#rce — Public Fediverse posts

ReliaQuest confirms failed data-theft attack after ShinyHunters breach

Indicators extracted from public reporting. Source: https://reliaquest.com/blog/threat-spotlight-social-engineering-attempt-against-reliaquest-what-we-found/

Pulse ID: 6a8c6979b4e5bb3a99aa8883
Pulse Link: https://otx.alienvault.com/pulse/6a8c6979b4e5bb3a99aa8883
Pulse Author: CyberHunter_NL
Created: 2026-08-24 15:55:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Fake Microsoft security scans trick victims into uninstalling their antivirus

Indicators extracted from public reporting. Source: https://malwarebytes.slack.com/files/U09FV9L8JSY/F0BQW0XA19D/fake-microsoft-sysscan-refund-scam.md?origin_team=T9182B16E&origin_channel=C09JKS8HM4H

Pulse ID: 6a8c5be5f4b84055be8ce848
Pulse Link: https://otx.alienvault.com/pulse/6a8c5be5f4b84055be8ce848
Pulse Author: CyberHunter_NL
Created: 2026-08-24 14:57:41

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #MalWareBytes #Malware #Microsoft #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Indicators extracted from public reporting. Source: https://www.gendigital.com/blog/insights/research/wordlistloader-delivering-amatera-via-clearfake-campaigns

Pulse ID: 6a8c4d5527ae029719473a8b
Pulse Link: https://otx.alienvault.com/pulse/6a8c4d5527ae029719473a8b
Pulse Author: CyberHunter_NL
Created: 2026-08-24 13:55:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ClearFake #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Password #Passwords #RCE #Windows #Word #bot #CyberHunter_NL

Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor

Indicators extracted from public reporting. Source: https://www.seqrite.com/blog/operation-quicsilver-china-nexus-actor-targets-myanmar-diplomats-via-vhd-delivered-go-backdoor/

Pulse ID: 6a8c4d5c9c9beb2bfe6ccd86
Pulse Link: https://otx.alienvault.com/pulse/6a8c4d5c9c9beb2bfe6ccd86
Pulse Author: CyberHunter_NL
Created: 2026-08-24 13:55:40

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #China #CyberSecurity #Government #HTTP #HTTPS #ICS #InfoSec #Myanmar #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL

IBM patches two Power Systems Firmware flaws, CVE-2026-16687 and CVE-2026-16835, both CVSS 9.6, that grant full control of the managed system.

#IBM #PowerSystems #Firmware #CVE #RCE #AuthBypass #InfoSec #PatchNow

https://securityonline.info/ibm-power-firmware-cve-2026-16687/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft Teams Phishing Deploys New SynkLoader Malware to Steal Windows Passwords

Indicators extracted from public reporting. Source: https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/

Pulse ID: 6a8c40103bcca3b008e7fe69
Pulse Link: https://otx.alienvault.com/pulse/6a8c40103bcca3b008e7fe69
Pulse Author: CyberHunter_NL
Created: 2026-08-24 12:58:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Malware #Microsoft #MicrosoftTeams #OTX #OpenThreatExchange #Password #Passwords #Phishing #RCE #Windows #Word #bot #CyberHunter_NL

A PostgreSQL vulnerability (CVE-2026-14669, CVSS 8.8) with public PoC exploit code allows remote code execution via to_char. Update now.

#PostgreSQL #CVE202614669 #RCE #HeapOverflow #Database #InfoSec

http://securityonline.info/postgresql-vulnerability-cve-2026-14669/?utm_source=mastodon&utm_medium=jetpack_social

AmnesiaStealer Gives Hackers Hidden Control of Logged-In Browsers on Macs

Indicators extracted from public reporting. Source: https://blog.polyswarm.io/amnesiastealer-introduces-interactive-browser-session-hijacking-to-macos

Pulse ID: 6a8c3141aed28b3acf864eea
Pulse Link: https://otx.alienvault.com/pulse/6a8c3141aed28b3acf864eea
Pulse Author: CyberHunter_NL
Created: 2026-08-24 11:55:45

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #HTTP #HTTPS #InfoSec #Mac #MacOS #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Tracking PavinLoader across ClickFix and fake download campaigns

Indicators extracted from public reporting. Source: https://cyberowi.pl/lumma-stealer-renpy-fitgirl-osmiowarstwowy-loader/

Pulse ID: 6a8c314db7f4b8a03c8dc801
Pulse Link: https://otx.alienvault.com/pulse/6a8c314db7f4b8a03c8dc801
Pulse Author: CyberHunter_NL
Created: 2026-08-24 11:55:57

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

Fake CAPTCHA Tricks Mac Users Into Installing a Backdoor That Steals Passwords and Mines Crypto

