Mark

Citrix Netscaler customers - keep calm and patch CVE-2025-5777 from Tuesday.

It allows unauth memory reads, has similarities to CitrixBleed (CVE-2023-4966) as may allow session token theft.

20.06.2025 15:52 — 👍 84    🔁 36    💬 2    📌 2

Huntress continues to observe in-the-wild exploitation of CVE-2025-30406, a critical vulnerability in Gladinet CentreStack and Triofox

22.04.2025 13:07 — 👍 1    🔁 2    💬 1    📌 0

Detecting Fake CAPTCHA Campaigns: ClickFix, ClearFake, and Etherhide Summary

One of my good friends and former SOC protégé—dropping 🔥 analysis on a Monday afternoon. Epic work, @thecyber.dad 🚀

www.thecyber.dad/p/detecting-...

22.04.2025 01:01 — 👍 7    🔁 2    💬 0    📌 0

CVE extension to March 16th 2026

See y’all March 15th 2026 for the last minute renewal 🫡😅

https://www.usaspending.gov/award/CONT_AWD_70RCSJ24FR0000018_7001_70RSAT20D00000001_7001

16.04.2025 14:31 — 👍 24    🔁 9    💬 2    📌 1

BREAKING.

From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.

15.04.2025 17:23 — 👍 695    🔁 420    💬 38    📌 207

Wow. CVE database is in serious trouble, in two days.

The cyber industry as a whole is in trouble also really, it’s the elephant in the room - the collapse of the White House’s support for cybersecurity is obvious and pronounced due to widespread cutbacks.

15.04.2025 18:12 — 👍 211    🔁 97    💬 9    📌 10

cert.pl/uploads/docs... CERT Poland annual report.

04.04.2025 06:17 — 👍 0    🔁 0    💬 0    📌 0

Retro-style poster titled "Now You're Debugging with Power!" promoting the Sysinternals Suite by Microsoft. It depicts a smiling technician in a suit holding a wrench, standing before a futuristic control panel, with an atomic rocket illustration overhead. The poster lists various Sysinternals tools like Process Explorer, Autoruns, Proc Monitor, Diskmon, RAMMA, and VMMap, each humorously described with atomic-era metaphors, emphasizing their capabilities in Windows diagnostics. The visual style evokes mid-20th-century propaganda posters, using bold typography and a warm, vintage color palette.

Here is one for you: 50's/60's space atomic age ads.

01.04.2025 03:26 — 👍 38    🔁 8    💬 1    📌 0

CISA’s Red Team has been cut by DOGE. Somebody go hire them, they’re really good.

11.03.2025 05:25 — 👍 203    🔁 136    💬 9    📌 7

Use one Virtual Machine to own them all — active exploitation of ESXicape A chain of three zero days allow threat actors to escape a Virtual Machine.

Update your VMware ESX farms ASAP.

There's an in the wild exploit chain being used which does VM -> Hypervisor escape, across all versions of ESXi. Allows full cluster access.

doublepulsar.com/use-one-virt...

05.03.2025 11:59 — 👍 62    🔁 29    💬 3    📌 2

Original post on cyberplace.social

3 different VMware zero days, under active exploitation by ransomware groups

CVE-2025-22224, CVE-2025-22225, CVE-2025-22226

VMware ESXi
VMware Workstation Pro / Player (Workstation)
VMware Fusion
VMware Cloud Foundation
VMware Telco Cloud Platform

(Exploitation actually ESXi) […]

04.03.2025 14:19 — 👍 64    🔁 27    💬 2    📌 0