AWS dug through its honeypot data and confirmed that CVE-2025-5777 (Cisco ISE RCE) and CVE-2025-5777 (memory leak in Citrix NetScaler) were exploited as zero-days before their patches.

Nothing new here except the confirmation that an APT was behind the attacks

aws.amazon.com/blogs/securi...

also yes it's dumb as shit that browsers allow this

is BF6 better then?

-US indicts two rogue cybersecurity employees for ransomware attacks
-Hackers extort massage parlor visitors
-Balancer hacked for $128 million
-Cargo thieves use hackers to go after trucking and freight companies

Podcast: risky.biz/RBNEWS500/
Newsletter: news.risky.biz/risky-bullet...

One the craziest elements about cybersecurity is you have half the industry sat worrying about cyberwar!1! and going on about quantum and AI, then you have you have the operational reality of what is actually happening on the ground - it bares no resemblance, at all, to what people are focused on.

Dont think, just do

There's a new Microsoft SharePoint zero-day getting exploited right now: CVE-2025-53770

msrc.microsoft.com/blog/2025/07...

@patty--7.bsky.social welcome

FBI/Europol couldn't seize the Lumma servers, so they hacked them, deleted backups, and phished threat actors

theravenfile.com/2025/05/23/l...

This is great insight

It looks like there's a SAP NetWeaver zero-day in the wild:

reliaquest.com/blog/threat-...

SAP advisory (via cr0w on Mastodon): me.sap.com/notes/3594142

Patch asap or do the control steps immediately #vulnerability #wiz @wizsecurity.bsky.social great work for consistently challenging each patch

I played GTA3 on a 20" television in a friend's bedroom once a week I could walk to from my middle school and it was the best gaming thing that ever happened to me.

You're on Discord.

We aren't the same.

😭 ya.. I too tried, and found out most of the times we have to work off the books and mostly with veterans of that org to get things done.

When the admins enable anonymous user accesses and guests in Teams without knowing the differences between anonymous, vs public, vs consumer, vs org managed, vs federated domain list, etc, and then get mad when you change the settings because they don't know what they mean

I still find the same thing

I came across someone abusing the graph API, to get all sorts of data, including CAS policies and then using the policy gaps. I was intrigued by the fact, that while entra admins didn't know much about graphs, even the team who enforce security policies to the whole m365 suite, knew very little.