Indicators extracted from public reporting. Source: https://notes.netbytesec.com/2026/08/anatomy-of-macos-clickfix-crimekit-that.html

Pulse ID: 6a8c154672cfbab8119b15ad
Pulse Link: https://otx.alienvault.com/pulse/6a8c154672cfbab8119b15ad
Pulse Author: CyberHunter_NL
Created: 2026-08-24 09:56:22

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CAPTCHA #CyberSecurity #HTML #HTTP #HTTPS #InfoSec #Mac #MacOS #NATO #NET #OTX #OpenThreatExchange #Password #Passwords #RCE #Word #bot #CyberHunter_NL

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

Indicators extracted from public reporting. Source: https://blog.talosintelligence.com/uat-10147-deploys-spectre-a-cross-platform-implant-with-linux-rootkit-and-byovd-capabilities/

Pulse ID: 6a8c073a62ba2c96744372ac
Pulse Link: https://otx.alienvault.com/pulse/6a8c073a62ba2c96744372ac
Pulse Author: CyberHunter_NL
Created: 2026-08-24 08:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #Linux #OTX #OpenThreatExchange #RCE #Rootkit #Talos #bot #CyberHunter_NL

Hackers Infect Android Car Screens Through Their Built-In Software Update System

Indicators extracted from public reporting. Source: https://securelist.com/android-head-unit-malware/121106/

Pulse ID: 6a8bf904b1da950db7f4adaf
Pulse Link: https://otx.alienvault.com/pulse/6a8bf904b1da950db7f4adaf
Pulse Author: CyberHunter_NL
Created: 2026-08-24 07:55:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #SecureList #bot #CyberHunter_NL

CVE-2026-63077 is a TeamCity unauthenticated RCE, now exploited in the wild with a public PoC. Australia's ACSC confirms active attacks.

#TeamCity #CVE202663077 #RCE #CyberSecurity #JetBrains #CISAKEV

https://securityonline.info/teamcity-cve-2026-63077/?utm_source=mastodon&utm_medium=jetpack_social

Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories

Indicators extracted from public reporting. Source: https://cybersecuritynews.com/cyber-security-newsletter-bulletin-august/

Pulse ID: 6a8b260da48fae71c37000fb
Pulse Link: https://otx.alienvault.com/pulse/6a8b260da48fae71c37000fb
Pulse Author: CyberHunter_NL
Created: 2026-08-23 16:55:41

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Azure #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #RansomWare #bot #CyberHunter_NL

Chińskie grupy APT wykorzystują podatność CVE-2026-59310 do masowych ataków na środowiska VMware vCenter

Zespół reagowania na incydenty firmy QUIRSO podczas analizy powłamaniowej serwera VMware vCenter natrafił na ślady globalnej kampanii, sterowanej najprawdopodobniej przez chińską grupę APT. Badania wykazały, że cyberprzestępcy wykorzystali krytyczną podatność CVE-2026-59310 (CVSS 9.8) w usłudze Syslog Server. Równolegle zidentyfikowali próby użycia drugiej luki CVE-2026-59309 (CVSS 9.8) jednak analitycy nie powiązali...

#WBiegu #Apt #Chiny #Cve #DirectoryTraversal #Rce #Vmware

https://sekurak.pl/chinskie-grupy-apt-wykorzystuja-podatnosc-cve-2026-59310-do-masowych-atakow-na-srodowiska-vmware-vcenter/

Hackers infect Android car head units with proxy botnet malware

Indicators extracted from public reporting. Source: https://securelist.com/android-head-unit-malware/121106/

Pulse ID: 6a89b871c96a8775a97fd5cd
Pulse Link: https://otx.alienvault.com/pulse/6a89b871c96a8775a97fd5cd
Pulse Author: CyberHunter_NL
Created: 2026-08-22 14:55:45

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #Proxy #RCE #SecureList #bot #botnet #CyberHunter_NL

Grok Zero-Click Attack Steals Chat Data Using Encrypted Prompt Injection

Indicators extracted from public reporting. Source: https://adversa.ai/blog/cryptographic-context-injection-grok-data-theft/

Pulse ID: 6a8901bb9c1388a4bafaf914
Pulse Link: https://otx.alienvault.com/pulse/6a8901bb9c1388a4bafaf914
Pulse Author: CyberHunter_NL
Created: 2026-08-22 01:56:11

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

2026-08-21: SmartApeSG ClickFix campaign leads to two RATs

Indicators extracted from public reporting. Source: https://www.malware-traffic-analysis.net/2026/08/21/index.html

Pulse ID: 6a889165b097c9fea9c95d72
Pulse Link: https://otx.alienvault.com/pulse/6a889165b097c9fea9c95d72
Pulse Author: CyberHunter_NL
Created: 2026-08-21 17:56:53

