9 results for “cybele”
The Keys Are in the Browser: Secret Exposure Across AI-Built Websites
Cyble scanned more than 1.3 million newly registered domains and found AI-built websites leaking live secrets to the browser, including OpenAI keys, Stripe keys and database tokens. The research covers secret exposure across websites built with AI tools. https://cyble.com/blog/secret-exposure-across-ai-built-websites/
APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network
Russian cyberespionage group APT28 used the Hookedge backdoor to reach a naval shipbuilder’s network in a NATO member state, steal login material and set up a hidden SSH tunnel. The intrusion lasted at least two months, according to a report by Symantec’s Threat Hunter Team. The report does not name the shipbuilder or the country. […] The post APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network appeared first on Cyber Security News .
Pulse ID: 6ad8d28131ab37ffdf98f924
Pulse Link: https://otx.alienvault.com/pulse/6ad8d28131ab37ffdf98f924
Pulse Author: CyberHunter_NL
Created: 2026-10-21 14:56:01
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
https://www.europesays.com/videos/116296/ Why web attacks show we’re all vulnerable #CriticalInfrastructure #CyberAttack #CyberAttackExplained #CyberAttackNews #CYBERATTACKS #CyberDefence #CyberEspionage #CYBERSECURITY #CyberThreats #CyberWarfare #Cybercrime #cybersecurity #DataBreach #DigitalSecurity #hackers #hacking #InternetSecurity #OnlineSecurity #ransomware #RansomwareAttacks #SkyNews
https://www.europesays.com/africa/484891/ Korea Ranks Second in Share of Outdated PHP Servers, Behind Algeria #Algeria #CybelAngel #CyberCrisisAlert #OutdatedPHPVersions #PHPVulnerability #RemoteCodeExecution #ServerSecurityPatch #Shodan
Kaspersky uncovered the BlackX UEFI bootkit APT41 campaign bypassing Secure Boot via Baton Drop to spy on Central Asian diplomatic agencies.
#BlackXUEFIBootkit #APT41 #BlackLotus #Kaspersky #CyberEspionage #SecureBoot #Cybersecurity
APT28 used the Hookedge backdoor, SSH tunnels, and a new loader to spy on a naval shipbuilder and defense firms in two NATO countries.
#APT28 #FancyBear #Hookedge #NATO #CyberEspionage #Russia #Symantec #Cybersecurity
In Operation FlashHole, the Lazarus Group used AI-made lure sites, CrossWeb EX, and GitHub C2 to spy on South Korean firms. Here is how.
#Lazarus #OperationFlashHole #NorthKorea #SouthKorea #APT #CyberEspionage #Kaspersky #Cybersecurity
New BlackX UEFI bootkit exploiting Baton Drop
In early 2026, a sophisticated APT campaign targeting diplomatic agencies in Tajikistan, Uzbekistan, and Turkmenistan deployed BlackX, a UEFI bootkit similar to the notorious BlackLotus. The bootkit exploits the Baton Drop vulnerability (CVE-2022-21894) to bypass Secure Boot and install malicious drivers into the Windows kernel. Despite patches being available since 2023, victims remained vulnerable because the mitigation requires manual activation by administrators. The campaign deploys cyberespionage payloads including a RAT using cloud storage for command and control, and OxiDLLRunner, a Rust-based payload. The attack demonstrates APT actors borrowing techniques from cybercrime operations, as BlackX appears to be reverse-engineered from BlackLotus code. Attribution points to APT41 based on code similarities and tactics matching previous campaigns.
Pulse ID: 6ad9df071ab39972490f947b
Pulse Link: https://otx.alienvault.com/pulse/6ad9df071ab39972490f947b
Pulse Author: AlienVault
Created: 2026-10-22 10:01:43
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
‼️ Reminder that MontréHack is today ‼️
This track is one of UnitedCTF 2026’s challenge tracks! We’ll explore what UEFI applications can really do to one another, and dig out flags buried in the chain.
Ce Challenge fait partie du UnitedCTF2026! Nous explorerons les interactions entre les applications UEFI et dénicherons les flags dissimulés au sein de la chaîne.
📆 October 21st 6:00pm to 9:00pm
📍 CyberEco(Near ÉTS)
📜Details: https://montrehack.ca/2026/10/21/matryoshka-security-system.html
https://discord.gg/5AxnB866V?event=1559679884803182643