English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
_UncleHacker_'s profile picture. Security Engineer / CISSP / CEH

Uncle Hacker

@_UncleHacker_

Security Engineer / CISSP / CEH

242Posts 11Followers 29Following
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
40 m

CISA warns Akira ransomware is an imminent threat, citing CVE‑2024‑40766 (SonicWall) and VMware ESXi abuse, plus AnyDesk/Ngrok C2. Patch KEVs, enforce MFA, maintain offline backups. thecyberexpress.com/akira-ransomwa… #infosec #Ransomware

_UncleHacker_'s tweet card. The Akira ransomware group poses an “imminent threat to critical infrastructure,” CISA warns in an updated advisory.
Akira Ransomware Group Poses ‘Imminent Threat,’ CISA Warns
Source: thecyberexpress.com
0
0
0
0
32
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
4 h

A custom‑GPT SSRF can pull an Azure access token, giving an attacker cloud‑level access to OpenAI’s backend – reminds us to enforce outbound allow‑lists and tightly scope managed identities. securityweek.com/chatgpt-vulner… #infosec #SSRF #Azure #AIsec

_UncleHacker_'s tweet card. A researcher found a way to exploit an SSRF vulnerability related to custom GPTs to obtain an Azure access token. 
ChatGPT Vulnerability Exposed Underlying Cloud Infrastructure
Source: securityweek.com
0
0
0
0
14
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
7 h

WatchGuard Firebox CVE-2025-9242 (CVSS 9.3) enables unauthenticated RCE; actively exploited - patch now and review logs. securityweek.com/critical-watch… #infosec #CVE2025-9242 #WatchGuard

_UncleHacker_'s tweet card. Tracked as CVE-2025-9242 (CVSS score of 9.3), the flaw leads to unauthenticated, remote code execution on vulnerable firewalls.
Critical WatchGuard Firebox Vulnerability Exploited in Attacks
Source: securityweek.com
0
0
0
0
21
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
10 h

Amazon sees exploitation of Cisco ISE (CVE-2025-20337) and CitrixBleed 2 (CVE-2025-5777) as zero-days - patch now and monitor access. securityweek.com/cisco-ise-citr… #infosec #Cisco #Citrix #ZeroDay #CVE2025-20337

_UncleHacker_'s tweet card. Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days.
Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon
Source: securityweek.com
0
0
0
0
31
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
16 h

Chrome 142 and Firefox 145 patch high-sev bugs - sandbox bypasses and memory-corruption flaws. Deploy now to harden browsers before exploits appear. securityweek.com/firefox-145-an… #infosec #Chrome #Firefox

_UncleHacker_'s tweet card. Google and Mozilla have released fresh Chrome and Firefox updates that address multiple high-severity security defects.
Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases
Source: securityweek.com
0
0
0
0
17
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 12

DanaBot drops Windows v669 after Operation Endgame—modular banking/credential stealing adds C2 domains, update detections. securityaffairs.com/184548/malware… #infosec #Malware #DanaBot

_UncleHacker_'s tweet card. DanaBot returns after 6 months with a new Windows variant (v669), marking its comeback after being disrupted by Operation Endgame in May.
New Danabot Windows version appears in the threat landscape after May disruption
Source: securityaffairs.com
0
0
0
0
65
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 12

Phish emails spoof spam-filter alerts to steal credentials; users trust it. Enforce DMARC, train users verify alerts. malwarebytes.com/blog/news/2025… #infosec #phishing #SpamFilter

_UncleHacker_'s tweet card. Think twice before clicking that "Secure Message" alert from your organization's spam filters. It might be a phish built to steal your credentials.
Phishing emails disguised as spam filter alerts are stealing logins
Source: malwarebytes.com
0
0
0
0
11
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 12

Google sued Smishing Triad for the ‘Lighthouse’ kit that spawned >194k phishing domains – cheap kits enable big attacks; block domains and train users. securityweek.com/google-sues-ch… #infosec #phishing #SmishingTriad

_UncleHacker_'s tweet card. Google is targeting the threat group known as Smishing Triad, which used over 194,000 malicious domains in a campaign. 
Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit
Source: securityweek.com
0
0
0
0
6
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 12

China says the US hijacked LuBian's mining pool in 2020 by brute-forcing wallets built on a 32-bit PRNG - a reminder crypto services need real CSPRNGs or face huge theft and state-level fallout. thecyberexpress.com/china-cyberatt… #infosec #Crypto

_UncleHacker_'s tweet card. Officials maintain that all actions followed legal channels and were not connected to any cyberattack accusation.
China Cyberattack Accusation Links U.S. To Bitcoin Theft
Source: thecyberexpress.com
0
0
1
0
7
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 12

Microsoft’s Nov 2025 Patch Tuesday adds 63 fixes and an exploited Windows Kernel zero‑day (CVE‑2025‑62215) that lets an auth user race to SYSTEM – patch and watch for alerts. thecyberexpress.com/microsoft-nove… #infosec #CVE2025-62215 #PatchTuesday