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTML #HTTP #HTTPS #InfoSec #Malware #NET #OTX #OpenThreatExchange #RAT #RCE #SmartApeSg #bot #CyberHunter_NL

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Indicators extracted from public reporting. Source: https://securelist.com/android-head-unit-malware/121106/

Pulse ID: 6a888313c9f88c699eae9eb1
Pulse Link: https://otx.alienvault.com/pulse/6a888313c9f88c699eae9eb1
Pulse Author: CyberHunter_NL
Created: 2026-08-21 16:55:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #Proxy #RCE #SecureList #bot #botnet #CyberHunter_NL

CVE-2026-77806, a CVSS 9.8 SPIP unauthenticated RCE, is exploited in the wild. A public Metasploit module and full details are now available.

#CVE202677806 #SPIP #RCE #ExploitedInTheWild #Metasploit #CMS

https://securityonline.info/cve-2026-77806-spip-unauthenticated-rce/?utm_source=mastodon&utm_medium=jetpack_social

Apache CloudStack patched 20 flaws. CVE-2026-50112, a critical bug, allows cross-tenant remote code execution as root on KVM hypervisor hosts.

#ApacheCloudStack #CVE202650112 #RCE #KVM #CloudSecurity #IaaS

https://securityonline.info/cve-2026-50112-cloudstack-rce/?utm_source=mastodon&utm_medium=jetpack_social

Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks

Indicators extracted from public reporting. Source: https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/

Pulse ID: 6a8867325d4b7e6ebca35a51
Pulse Link: https://otx.alienvault.com/pulse/6a8867325d4b7e6ebca35a51
Pulse Author: CyberHunter_NL
Created: 2026-08-21 14:56:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Chinese #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #Talos #bot #CyberHunter_NL

IBM AIX vulnerabilities include remote code execution flaws rated up to CVSS 9.9. Patch AIX 7.2, 7.3, and PowerVM VIOS 4.1 now.

#IBMAIX #RCE #VIOS #Vulnerability #PatchNow #InfoSec

https://securityonline.info/ibm-aix-vulnerabilities-rce/?utm_source=mastodon&utm_medium=jetpack_social

Hackers Use Fake Google Gemini Installer to Deploy Vidar Stealer and Steal Browser Credentials

Indicators extracted from public reporting. Source: https://telegram.me/share/url?url=https://cybersecuritynews.com/fake-google-gemini-installer/&text=Hackers+Use+Fake+Google+Gemini+Installer+to+Deploy+Vidar+Stealer+and+Steal+Browser+Credentials

Pulse ID: 6a883cd3267d21c3675a3a86
Pulse Link: https://otx.alienvault.com/pulse/6a883cd3267d21c3675a3a86
Pulse Author: CyberHunter_NL
Created: 2026-08-21 11:56:02

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #Google #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Telegram #Vidar #bot #CyberHunter_NL

Bandwidth-Sharing App Can Turn Employee Devices Into Gateways to Internal Networks

Indicators extracted from public reporting. Source: https://www.silentpush.com/blog/peer2profit-astroproxy/

Pulse ID: 6a8820a72c12cdd1a022136b
Pulse Link: https://otx.alienvault.com/pulse/6a8820a72c12cdd1a022136b
Pulse Author: CyberHunter_NL
Created: 2026-08-21 09:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Proxy #RCE #bot #CyberHunter_NL

The invisible passenger in your car

Indicators extracted from public reporting. Source: https://securelist.com/android-head-unit-malware/121106/

Pulse ID: 6a88129425e8190825aa2854
Pulse Link: https://otx.alienvault.com/pulse/6a88129425e8190825aa2854
Pulse Author: CyberHunter_NL
Created: 2026-08-21 08:55:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #SecureList #bot #CyberHunter_NL

DOJ Charges 17 Iranian Hackers in IRGC-Linked Campaign That Stole 31.5TB of Research Data

Indicators extracted from public reporting. Source: https://www.justice.gov/opa/pr/17-iranians-charged-conducting-massive-cyber-theft-campaign-behalf-islamic-revolutionary

Pulse ID: 6a880480823c6a8bf25fa3c0
Pulse Link: https://otx.alienvault.com/pulse/6a880480823c6a8bf25fa3c0
Pulse Author: CyberHunter_NL
Created: 2026-08-21 07:55:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #IRGC #InfoSec #Iran #Islam #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL

CVE-2026-32475 (CVSS 9.8) is an unauthenticated file upload flaw in Elementor Pro. It threatens complete site compromise across 6 million sites.

#ElementorPro #CVE202632475 #WordPress #RCE #FileUpload #WebSecurity

https://securityonline.info/cve-2026-32475-elementor-pro-file-upload/?utm_source=mastodon&utm_medium=jetpack_social