Possible Phishing on: ️hxxps[:]//135461223[.]site/832/f8e2b900-b6ed-4cde-8169-941cec40fe81/729558/x 🧬 Analysis at: https://urldna.io/scan/69fd75903b7750000560f7f2#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing on: ️hxxps[:]//btaccountupdate[.]w3spaces[.]com 🧬 Analysis at: https://urldna.io/scan/69fd51d53b775000089c12e2#cybersecurity #phishing #infosec #urldna #scam #infosec

RFC 1178 (1990): Choosing a Name for Your Computer.Three decades later, the advice still holds. #cybersecurity #infosec #security #rfc #rfc1178

Buried inside a partisan ICE funding push is a $1 billion ask for physical security at Trump's White House ballroom. That number should make every security professional stop and think.When enormous security budgets get attached to politically charged legislation,...Read more: https://steelefortress.com/xyqp2xEncryption #ThreatIntel #DataPrivacy #Cybersecurity #Privacy

Possible Phishing on: ️hxxps[:]//uniicatt[.]weebly[.]com/ 🧬 Analysis at: https://urldna.io/scan/69fce9113b775000089c0747#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing on: ️hxxps[:]//ing-banco[.]site44[.]com/ing[.]html 🧬 Analysis at: https://urldna.io/scan/69fbabec3b77500006ea804c#cybersecurity #phishing #infosec #urldna #scam #infosec

iHack 2026 — 30 mai | 4 villes | Inscriptions ouvertesConférences en cybersécurité le jour. CTF en soirée. Le tout, simultanément à Québec, Montréal, Chicoutimi et Trois-Rivières — présenté par notre partenaire principal ITCloud. Des conférenciers de la communauté CTF débutant-friendly dès 18h30 — laptop requis, expérience non requise. Gratuit (ou presque). Communautaire à 100%. Choisissez votre ville et inscrivez-vous :https://hackfest.ca/ihack?utm_source=mastodon&utm_medium=socmed&utm_campaign=ihack_6mai2026&utm_id=ihack_6mai2026 #Cybersecurity #infosec

Attackers adopt JavaScript runtime Bun to spread NWHStealerhttps://www.malwarebytes.com/blog/threat-intel/2026/05/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealerRead on HackerWorkspace: https://hackerworkspace.com/article/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealer#malware #databreach #cybersecurity

LABScon25 Replay | Connect to the Foreign Entity to Enhance Your User Experience | FitzPatrickhttps://www.youtube.com/watch?v=rrgUND-uVAw#cybersecurity #privacy #iotsecurity

Iranian cyber espionage disguised as a Chaos Ransomware attackhttps://securityaffairs.com/191765/breaking-news/iranian-cyber-espionage-disguised-as-a-chaos-ransomware-attack.htmlRead on HackerWorkspace: https://hackerworkspace.com/article/iranian-cyber-espionage-disguised-as-a-chaos-ransomware-attack#ransomware #databreach #cybersecurity

Spectra Analyze in Action: How to Retrohunt Telegram Bots | RL Bloghttps://www.reversinglabs.com/blog/spectra-analyze-retrohunting-telegram-botsRead on HackerWorkspace: https://hackerworkspace.com/article/spectra-analyze-in-action-how-to-retrohunt-telegram-bots-rl-blog#malware #cybersecurity #incidentresponse

ClickFix campaign uses fake macOS utilities lures to deliver infostealers | Microsoft Security Bloghttps://www.microsoft.com/en-us/security/blog/2026/05/06/clickfix-campaign-uses-fake-macos-utilities-lures-deliver-infostealers/Read on HackerWorkspace: https://hackerworkspace.com/article/clickfix-campaign-uses-fake-macos-utilities-lures-to-deliver-infostealers-microsoft-security-blog#malware #cybersecurity #threatintelligence

CloudZ Malware Abuses Phone Link to Steal SMS OTPshttps://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/Read on HackerWorkspace: https://hackerworkspace.com/article/cloudz-malware-abuses-phone-link-to-steal-sms-otps#malware #cybersecurity #threatintelligence

Possible Phishing on: ️hxxps[:]//nbm3suspi76activity[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/69fb6d4d3b77500002406a52#cybersecurity #phishing #infosec #urldna #scam #infosec

