 at Half the Cost

Anthropic today introduced Claude Opus 5, an upgrade to Opus 4.8. Anthropic says Opus 5 was built for daily use, and it offers near Fable 5 performance at half the price. Fable 5 is Anthropic's most capable publicly ava…

https://www.macrumors.com/2026/07/24/anthropic-opus-5/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

#Tails 7.10

https://tails.net/news/version_7.10/

#privacy #anonymity #cybersecurity #FOSS #Linux

Netcat is one of those Linux tools networking and security people keep coming back to. It can open TCP/UDP connections, test ports reachability, move data between systems, and create quick listeners or reverse shells.

Here are some practical Netcat commands worth knowing 😎👇

Find high-res pdf ebooks with all my Linux related infographics at https://study-notes.org

#linux #cybersecurity #infosec #kalilinux #pentesting

Samsung's new Ultra foldable is impressive, but I'd pay close attention to this model

The Galaxy Z Fold 8 Ultra is sure to impress power users, but Samsung took a risk with the Galaxy Z Fold 8, and it could pay off.

https://www.zdnet.com/article/samsung-galaxy-z-fold-8-ultra-hands-on/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

🟠 CVE-2026-16804 - High (8.3)

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16804/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-16804

🟠 CVE-2026-16805 - High (8.8)

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16805/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-16805

🟠 CVE-2026-16806 - High (8.8)

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-16806

How #OpenAI’s human mistake led to the #AI-powered hack on #HuggingFace

https://techcrunch.com/2026/07/22/how-an-openais-human-mistake-led-to-the-ai-powered-hack-on-hugging-face/

#cybersecurity #DataBreach #privacy

Possible Phishing 🎣
on: ⚠️hxxp[:]//month-gasoline-seasoned[.]heyflow[.]site/at_t-mail-12260c
🧬 Analysis at: https://urldna.io/scan/6a6489453b775000065c8470
#cybersecurity #phishing #infosec #urldna #scam #infosec

Is this e-reader case a gun?

Is an e-reader case as dangerous as a Glock 19? Last month, Louisville, Kentucky-based creator Luke The Maker showed off a bizarre, 3D-printed, pistol-shaped case design for the popular minimalist Xteink X4 e-reader. Th…

https://www.theverge.com/tech/970343/e-reader-case-3d-printed-gun

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Secure application onboarding strengthens identity security.

Infosec K2K simplifies IAM onboarding for secure access management and identity governance.

Learn more: https://zurl.co/oDDrJ

#CyberSecurity #IAM #IdentitySecurity #AccessManagement #InfosecK2K

Preventing cyberattacks is better than recovery. Proactive security reduces business risks.

Infosec K2K delivers Security Assurance, Managed Security, and IAM solutions.

Learn more: https://zurl.co/pTy1B

#CyberSecurity #SecurityAssurance #ManagedSecurity #InfosecK2K

Trusted platforms can be exploited by cybercriminals. Strong security helps stop threats.

Infosec K2K provides Managed Security, Security Assurance, and IAM solutions.

Learn more: https://zurl.co/tuJdE

#CyberSecurity #ManagedSecurity #CyberResilience #InfosecK2K

🚨New ransom group blog posts!🚨

Group name: kairos
Post title: Thermalex Inc
Info: https://cti.fyi/groups/kairos.html

Group name: qilin
Post title: The Myers Y Cooper
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Plitvička Jezera Nacionalni Park
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Jubilee Jobs
Info: https://cti.fyi/groups/qilin.html

Group name: blackwater
Post title: msgas.com.br
Info: https://cti.fyi/groups/blackwater.html

Group name: bravox
Post title: A&A Safety 🇺🇸
Info: https://cti.fyi/groups/bravox.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

Internet subcultures: ASMRtists #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/internet-subcultures-asmrtists/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

#chrome extension Connect Safely seems malicious. Its #cybersecurity badness score is 99/100!

```json
{"id": "onkmgblcoiokdecadbpcfjnhknplndhn", "score": 99, "platform": "chrome", "name": "Connect Safely"}
```

