1/3 Fortinet warns of a critical zero-day (#CVE202455591) in FortiOS & FortiProxy, exploited to hijack firewalls and gain super-admin access. Affected versions: 7.0.0-7.0.16, 7.0.0-7.0.19, 7.2.0-7.2.12. #Fortinet #ZeroDay #CyberSecurity bleepingcomputer.com/news/se…

🚨🚨🚨BREAKING - New data leak site by Scattered LAPSUS$ Hunters exposes Salesforce customers. Dozens of global companies involved in a large-scale extortion campaign. Scattered LAPSUS$ Hunters claims to have breached Salesforce, exfiltrating ~1B records. They accuse Salesforce of lacking 2FA and OAuth protections, say over 100 instances were compromised, and threaten data leaks, lawsuits, and technical disclosures. Complete list of affected companies and reported exfiltration: FedEx - 1.1TB Aeroméxico - 172.95GB Qantas Airways - 153GB UPS - 91.34GB HMH - 88GB Vietnam Airlines - 63.62GB Toyota Motor Corporation - 64GB Stellantis - 59GB Air France & KLM - 51GB Republic Services - 42GB Adidas - 37GB Disney/Hulu - 36GB Canvas by Instructure - 35GB Instacart - 32GB McDonald's - 28GB TripleA - 23GB TransUnion - 22GB Home Depot - 19.43GB Google AdSense - 19GB 1-800Accountant - 18GB Cisco - 5.6GB Marriott - 7GB Walgreens - 11GB Kering (Gucci, Balenciaga, etc.) - 10GB Petco - 9.9GB ASICS - 9GB Pandora - 8.3GB KFC - 1.3GB Saks Fifth - 1.1GB GAP Inc. - 1GB CarMax - 1.7GB Cartier - 1.4GB Chanel - 2GB Albertsons (Jewel Osco, etc.) - 2GB Engie Resources (Plymouth) - 3GB Puma - 3.1GB HBO Max - 3.2GB Fujifilm - 155MB IKEA - 13GB Note: All victims are listed with ransom deadlines set for 10 October 2025. Discover more at hackrisk.io

🚨 CISA adds Qlik Sense HTTP tunneling vulnerability #CVE202348365 to #KEV catalog. This flaw lets attackers escalate privileges and execute HTTP requests on backend servers hosting Qlik Sense. #Cybersecurity #Infosec

🚨 CISA adds critical #BeyondTrust vulnerability #CVE202412686 to #KEV catalog, warning of potential exploitation. This flaw allows admins to upload malicious files, enabling OS command execution as the site user #Cybersecurity

🚨 #CISA released advisory on 2023 #Top #Routinely #Exploited Vulnerabilities. These are frequently targeted by attackers, leading to critical #breaches. Here are the top 15 vulnerabilities to secure against: cisa.gov/news-events/cyberse… #Vulnerabilities

🚨Microsoft’s #Nov 2024 #PatchTuesday addresses 87 CVEs, with 4 critical and 4 zero-day vulnerabilities, including 2 exploited in the wild: #CVE202443451 (NTLM Hash Disclosure) exploited for NTLM spoofing #CVE202449039 (Task Scheduler EoP) allows RCE on vulnerable systems. #Patch

🚨 Attackers are actively exploiting a critical FortiOS RCE vulnerability #CVE202423113, which could allow unauthenticated code execution on unpatched devices. Update ASAP! #cybersecurity #infosecurity labs.watchtowr.com/fortinet-…

The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens. bleepingcomputer.com/news/se…

Security chips produced by Infineon Technologies have been found vulnerable to side-channel attacks. #Crypto #CyberSecurity #infosec #yubikey cnews.link/researchers-clone…

VMware Fusion contains a high-severity code execution vulnerability, as disclosed by Broadcom. #MacOS #Apple #BigTech #CyberSecurity #infosec cnews.link/vmware-on-macos-a…

This video👇is of Tigran Gambaryan, the former US federal agent who led many of the biggest crypto crime cases in history. He's being charged in Nigeria with money laundering and tax evasion, entirely for the actions of his employer, Binance. He's now been jailed and denied medical care for a herniated disc in his back that requires surgery. Here you can see that Nigerian officials have even denied him the use of a wheelchair or any help walking into the courtroom in an attempt to avoid embarrassing photos/videos of his condition. Where is the the US @StateDept? Where is @SecBlinken? Where is @StateSPEHA Roger D. Carstens, for whom this case should have met the criteria to be treated as a hostage situation months ago? Why isn't the US doing more to help this American citizen and former civil servant? It's long past time to bring Tigran home.