Brutkey

TechNadu
@technadu@infosec.exchange

🚨 Microsoft August 2025 Patch Tuesday — 107 flaws, 13 critical.
Exchange CVE-2025-53786 enables cloud infiltration; SharePoint RCE chaining risk.

Experts urge urgent MFA & Kerberos patching.
Full Article Below ⬇️ https://www.technadu.com/microsoft-august-patch-tuesday-fixes-critical-exchange-sharepoint-and-kerberos-flaws/605968/

#CyberSecurity #Microsoft #PatchTuesday

TechNadu
@technadu@infosec.exchange

🚨 NYT report alleges Russia may be behind a breach of the U.S. federal court filing system, accessing sealed national security cases. Experts warn attribution remains unverified & other state actors may be involved.

Details 👉 https://www.technadu.com/nyt-report-links-federal-court-breach-to-russia-cites-unnamed-sources/605955/

#CyberSecurity #DataBreach #Russia #US #FederalCourt #Infosec

TechNadu
@technadu@infosec.exchange

🚨 Microsoft Hybrid Exchange Vulnerability – CVE-2025-53786 🚨
CISA issues Emergency Directive — flaw allows on-prem admins to escalate into Exchange Online → domain takeover.
✅ Inventory servers
✅ Patch (April 2025 Hotfix)
✅ Remove unused hybrid configs
✅ Run Health Checker

#CISA #Microsoft #Exchange #HybridSecurity #CVE202553786 #Infosec

TechNadu
@technadu@infosec.exchange

🚨 Top Cybersecurity Updates:
- Manpower breach hits 144K+
- CISA adds IE, Excel, and WinRAR bugs to KEV
- Wikipedia loses UK safety law challenge
- Exchange hybrid flaw enables domain takeover
- BadCam Lenovo webcam exploit

#CyberSecurity #InfoSec #KEV #DataBreach

TechNadu
@technadu@infosec.exchange

🚨 CISA’s KEV update adds:
• CVE-2013-3893 – Internet Explorer
• CVE-2007-0671 – Excel
• CVE-2025-8088 – WinRAR
All actively exploited.
Legacy vulnerabilities remain high-value targets — patch or retire them.

#CISA #KEV #Vulnerabilities #Cybersecurity

TechNadu
@technadu@infosec.exchange

🚨 Manpower confirms Dec–Jan breach after RansomHub’s claim.

📊 144K+ victims across the U.S., data stolen includes SSNs, IDs, and medical info.
https://www.technadu.com/six-months-on-manpower-confirms-data-breach-after-ransomhubs-december-january-access/605907/

#Manpower #RansomHub #DataBreach #Cybersecurity #InfoSec

TechNadu
@technadu@infosec.exchange

🚀 Proton VPN rolls out Split Tunneling beta for Fedora & Ubuntu!💡 Exclude mode now
🔮 Include mode, IP rules & Debian 12 coming soon
⚠️ Official Linux app only (no Flatpak)
📅 Aug 13, 2025 – paid accounts only
https://www.technadu.com/proton-vpn-brings-split-tunneling-beta-to-linux-users/605897/

#ProtonVPN #Linux #VPN #Cybersecurity

TechNadu
@technadu@infosec.exchange

🚨 Aug 3 → GreyNoise saw 780+ IPs brute-forcing Fortinet SSL VPNs — biggest spike in months.
📈 80% of such spikes lead to CVEs within 6 weeks.
➡ Pivot from FortiOS to FortiManager targeting detected.
🌍 Top targets: Hong Kong & Brazil.

#CyberSecurity #Fortinet #VPN #Infosec #GreyNoise

TechNadu
@technadu@infosec.exchange

🚀 LinkedIn Premium’s August 2025 Perk of the Month = 3 months free ExpressVPN 🌍
- Extra 4 months with/ 12 or 24-month plan after trial
- Available worldwide until Aug 31
- Redeem via the Premium Perks page

📖 Read details: ⬇️ https://www.technadu.com/expressvpn-named-linkedin-premium-perk-of-the-month-for-august-2025/605882/

#ExpressVPN #LinkedInPremium #VPN #CyberSecurity

TechNadu
@technadu@infosec.exchange

Interview with Black Kite’s Ferhat Dikbiyik covers:
- Supply chain vendor risk trends
- Sector-specific threat tactics
- Early indicators of ransomware staging
- Why continuous visibility matters more than point-in-time scans

Full read → https://www.technadu.com/how-cybercriminals-stay-ahead-and-how-we-catch-them-by-tracking-their-digital-footprint/605794/

What’s your take on the biggest overlooked cyber risk in vendor ecosystems right now?