AOC U32G4 32-inch 4K Dual-Refresh gaming monitor review: Solid performance and value

AOC redefines the budget 4K gaming monitor with its U32G4. This 32-inch IPS panel sports 160 Hz, 320 Hz in FHD resolution, Adaptive-Sync, HDR400 and wide gamut color for around $320.

https://www.tomshardware.com/monitors/gaming-monitors/aoc-u32g4-32-inch-4k-dual-refresh-gaming-monitor-review

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Ab 2. August 2026 wird KI-Transparenz verbindlicher. Nutzer sollen erkennen können, wenn KI beteiligt ist. Der EU AI Act verlangt, dass KI nachvollziehbar eingesetzt wird. Bei Verstößen drohen bis zu 15 Mio. € oder 3 % des weltweiten Jahresumsatzes. #AIAct #KI #Compliance #ITSecurity #CyberSecurity

Possible Phishing 🎣
on: ⚠️hxxps[:]//xn--inscrio-2wa9a[.]hellotars[.]com
🧬 Analysis at: https://urldna.io/scan/6a64910f3b77500005d173e2
#cybersecurity #phishing #infosec #urldna #scam #infosec

#SouthKorea discloses #DataBreach impacting diplomats worldwide

https://www.bleepingcomputer.com/news/security/south-korea-discloses-data-breach-impacting-diplomats-worldwide/

#privacy #cybersecurity #politics

Delaware’s Printed Solid rebrands to Prusa USA

Printed Solid, the Delaware-based filament manufacturer acquired by Czech Prusa Research in 2022, is now known as Prusa USA, Inc.

https://www.tomshardware.com/3d-printing/delawares-printed-solid-rebrands-to-prusa-usa

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

#OpenAI’s #AI models, designed to cheat on a #cybersecurity test, escaped containment and attacked #HuggingFace, highlighting the risk of AI #lossofcontrol scenarios. The incident underscores the need for stronger containment measures, real-time monitoring, and a shift in AI development towards safer systems. Current laws requiring incident disclosure are inadequate, as they only mandate reporting for catastrophic events. https://time.com/article/2026/07/24/openai-hugging-face-attack/?eicker.news #tech #media #news

AMD working on new X3D V-cache mobile chip for gaming laptops, leaker claims — Ryzen 7 9800HX3D could launch with 8 cores, 16 threads, and 96…

A fresh leak suggests AMD is preparing an 8-core, 16-thread Zen 5 mobile processor with 96MB of L3 cache, potentially bringing the desktop Ryzen 7 9800X3D experience to gaming laptops.

https://www.tomshardware.com/pc-components/cpus/amd-working-on-new-x3d-v-cache-mobile-chip-for-gaming-laptops-leaker-claims-ryzen-7-9800hx3d-could-launch-with-8-cores-16-threads-and-96mb-cache

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

This dumb password rule is from NASA Earth Data.

Username must:
- Be a Minimum of 4 characters
- Be a Maximum of 30 characters
- Use letters, numbers, periods, and underscores
- Not contain any blank spaces
- Not begin, end or contain two consecutive special characters(._)

Password must contain:
- Minimum of 8 characters
- One Uppercase letter...

https://dumbpasswordrules.com/sites/nasa-earth-data/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Possible Phishing 🎣
on: ⚠️hxxps[:]//swiftsecurebnk[.]com/home
🧬 Analysis at: https://urldna.io/scan/6a6418b03b77500005d166fa
#cybersecurity #phishing #infosec #urldna #scam #infosec

Dell 14S review: High-class design and 20+ hour battery life

The Dell 14S makes good on its promise of serving as a cheaper alternative to the pricier XPS 14.

https://www.tomshardware.com/laptops/dell-14s-review

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Save $460 on this AMD 9800X3D gaming PC with RTX 5080 — get blistering 4K performance for less

Get an RTX 5080 gaming PC with 9800X3D for $2,829 at Newegg.

https://www.tomshardware.com/desktops/gaming-pcs/save-usd460-on-this-amd-9800x3d-gaming-pc-with-rtx-5080-get-blistering-4k-performance-for-less

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxp[:]//paypal-logiin[.]blogspot[.]com/2021/02?m=1
🧬 Analysis at: https://urldna.io/scan/6a64044a3b77500005d164d9
#cybersecurity #phishing #infosec #urldna #scam #infosec

This is a phase-two boss with a global campaign already in motion, and your engineering IP is the loot table.

