SUSE CVE-2025-7370

Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430note2494090...

Ransomware negotiator investigated over criminal gang kickbacks

If someone is going to negotiate with criminals for you, that person should at least be on your side. That might not have been the case at Digital Mint, a ransomware negotiation company where one worker allegedly went rogue. According to Bloomberg, Digital Mint is cooperating with the US Departme...

CVE-2025-24335

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:22:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsycmsiqng2a...

Qantas: Breach affects 6 million people, “significant” amount of data likely taken

Australia's largest airline Qantas has confirmed that cybercriminals have gained access to a third party customer servicing platform that contained 6 million customer service records. Qantas says the breach occurred after a cybercriminal targeted a call centre and managed to gain access to the...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

About This Project This project was developed as part of the...

How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker

FBI tracked IntelBroker as UK’s Kai West using an email address, crypto trails, YouTube activity and forum posts after dozens of high-profile data breaches and darknet activity...

The Discovery, Disclosure, and Investigation of CVE-2024-25825

CVE-2024-25825 is a vulnerability found in FydeOS. This thesis describes its discovery, disclosure, and its further investigation in connection to a nation state actor. The vulnerability is CWE-1392: Use of Default Credentials, CWE-1393: Use of Default Password, and CWE-258: Empty Password in...

GHSA-XQ5X-WGCM-3P33

creationtimestamp| type| source ---|---|--- 2025-06-18 22:41:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18814 2025-06-18 22:53:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114706821031041429 2025-06-18 23:00:49+00:00| published-proof-of-concept|...

CVE-2025-38046

creationtimestamp| type| source ---|---|--- 2025-06-18 11:34:47+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lruw43asmw2n 2025-06-18 11:35:03+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lruw4bg6jda2...

GHSA-FX2C-96VJ-985V

creationtimestamp| type| source ---|---|--- 2025-06-17 12:51:43+00:00| seen| https://gist.github.com/safer-bot/74e21949896b589baa948e9ed6f5748a 2025-07-16 22:54:47+00:00| seen| https://gist.github.com/safer-bot/854db19b37d85f8ecc0537be2939d6c9...

Zoomcar Data Breach Exposes Personal Info of 8.4 Million Users

Zoomcar confirms 2025 breach affecting 8.4M users, echoing its 2018 data leak. Personal info exposed, financial data safe, investigation ongoing...

ContextBuddy: AI-Enhanced Contextual Insights for Security Alert Investigation (Applied to Intrusion Detection)

Modern Security Operations Centres SOCs integrate diverse tools, such as SIEM, IDS, and XDR systems, offering rich contextual data, including alert enrichments, flow features, and similar case histories. Yet, analysts must still manually determine which of these contextual cues are most relevant...

How and where to report an online scam

If you've been scammed it's really important to report it, if you can, in order to help prevent others falling for the same scam, and give authorities a chance to catch the criminal who did it. The methods in which to report a scam varies according to the country you're in, the platforms you're...

GHSA-47M2-26RW-J2JW

creationtimestamp| type| source ---|---|--- 2025-06-07 19:58:28+00:00| seen| https://bsky.app/profile/andrewnez.mastodon.social.ap.brid.gy/post/3lr253dgeazj2...

Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam

India's Central Bureau of Investigation CBI has revealed that it has arrested six individuals and dismantled two illegal call centers that were found to be engaging in a sophisticated transnational tech support scam targeting Japanese citizens. The law enforcement agency said it conducted...

ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach

ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor. "ConnectWise recently learned of suspicious activity within our environment that we believe wa...

Porn sites probed for allegedly failing to prevent minors from accessing content

Four porn sites are being investigated by the European Commission under its Digital Services Act DSA for allegedly failing to verify its users' ages properly. The Commission, which drafts and enforces the European Union's laws, is focusing the lens on Pornhub, Stripchat, XNXX, and XVideos with th...

OneDrive File Picker Flaw Gives Apps Full Access to User Drives

A recent investigation by cybersecurity researchers at Oasis Security has revealed a data overreach in how Microsoft’s OneDrive…...

Pakistan Arrests 21 in ‘Heartsender’ Malware Service

Authorities in Pakistan have arrested 21 individuals accused of operating "Heartsender ," a once popular spam and malware dissemination service that operated for more than a decade. The main clientele for HeartSender were organized crime groups that tried to trick victim companies into making...

CVE-2025-27700

creationtimestamp| type| source ---|---|--- 2025-05-27 15:49:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17656 2025-05-27 17:01:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq65w2v5id22...