#Microsoft: Angriffe auf neue #Sharepoint-Lücke – bislang kein Patch verfügbar | Security https://www.heise.de/news/Microsoft-Angriffe-auf-neue-Sharepoint-Luecke-bislang-kein-Patch-verfuegbar-10493705.html #Patchday #Exploit
iMessage integration in Claude can hijack the model to do anything
https://www.generalanalysis.com/blog/imessage-stripe-exploit
Microsoft: Angriffe auf neue Sharepoint-Lücke – bislang kein Patch verfügbar
Microsoft warnt vor aktiven Angriffen auf eine bislang unbekannte Lücke in Sharepoint-Servern und benennt Erste-Hilfe-Maßnahmen für Verteidiger.
Wii U SDBoot1 Exploit "paid the beak"
https://consolebytes.com/wii-u-sdboot1-exploit-paid-the-beak/
#Today one of my colleagues put my attention on this article, and to be honest I do love the reporting style. Meme's and writing like this?
"The ‘good news’, I suspect, is that most orgs will be too lacking in logs to have evidence."
"China go brrr"
At least it's not dry 
https://doublepulsar.com/citrixbleed-2-situation-update-everybody-already-got-owned-503c6d06da9f
Just published a proof-of-concept exploit for CVE-2025-32463, a new Linux privilege escalation vulnerability affecting sudo discovered and disclosed by Stratascale about 2 weeks ago.
The PoC is available on GitHub. A full technical writeup will be published on my blog soon.
GitHub: https://github.com/morgenm/sudo-chroot-CVE-2025-32463
@milo well, recaptcha is up my ass as I tried to view the video... Those who hacked me persistently (began during employment by managed IT services company headquartered in Las Vegas, NV), somehow exploit Google.com recaptcha
Unsure whether they hijack, tampered content, change forms, or divert communication. What I know is that I am disabled from normal living
#disablementCampaign
#targetedHacking
#googleRecaptcha
#youtube
#hacked
#persistentlyHacked
#recaptchaExploit
#recaptcha
#exploit
https://www.chinatalk.media/p/apple-in-china
If #US #corporations can #exploit #labor in places such as #China, they surely will salivate at doing the same with a large pool of #slaves domestically. That seems to be the plan.
A critical Linux vulnerability (CVE-2025-32463) in Sudo lets any local unprivileged user gain root via the --chroot (-R) option
Affects default configs on Ubuntu, Fedora & others — no Sudo rules needed
Fix: Update to Sudo 1.9.17p1+ (no workarounds)
CVSS: 9.8 (Critical)
Highlights persistent risks in open-source privilege handling 
https://cybersecuritynews.com/linux-sudo-chroot-vulnerability/
#Linux #Sudo #FOSS #CyberSecurity #InfoSec #OpenSource #Vulnerability #Root #Exploit #SysAdmin #DevSecOps #Tech @TechNews
Chrome: Google stopft attackierte Sicherheitslücke
In der Nacht zum Dienstag hat Google den Chrome-Browser ungeplant aktualisiert. Eine Sicherheitslücke wird bereits attackiert.
Zero-Day: Bluetooth-Lücke macht Millionen Kopfhörer zu Abhörstationen
Der in beliebten Modellen großer Hersteller verbaute Bluetooth-Chipsatz ist angreifbar. Hacker konnten so Anrufe starten und Geräte abhören.
OneTrust SDK 6.33.0 Prototype Pollution / Denial Of Service https://packetstorm.news/files/201222 #exploit
Bittrue Hacker Funnels $30M Through Tornado Cash, Made $9.3M by Trading Ether - A hacker who stole $23 million from crypto exchange Bittrue in 2023 has started to launde... - https://www.coindesk.com/business/2025/06/12/bittrue-hacker-funnels-usd30m-through-tornado-cash-made-usd9-3m-by-trading-ether #finance #exploit #hack #news
That's one way of going about that.
Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.
Ne Art "#CrowdLeaks" bei der Leute ne #Belohnung für entsprechende #Leaks erhalten können - nach Prüfung der Inhalte natürlich!
Schon innerhalb der ersten 24 Stunden nach #Veröffentlichung der #Switch2 haben Modder den ersten #Exploit entdeckt. #Nintendo hat besonders großen Aufwand bei seiner #Konsole betrieben, um Hacks zu verhindern. https://winfuture.de/news,151431.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
Jetzt patchen! Attacken auf Cisco Identity Services Engine können bevorstehen
Es ist Exploitcode für Sicherheitslücken in Cisco Identity Services Engine und Customer Collaboration Platform in Umlauf. Updates sind verfügbar.
