Brutkey

TechNadu
@technadu@infosec.exchange

Wikipedia loses UK court challenge over Online Safety Act, but age checks may still be avoided.
Critics warn of privacy risks, data breaches & censorship if enforced.

Full story: https://www.technadu.com/wikipedia-loses-uk-online-safety-act-legal-challenge-but-age-checks-may-not-apply-yet/605878/

#OnlineSafetyAct #Wikipedia #Privacy #DigitalRights #Censorship

TechNadu
@technadu@infosec.exchange

🚨 ClickFix phishing hits Israeli orgs w/ fake Teams invites & PowerShell RAT chain.
Spoofed logins → Base64 PowerShell → Havoc C2 → Remote access & data theft.
Full analysis: ⬇️
https://www.technadu.com/clickfix-powershell-attack-chain-leverages-email-invite-lures-spoofed-ms-teams-login-pages/605870/

#ClickFix #Phishing #PowerShell #Infosec #CTI

TechNadu
@technadu@infosec.exchange

🚨 Cybersecurity Updates:

- Citrix NetScaler RCE exploited since May (CVE-2025-6543)
- Interlock ransomware cripples City of St. Paul
- Kimsuky APT leak exposes phishing kits
- DOJ dismantles BlackSuit ransomware, seizes $1.09M
- BreachForums may be under LE control

#Cybersecurity #Infosec #ThreatIntel

TechNadu
@technadu@infosec.exchange

🚨 ShinyHunters: BreachForums now under law enforcement control.

Allegations include:
Admin accounts seized (Hollow, ShinyHunters)
- Private data exposed
- Source code logs all user actions

Full story: ⬇️https://www.technadu.com/breachforums-takeover-allegedly-orchestrated-by-law-enforcement-shinyhunters-say/605845/
#BreachForums #ShinyHunters #CTI #Infosec

TechNadu
@technadu@infosec.exchange

BlackSuit ransomware (aka Royal) dismantled by DOJ & partners:
- 4 servers seized
- 9 domains down
- $1.09M crypto confiscated

Linked to 450+ attacks since 2022.

Full: ⬇️
https://www.technadu.com/blacksuit-ransomware-takedown-disables-9-domains-and-4-servers-seizes-1m/605841/

#Infosec #Cybersecurity #Ransomware #BlackSuit #APT

TechNadu
@technadu@infosec.exchange

Two hackers leaked 8.9 GB of alleged #Kimsuky APT data — phishing kits, ops logs, source code & Cobalt Strike tools targeting 🇰🇷 gov domains.

Full story: ⬇️
https://www.technadu.com/kimsuky-apt-hackers-exposed-in-alleged-breach-revealing-phishing-tools-and-operational-data/605836/

Will this slow them down or just force a rebuild?

#Infosec #Cybersecurity #APT #DataLeak

TechNadu
@technadu@infosec.exchange

🔍 GPT-5 can still be jailbroken.
Echo Chamber + storytelling bypassed safety.
1,000+ adversarial prompts showed vulnerabilities in the raw + basic configs.
Layered runtime guardrails remain essential.

#GPT5 #EchoChamber #Jailbreaks #AIPrompts #AISafety #PromptEngineering #LLM

TechNadu
@technadu@infosec.exchange

💰 Social media’s latest “money hack” is a crime — here’s why.

The scam: deposit a bad check into your own account, withdraw before it bounces.

The risk: Debt, banking bans, and criminal charges.

📌 Tip: Always verify trends. Search “[trend] scam” and cross-check multiple trusted sources.

Have you seen similar scams morphing into viral “advice” posts?

#CyberSecurity #fraudprevention #bankfraud #MastodonInfoSec

TechNadu
@technadu@infosec.exchange

The Interlock ransomware group claims responsibility for a cyberattack targeting the City of St. Paul, USA.

⚠️ Services may be disrupted as officials investigate the breach and work on recovery.

Cybercriminals continue to expand their targets from private enterprises to city infrastructure — raising concerns about municipal cybersecurity readiness.

#CyberAttack #Ransomware #StPaul #Interlock #CyberSecurity #InfoSec #HackingNews #DataBreach

TechNadu
@technadu@infosec.exchange

🚨 CVE-2025-6543 exploited in the Netherlands 🚨

NCSC warns Citrix NetScaler zero-day (memory overflow) breached critical orgs since May 2025.

Remote code execution

Wiped logs to hide attacks

Public Prosecution Service impacted

Patch → 14.1-47.46+ / 13.1-59.19+

#Infosec #Citrix #ZeroDay #NetScaler #CVE20256543