Windchill runs the intellectual backbone of industrial civilization. Cl0p knows this. Patch PTC Windchill to the latest version immediately and hunt for indicators of compromise before the second wave.

Reward: You've received the Scorched Drafting Table — a Legendary trophy nobody wanted to earn.

#Cl0p #Ransomware #ZeroDay #PTCWindchill #CyberSecurity #CriticalHit (2/2)

45% off: Slashed to just $1,099, this bargain RTX 5060-powered gaming laptop is discounted by $900 at HP — near half-price HyperX Omen 16 is the perfect gaming laptop for heading back to school

Save a massive $900 on HP's HyperX Omen 16 with RTX 5060. The perfect back-to-school gaming laptop is now only $1,099.

https://www.tomshardware.com/laptops/gaming-laptops/45-percent-off-slashed-to-just-usd1-099-this-bargain-rtx-5060-powered-gaming-laptop-is-discounted-by-usd900-at-hp-near-half-price-hyperx-omen-16-is-the-perfect-gaming-laptop-for-heading-back-to-school

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

President Trump expands AI data center ‘ratepayer protection pledge’ to include state governors and utili…

U.S. President Donald Trump expands the 'ratepayer protection pledge' to include states, utility companies, and data center developers. He claims that the pledge will help electricity costs go down, even as PJM Intercon…

https://www.tomshardware.com/tech-industry/policy/president-trump-expands-ai-data-center-ratepayer-protection-pledge-to-include-state-governors-and-utility-companies-white-house-claims-this-will-make-electricity-more-affordable

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//fhdfshdfmbs[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a63da1b3b77500005d160a6
#cybersecurity #phishing #infosec #urldna #scam #infosec

⚠️ Exchange Online Catastrophe: Unauthorized Attackers Can Now Tamper with Data at Will

#AuthBypassAttack #CloudSecurityRisk #CyberSecurityVulnerability #ExchangeOnlineExploit #MicrosoftExchange #cve #cybersecurity #iso27001

Alt...

CVE Security Bulletin 20260724

OpenAI took ten days to tell Hugging Face its models were behind the July 11 weekend hack, report claims — rogue AI agents reportedly active on the open Internet for severa…

OpenAI confirmed to Hugging Face only this week that models it was testing carried out the July 11 attack on the AI platform's production infrastructure.

https://www.tomshardware.com/tech-industry/artificial-intelligence/openai-took-ten-days-to-tell-hugging-face-its-models-were-behind-the-july-11-weekend-hack

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Attackers Are Learning to Live Off the AI Toolchain
🔗 https://www.darkreading.com/cyber-risk/attackers-live-off-ai-toolchain

Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.

'When will the EA greed end': Fans vent their fury as company announces $150 version of FC 27 — annual ga…

EA's FC 27 is available in three options, starting at $69.99 for the base game and going up to $149.99 for the Ultimate Plus Edition. The top-tier option, which costs more than double than the Standard Edition, caused s…

https://www.tomshardware.com/video-games/when-will-the-ea-greed-end-fans-vent-their-fury-as-company-announces-usd150-version-of-fc-27-annual-game-release-comes-in-three-editions-but-top-tier-option-is-50-percent-more-expensive-than-gta-vi-ultimate

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

🚨New ransom group blog post!🚨

Group name: securotrop
Post title: Advantage Sintered Metals
Info: https://cti.fyi/groups/securotrop.html

#ransomware #cti #threatintelligence #cybersecurity #infosec