Here’s How Bad a Twitter Mega-Breach Would Be

Elon Musk laid off half the staff, and mass resignations seem likely. If nobody’s there to protect the fort, what’s the worst that could happen?...

Failures in Twitter’s Two-Factor Authentication System

Twitter is having intermittent problems with its two-factor authentication system: Not all users are having problems receiving SMS authentication codes, and those who rely on an authenticator app or physical authentication token to secure their Twitter account may not have reason to test the...

North Korean Hackers Targeting Europe and Latin America with Updated DTrack Backdoor

Hackers tied to the North Korean government have been observed using an updated version of a backdoor known as Dtrack targeting a wide range of industries in Germany, Brazil, India, Italy, Mexico, Switzerland, Saudi Arabia, Turkey, and the U.S. "Dtrack allows criminals to upload, download, start ...

Twitter’s SMS Two-Factor Authentication Is Melting Down

Problems with the important security feature may be some of the first signs that Elon Musk’s social network is fraying at the edges...

Elon Musk Introduces Twitter Mayhem Mode

Plus: US midterms survive disinformation efforts, the government names the alleged Lockbit ransomware attacker, and the Powerball drawing hits a security snag...

Elon Musk's Twitter Blue Verification Is a Gift to Scammers

Anyone can get a blue tick on Twitter without proving who they are. And it’s already causing a ton of problems...

Your Guide To Navigating Mastodon, an Alternative to Twitter

By Habiba Rashid In this article, we will address what is Mastodon and how it works. Basically, this is one of those "everything you should know about" articles. Enjoy! This is a post from HackRead.com Read the original post: Your Guide To Navigating Mastodon, an Alternative to Twitter...

Twitter’s Unpredictable Path Under Elon Musk

By Habiba Rashid Hints of the impending doom that was inevitable with Elon Musk’s $44 billion acquisition of Twitter began to… This is a post from HackRead.com Read the original post: Twitters Unpredictable Path Under Elon Musk...

CVE-2022-27510

creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-08 21:54:53+00:00| seen| Telegram/vIZjlKRmTVOu4u-rU3xW7TZC7oekoViYQG3Lcwz9AcFtsBE 2022-11-09 11:45:41+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus21/2022 2022-11-0...

CVE-2022-27516

creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-09 12:21:41+00:00| seen| https://t.me/truesecator/3678 2024-11-20 14:08:12+00:00| seen| https://twitter.com/i/web/status/1590326328553013248 2025-05-01 20:15:52+00:00| seen|...

CVE-2022-27513

creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-09 12:21:41+00:00| seen| https://t.me/truesecator/3678 2024-11-20 14:08:12+00:00| seen| https://twitter.com/i/web/status/1590326328553013248 2025-05-01 20:15:51+00:00| seen|...

Twitter’s Ex-Election Chief Is Worried About the US Midterms

Edward Perez says that “manufactured chaos” by bad actors will be even riskier thanks to Elon Musk’s own mayhem...

If Musk Starts Firing Twitter's Security Team, Run

What's next for the social network is anyone's guess—but here's what to watch as you wade through the privacy and security morass...

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet Forti...

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet Forti...

eventguru.me Cross Site Scripting vulnerability OBB-2990911

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

caarp.edu.au Cross Site Scripting vulnerability OBB-2988543

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3365

creationtimestamp| type| source ---|---|--- 2022-10-04 17:04:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/remotemouserce.rb 2025-01-28 00:32:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113903163811923872 2025-01-28...

A week in security (September 26 – October 2)

Last week on Malwarebytes Labs: Why almost everything we told you about passwords was wrong Two new Exchange Server zero-days in the wild Local government cybersecurity: 5 best practices Optus data breach "attacker" says sorry, it was a mistake Fast Company hacked to send obscene and racist...

ZINC weaponizing open-source software

In recent months, Microsoft has detected a wide range of social engineering campaigns using weaponized legitimate open-source software by an actor we track as ZINC. Microsoft Threat Intelligence Center MSTIC observed activity targeting employees in organizations across multiple industries includi...