_UncleHacker_'s tweet card. Microsoft’s November 2025 Patch Tuesday fixes 63 vulnerabilities, including an actively exploited zero-day.
Microsoft November 2025 Patch Tuesday Fixes 63 Flaws
Source: thecyberexpress.com
0
0
0
0
50
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 11

Microsoft patched the actively-exploited Windows kernel zero-day used for local privilege escalation - apply the update now across all Windows systems. securityweek.com/microsoft-patc… #infosec #ZeroDay #Windows

_UncleHacker_'s tweet card. Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products.
Microsoft Patches Actively Exploited Windows Kernel Zero-Day
Source: securityweek.com
0
0
0
0
50
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 11

A critical Samsung mobile zero‑day is being weaponised in the wild to drop LANDFALL spyware, giving attackers full device control – apply Samsung’s patch now and check for rogue profiles. malwarebytes.com/blog/news/2025… #infosec #Samsung #ZeroDay #MobileSecurity

_UncleHacker_'s tweet card. A critical vulnerability that affects Samsung mobile devices was exploited in the wild to distribute LANDFALL spyware.
Samsung zero-day lets attackers take over your phone
Source: malwarebytes.com
0
0
0
0
18
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 11

CISA adds a Samsung Android zero‑day used by LandFall spyware to its KEV list—agencies must patch now to stop nation‑state credential theft. infosecurity-magazine.com/news/cisa-zero… #infosec #ZeroDay #Samsung #LandFall

_UncleHacker_'s tweet card. CISA has demanded federal agencies patch a zero-day vulnerability affecting Samsung devices used in LandFall spyware attacks
CISA Adds Zero-Day Bug Used in Spyware Attacks to KEV
Source: infosecurity-magazine.com
0
0
0
0
17
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 11

Three runC bugs (CVE‑2025‑31133, ‑52565, ‑52881) allow bind‑mount of host files such as /proc/sysrq-trigger, enabling container escape – upgrade to runC v1.2.8/1.3.3/1.4.0‑rc.3. thecyberexpress.com/cve-2025-31133… #infosec #runC

_UncleHacker_'s tweet card. CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 let attackers escape containers and access hosts.
Critical RunC Flaws Reported: CVE-2025-31133, 52565 & 52881
Source: thecyberexpress.com
0
0
0
0
63
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 10

GlassWorm re‑appears in Open VSX and GitHub, infecting VS Code extensions post‑removal—shows third‑party extension stores are a weak link. securityaffairs.com/184427/malware… #infosec #SupplyChain #VSCode

_UncleHacker_'s tweet card. GlassWorm malware resurfaces in Open VSX and GitHub, infecting VS Code extensions weeks after its removal from the official marketplace.
GlassWorm malware has resurfaced on the Open VSX registry
Source: securityaffairs.com
0
0
0
0
10
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 10

China‑aligned UTA0388 weaponises LLM‑generated text in spear‑phishing, scaling email attacks. Update defenses to flag AI‑style language and monitor footprints. infosecurity-magazine.com/news/china-ali… #infosec #AIsec #Phishing

_UncleHacker_'s tweet card. Volexity has linked spear phishing operations to China-aligned UTA0388 in new campaigns using advanced tactics and LLMs
China-Aligned UTA0388 Uses AI Tools in Global Phishing Campaigns
Source: infosecurity-magazine.com
0
0
0
0
16
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 10

Cl0p lists ~30 firms compromised via Oracle EBS - unpatched EBS servers are still a prime ransomware vector; audit patches, segment networks and hunt web-shells. securityweek.com/nearly-30-alle… #infosec #OracleEBS #Ransomware #Cl0p

_UncleHacker_'s tweet card. The Cl0p website lists major organizations such as Logitech, The Washington Post, Cox Enterprises, Pan American Silver, LKQ Corporation, and Copeland.
Nearly 30 Alleged Victims of Oracle EBS Hack Named on Cl0p Ransomware Site
Source: securityweek.com
0
0
0
0
39
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 10

Europe’s first in‑orbit satellite CTF proved live telemetry and command links can be safely tested – a reminder satellite programs need security‑by‑design now. thecyberexpress.com/europe-hosts-f… #infosec #SpaceSecurity

_UncleHacker_'s tweet card. D-Orbit and mhackeroni held CTRLSpace CTF, Europe’s first in-orbit satellite cybersecurity competition, testing real spacecraft against cyber threats.
Europe Hosts First In-Orbit Satellite CTF Challenge
Source: thecyberexpress.com
0
0
0
0
9
_UncleHacker_'s profile picture.
Uncle Hacker
 @_UncleHacker_
Nov 10

OWASP’s AI Vulnerability Scoring System (AIVSS) adds autonomy and tool use to CVSS, letting you score AI risks like tool misuse and supply‑chain attacks. Map AI assets to AIVSS. thecyberexpress.com/owasp-ai-vulne… #infosec #AIsec #OWASP

_UncleHacker_'s tweet card. OWASP introduces the AI Vulnerability Scoring System (AIVSS) to evaluate Agentic AI risks and bridge the gaps left by traditional CVSS security models.
OWASP Launches AI Vulnerability Scoring Framework
Source: thecyberexpress.com
0
0
0
0
13

United States Trends

Something went wrong.


Something went wrong.