New ransom group blog post!Group name: kairosPost title: Houk Air ConditioningInfo: https://cti.fyi/groups/kairos.html#ransomware #cti #threatintelligence #cybersecurity #infosec

(wordfence.com) Critical Authenticated Arbitrary File Upload Vulnerability Patched in Slider Revolution WordPress PluginCritical RCE vulnerability (CVE pending) in Slider Revolution WordPress plugin (7.0.0–7.0.10) allows authenticated attackers with subscriber+ access to upload malicious files via flawed `library.load.image` AJAX action. Exploitation enables webshell deployment and full site compromise.In brief - A severe authenticated arbitrary file upload flaw in Slider Revolution (5M+ installs) permits RCE. Patch to 7.0.11 immediately; WordFence users are protected via firewall rules.Technically - The vulnerability stems from insufficient validation in `_check_file_path()` within `RevSliderAddons`, allowing attackers to bypass extension checks via `data[0][id]` parameter. The `download_url()` function in `RevSliderLoadBalancer` writes attacker-supplied files to public directories. Requires leaked nonce and subscriber access. Partial fix in 7.0.10; full remediation in 7.0.11.Source: https://www.wordfence.com/blog/2026/05/authenticated-arbitrary-file-upload-vulnerability-patched-in-slider-revolution-7-wordpress-plugin/#Cybersecurity #ThreatIntel

(microsoft.com) Evolution of ClickFix: How Threat Actors Exploit macOS Terminal Commands to Distribute InfostealersIn brief - Threat actors are exploiting macOS Terminal commands via social engineering to distribute infostealers (MacSync, SHub Stealer, AMOS). These attacks bypass Gatekeeper, harvest sensitive data (Keychain, crypto wallets, browser creds), and replace legitimate wallet apps with trojanized versions. High-risk campaign leveraging native utilities for stealth and persistence.Technically - The ClickFix campaign uses multi-stage execution paths (loader, script, helper) to deploy malware via obfuscated Terminal commands. Techniques include:- Gatekeeper bypass via `curl`/`osascript` for in-memory execution- Persistence via LaunchAgents/Daemons- Data exfil via HTTP POST/Telegram C2- Anti-VM checks in Mach-O payloads- Dynamic C2 discovery (Telegram fallback)- Cryptocurrency wallet trojanizationMonitor Terminal activity, outbound downloads, and script execution to detect.Source: https://www.microsoft.com/en-us/security/blog/2026/05/06/clickfix-campaign-uses-fake-macos-utilities-lures-deliver-infostealers/#Cybersecurity #ThreatIntel

@argv_minus_one That’s the million-dollar question. No single signal is 100% foolproof, which is why Zero Trust relies on contextual telemetry. It’s not just 'is the device clean?' but 'is the behavior consistent?' We look at hardware-backed keystores (TPM), mTLS, and behavioral analytics. If the 'signal' is perfect but the user is accessing 500 records from a new IP at 3 AM, the trust score drops to zero. Verification is a continuous conversation, not a one-time gate.

New ransom group blog post!Group name: incransomPost title: AerodiagnosticsInfo: https://cti.fyi/groups/incransom.html#ransomware #cti #threatintelligence #cybersecurity #infosec

(chainalysis.com) The New Rails: Navigating Blockchain Infrastructure Trade-offs for Institutional Tokenization of Real World AssetsInstitutional RWA tokenization demands careful blockchain selection due to trade-offs in speed, cost, contagion risk, illicit exposure, and governance. No single network excels across all dimensions—alignment with asset requirements is critical.In brief - Financial institutions adopting RWA tokenization must navigate blockchain infrastructure trade-offs, balancing compliance, liquidity, and operational risks. Ethereum L2s (Arbitrum, Base) and Solana lead in regulated and high-frequency use cases, respectively, but systemic vulnerabilities persist.Technically - On-chain analysis of 9 networks reveals key metrics: TRON and post-Dencun Ethereum offer cost predictability (low kurtosis), while Solana leads in throughput (TPS) and Arbitrum in finality. Contagion risk is highest in Solana due to CEX liquidity flows; illicit exposure is lowest in Ethereum, Solana, and Base. Governance varies from Bitcoin’s immutability to PoS oversight. Compliance tools (Chainalysis KYT, address screening) are essential to mitigate illicit exposure across networks.Source: https://www.chainalysis.com/blog/blockchain-infrastructure-tradfi-tokenization/#Cybersecurity #ThreatIntel