Possible Phishing on: ️hxxps[:]//nishanmuhammed[.]github[.]io/netflix-website-clone/ 🧬 Analysis at: https://urldna.io/scan/6a25e9f63b77500006e83157#cybersecurity #phishing #infosec #urldna #scam #infosec

New by me: CybersecKyle Security How-To Series: Home Network and Devices, Part 2 - Windows 11 and macOS Baselines You Can Live Withhttps://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-home-network-and-devices-part-2-windows-11-and-macos-baselines-you-can-live-with/#Cybersecurity #InfoSec #Windows #macOS #EndpointSecurity #CybersecKyleHowTo

SaaS-only SIEM fails the moment it assumes connectivity that doesn't exist.Air-gapped military networks. OT-isolated pipelines and power grids. Government research enclaves. Hard data residency mandates across the EU, GCC, and beyond.In each case the issue isn't the product — it's the architecture.New post: the four environments where cloud-first SIEM structurally cannot operate, and what actually works instead → https://graylog.org/post/the-four-environments-where-saas-only-siem-fails/#InfoSec #SIEM #OTSecurity #DataSovereignty

Possible Phishing on: ️hxxps[:]//ieeiorg[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/6a26d91f3b77500007555856#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS31543Location: Innsbruck, ATAdded: 2026-06-08T03:10#shodansafari #infosec

This dumb password rule is from Vistara.Password must contain:- 8 to 12 Characters.- At least one lowercase and uppercase letter.- At least one numeric character.- At least one special character (!, @, #, $, %, %, ^, &, +, =).Must not contain space, first or last name.https://dumbpasswordrules.com/sites/vistara/#password #passwords #infosec #cybersecurity #dumbpasswordrules

New."The emails contained links to GitHub repositories masquerading as technical assignments or cryptocurrency-related projects. The instructions encouraged the target to clone the repository and open it in an editor such as VS Code or Cursor. A pre-configured task executes silently when the user opens the repository folder in the IDE, triggering platform-specific loaders that decode embedded payloads on Linux, macOS, and Windows."Proofpoint: Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency https://www.proofpoint.com/us/blog/threat-insight/dont-fear-repo-unkdeaddrop-phishing-campaign-targets-developers-steal #threatresearch #infosec #phhishing #GitHub #Linux #MacOS #Windows11

This is a PR release. I suspect it will speak for many other cybersecurity companies soon enough. Is there a human in this loop? Just saying.Picus Is Now Anthropic-Verified, With Mythos-Class AI Behind Its Autonomous Pentesting https://www.picussecurity.com/resource/blog/picus-is-now-anthropic-verified-with-mythos-class-ai-behind-its-autonomous-pentesting #infosec

The money being poured on anything AI is bonkers.Security Week: Emphere Raises $2.1 Million for AI-Powered Vulnerability Remediation https://www.securityweek.com/emphere-raises-2-1-million-for-ai-powered-vulnerability-remediation/ @SecurityWeek #infosec

This dumb password rule is from MKB NetBankár.It only accepts lowercase letters, uppercase letters and numbers (anyother character counts as forbidden character).Also, if your password contains any invalid character, it will getmarked as "Identical to the former 10 passwords".To make it more fun, during the registration, it allows to se...https://dumbpasswordrules.com/sites/mkb-netbankar/#password #passwords #infosec #cybersecurity #dumbpasswordrules

Matrix: decentralised communication between ideal and compromiseWhen you say encrypted communication, most people think of Signal or Telegram. More advanced users will mention Session or SimpleX. But there are…https://vsx.global/matrix-decentralised-communication-between-ideal-and-compromise/#infosec #privacy #opensource #digitalsovereignty

Possible Phishing on: ️hxxps[:]//netflix-clone-gray-beta[.]vercel[.]app 🧬 Analysis at: https://urldna.io/scan/6a23a3233b77500007249fc0#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS135918Location: Dĩ An, VNAdded: 2026-05-29T21:45#shodansafari #infosec

Critical RCE in Everest Forms Pro Exploited to Compromise WordPress SitesThreat actors are exploiting a critical RCE vulnerability in Everest Forms Pro (CVE-2026-3300) to take over WordPress sites and separate campaigns use Stripe and Google Tag Manager to exfiltrate stolen credit card data.**If you use the Everest Forms Pro WordPress plugin, update it to version 1.9.13 or later ASAP, since attackers are actively exploiting a critical flaw to take over sites. After updating, check your WordPress user list for any unknown accounts and review your server logs for suspicious activity (such as connections from IPs 202.56.2.126 or 209.146.60.26).**#cybersecurity #infosec #attack #activeexploithttps://beyondmachines.net/event_details/critical-rce-in-everest-forms-pro-exploited-to-compromise-wordpress-sites-2-6-y-d-9/gD2P6Ple2L

CVE-2026-45777: CRITICAL OS command injection in Open XDMoD v9.5.0 – 11.0.2. Remote attackers can run system commands with web server privileges. Patch to 11.0.3 or apply fix now. No known exploitation. https://radar.offseq.com/threat/cve-2026-45777-cwe-78-improper-neutralization-of-s-3ce0a100 #OffSeq #CVE202645777 #infosec

Possible Phishing on: ️hxxps[:]//netflix-clone-nu-nine[.]vercel[.]app 🧬 Analysis at: https://urldna.io/scan/6a21ef213b77500008814bbc#cybersecurity #phishing #infosec #urldna #scam #infosec

ASN: AS6663Location: Budaörs, HUAdded: 2026-06-03T15:10#shodansafari #infosec

[CISA-2026:0605] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0605)CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.️ CVE-2026-28318 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-28318)- Name: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: SolarWinds- Product: Serv-U- Notes: https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318 ; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7 ; https://nvd.nist.gov/vuln/detail/CVE-2026-28318#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260605 #cisa20260605 #cve_2026_28318 #cve202628318

ASN: AS153121Location: Pekanbaru, IDAdded: 2026-05-28T11:20#shodansafari #infosec

Possible Phishing on: ️hxxps[:]//emma234234[.]github[.]io/plp-webtechnologies-classroom-july2025-july-2025-final-project-and-deployment-Final-Project-and-Depl/ 🧬 Analysis at: https://urldna.io/scan/6a2266003b775000052e732a#cybersecurity #phishing #infosec #urldna #scam #infosec