AWS dug through its honeypot data and confirmed that CVE-2025-5777 (Cisco ISE RCE) and CVE-2025-5777 (memory leak in Citrix NetScaler) were exploited as zero-days before their patches.

Nothing new here except the confirmation that an APT was behind the attacks

aws.amazon.com/blogs/securi...

also yes it's dumb as shit that browsers allow this

-US indicts two rogue cybersecurity employees for ransomware attacks
-Hackers extort massage parlor visitors
-Balancer hacked for $128 million
-Cargo thieves use hackers to go after trucking and freight companies

Podcast: risky.biz/RBNEWS500/
Newsletter: news.risky.biz/risky-bullet...

One the craziest elements about cybersecurity is you have half the industry sat worrying about cyberwar!1! and going on about quantum and AI, then you have you have the operational reality of what is actually happening on the ground - it bares no resemblance, at all, to what people are focused on.

Dont think, just do

There's a new Microsoft SharePoint zero-day getting exploited right now: CVE-2025-53770

msrc.microsoft.com/blog/2025/07...

@patty--7.bsky.social welcome

FBI/Europol couldn't seize the Lumma servers, so they hacked them, deleted backups, and phished threat actors

theravenfile.com/2025/05/23/l...

It looks like there's a SAP NetWeaver zero-day in the wild:

reliaquest.com/blog/threat-...

SAP advisory (via cr0w on Mastodon): me.sap.com/notes/3594142

Patch asap or do the control steps immediately #vulnerability #wiz @wizsecurity.bsky.social great work for consistently challenging each patch

I played GTA3 on a 20" television in a friend's bedroom once a week I could walk to from my middle school and it was the best gaming thing that ever happened to me.

You're on Discord.

We aren't the same.

When the admins enable anonymous user accesses and guests in Teams without knowing the differences between anonymous, vs public, vs consumer, vs org managed, vs federated domain list, etc, and then get mad when you change the settings because they don't know what they mean