Finally found an unauthenticated RCE for 2025. (No joke, took only 5 minutes to find.) Exploit confirmed & session obtained.

How FIN6 Exfiltrates Files Over FTP youtu.be/SbZ7JUII-SQ #redteam #CyberSecurity

It appears that the source code for 4chan has been leaked. kiwifarms.st/threads/soyjak…

🚨🚨 BreachForums Allegedly Seized Again – IntelBroker Reportedly Arrested 🚨🚨 Unverified claims circulating in Telegram channels suggest that the notorious data leak platform BreachForums may have been taken down once again. A message posted in one of the groups alleges that

4Chan was hacked about 12 hours ago with leaked source code. https://kiwifarms[.]st/threads/soyjak-party-the-sharty.145349/page-1468#post-21102686

BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.

4Chan hacked, BreachForums down, MITRE CVE contract ending. Just another Tuesday in infosec.

By cutting what amounts to penny costs, the Trump administration will effectively (at least temporarily) cripple the global cybersecurity system — CVE. What is CVE? It is a global system for identifying and tracking vulnerabilities that has served as a common language for

NEW: In an 11th hour move, CISA spokesperson says it extended the contract for the MITRE-backed CVE Program last night:

Update: the extension is 11 months, I’m told.

Billions worth of system prompts are exposed in a single repo. The scale of IP leaks is remarkable in the LLM era.

Attention Kali Linux users! In the coming day(s), apt update is going to fail for pretty much everyone. The reason? We had to roll a new signing key for the Kali repository. You need to download and install the new key manually: offs.ec/4lUEtak

⚠️ Warning ⚠️ Kali has a new signing key! 🔑 (Manual action required! 🫣) If you are getting: > Missing key 827C8569F2518CC677FECA1AED65462EC8D5E4C5, which is needed to verify signature. You need to download and install the new key manually, here’s the one-liner: ``` sudo

No

We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-the…

Very proud to announce that the Windows Subsystem for Linux is now open source! blogs.windows.com/windowsdevelop…

Today we unveil BadSuccessor - a new no-fix Active Directory privilege escalation technique. We will explore the recently introduced dMSA feature, and show how it enables turning a very common, seemingly benign permission, into a full domain take over. akamai.com/blog/security-…

On Monday I captured 225,000 photos of the moon to create this 500 gigabyte composite showing more detail and color depth than usually possible through a telescope. Here's a thread about how it was captured, but make sure to load in 4k and zoom in first!

Shoutout to TheMando. Loved the pilot episode of DFIR Chronicles, looking forward to the next ones. github.com/ablescia/DFIR-…