NEW | Hunt across all abuse.ch platforms with one simple query
Discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool.
Test it out here hunting.abuse.ch - and happy hunting 🔍
Discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool.
Test it out here hunting.abuse.ch - and happy hunting 🔍
Paragon Partition Manager contains five memory vulnerabilities within its BioNTdrv.sys driver that allow for privilege escalation and denial-of-service (DoS) attacks
https://kb.cert.org/vuls/id/726882
https://kb.cert.org/vuls/id/726882
www.kb.cert.org
CERT/CC Vulnerability Note VU#726882
Paragon Software Hard Disk Manager product line contains five memory vulnerabilities within its BioNTdrv.sys driver that allow for privilege escalation and denial-of-service (DoS) attacks
More user data in “our” cloud
https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-365-disaster-recovery-plus-extends-cloud-pc-resilience/4387492
https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-365-disaster-recovery-plus-extends-cloud-pc-resilience/4387492
TECHCOMMUNITY.MICROSOFT.COM
Windows 365 Disaster Recovery Plus extends Cloud PC resilience - Windows IT Pro Blog
Windows 365 Disaster Recovery Plus recovers Cloud PCs quickly, with preallocated capacity in case of an outage.
Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS Systems
https://socket.dev/blog/typosquatted-go-packages-deliver-malware-loader
https://socket.dev/blog/typosquatted-go-packages-deliver-malware-loader
Socket
Typosquatted Go Packages Deliver Malware Loader Targeting Li...
Malicious Go packages are impersonating popular libraries to install hidden loader malware on Linux and macOS, targeting developers with obfuscated pa...
https://www.mobile-hacker.com/2025/03/05/evilloader-unpatched-telegram-for-android-vulnerability-disclosed/
P.S. Thx for the link dear Alex)
P.S. Thx for the link dear Alex)
Mobile Hacker
EvilLoader: Unpatched Telegram for Android Vulnerability Disclosed
A newly disclosed in Telegram for Android, dubbed EvilLoader, allows attackers to disguise malicious APKs as video files, potentially leading to unauthorized malware installations on users' devices.
60 Million downloads with Vapor from Google Play
Vaport report:
- https://go.integralads.com/rs/469-VBI-606/images/AMER_VAPOR_THREAT_REPORT_IAS.pdf
Vaport report:
- https://go.integralads.com/rs/469-VBI-606/images/AMER_VAPOR_THREAT_REPORT_IAS.pdf
Linux-Privilege-Escalation-Cheat.pdf
1.3 MB
Linux Privilege Escalation Cheat
Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
https://blog.cloudflare.com/open-sourcing-openpubkey-ssh-opkssh-integrating-single-sign-on-with-ssh/
https://blog.cloudflare.com/open-sourcing-openpubkey-ssh-opkssh-integrating-single-sign-on-with-ssh/
The Cloudflare Blog
Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project. This enables users and organizations to configure SSH to work with single sign-on technologies like OpenID Connect, removing the need to manually manage & configure SSH keys without…
european_salary_analytics.pdf
13.8 MB
European IT Salary Analysis
Red Teaming with LLMS.pdf
41.1 MB
Practical Techniques for Attacking AI Systems
wsrp4echo - 0day Chain Vulnerability
Web Services for Remote Portlets (WSRP) is an OASIS-approved network protocol standard designed for communications with remote portlets. Uses in:
- Oracle WebCenter
- IBM WebSphere
- Microsoft SharePoint
https://medium.com/@aryanchehreghani/wsrp4echo-0day-chain-vulnerability-fd2c395dc45b
P.S. Thx
Web Services for Remote Portlets (WSRP) is an OASIS-approved network protocol standard designed for communications with remote portlets. Uses in:
- Oracle WebCenter
- IBM WebSphere
- Microsoft SharePoint
https://medium.com/@aryanchehreghani/wsrp4echo-0day-chain-vulnerability-fd2c395dc45b
P.S. Thx
Reaza for the link 🤝Medium
wsrp4echo - 0day Chain Vulnerability
Message From wsrp4echo :
Hello. I’m wsrp4echo. I’m not just a vulnerability — I’m a chain reaction.
Born not from a bug, but from trust…
Hello. I’m wsrp4echo. I’m not just a vulnerability — I’m a chain reaction.
Born not from a bug, but from trust…
OpenVPN Vulnerability Let Attackers Crash Servers & Execute Remote Code
https://cybersecuritynews.com/openvpn-vulnerability-let-attackers-crash-servers/
P.S. Thx Denis for the link🫶
https://cybersecuritynews.com/openvpn-vulnerability-let-attackers-crash-servers/
P.S. Thx Denis for the link
Please open Telegram to view this post
VIEW IN TELEGRAM
Cyber Security News
OpenVPN Vulnerability Let Attackers Crash Servers & Execute Remote Code
The OpenVPN community released version 2.6.14 on April 2, 2025, specifically to address this server-side vulnerability.