CyberFortress Security
LightNews LightNews
banner
cyberfortress.security
CyberFortress Security
@cyberfortress.security
38 followers 76 following 56 posts
Securing the internet.

https://cyberfortress.security/
Posts Replies Media Videos
cyberfortress.security
thehackernews.com/2025/11/hack...
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
Active exploitation targets 7-Zip CVE-2025-11001; patch 25.00 fixes symbolic link RCE flaws.
thehackernews.com
November 20, 2025 at 12:43 PM
cyberfortress.security
www.nytimes.com/2025/11/18/b...
Outage at Cloudflare Disrupts Parts of the Internet
www.nytimes.com
November 18, 2025 at 12:49 PM
cyberfortress.security
www.scworld.com/news/copy-pa...
Copy-paste now exceeds file transfer as top corporate data exfiltration vector
Nearly a third of copy-pastes from corporate to non-corporate accounts are to AI tools.
www.scworld.com
November 17, 2025 at 12:59 PM
cyberfortress.security
thehackernews.com/2025/11/what...
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks
Maverick malware spreads via WhatsApp Web, targeting Brazilian banks through PowerShell and browser hijacking.
thehackernews.com
November 11, 2025 at 6:51 PM
cyberfortress.security
document.title;
Security hole slams Chromium browsers - no fix yet
Exclusive: Edge, Atlas, Brave among those affected
www.theregister.com
October 31, 2025 at 2:42 PM
cyberfortress.security
October 20, 2025 at 2:50 PM
cyberfortress.security
Plex data breach

nerds.xyz/2025/09/plex...
Plex suffers security incident exposing user data and urging password resets
Plex has disclosed a security breach that exposed customer data. While passwords were hashed and credit cards unaffected, the company is requiring all users to reset their passwords.
nerds.xyz
September 9, 2025 at 12:14 PM
cyberfortress.security
Azure cloud services have been disrupted by undersea cable cuts
www.bbc.com/news/article...
Microsoft Azure services disrupted by Red Sea cable cuts
Unexplained damage to the cables is causing delays in traffic going through the Middle East, the tech giant says.
www.bbc.com
September 8, 2025 at 11:42 AM
cyberfortress.security
blog.trailofbits.com/2025/08/21/w...
Weaponizing image scaling against production AI systems
In this blog post, we’ll detail how attackers can exploit image scaling on Gemini CLI, Vertex AI Studio, Gemini’s web and API interfaces, Google Assistant, Genspark, and other production AI systems. W...
blog.trailofbits.com
August 28, 2025 at 1:51 PM
cyberfortress.security
Wordle 1,523 X/6

⬛⬛⬛⬛⬛
⬛⬛🟩⬛🟨
⬛🟩🟩⬛⬛
⬛🟩🟩⬛⬛
⬛🟩🟩⬛⬛
🟨🟩🟩⬛🟨

Really whipped my ass.
August 21, 2025 at 12:13 AM
cyberfortress.security
Defend against state sponsored attacks.

thehackernews.com/expert-insig...
How to Defend Against Root-of-Trust Attacks: Lessons from Secret Blizzard
Russian group Secret Blizzard bypassed MFA in 2025 embassy attacks via TLS root compromise, exposing MFA limits.
thehackernews.com
August 19, 2025 at 1:28 PM
cyberfortress.security
thehackernews.com/2025/07/cisc...
Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code
Cisco's CVE-2025-20337 flaw exposes ISE to root access via API exploit. Affects releases 3.3 & 3.4.
thehackernews.com
July 17, 2025 at 5:26 PM
cyberfortress.security
www.bleepingcomputer.com/news/securit...
Qantas confirms data breach impacts 5.7 million customers
Australian airline Qantas has confirmed that 5.7 million people have been impacted by a recent data breach, in which threat actors stole customers' data.
www.bleepingcomputer.com
July 11, 2025 at 8:53 AM
cyberfortress.security
Time to update Chrome.
thehackernews.com/2025/06/new-...
New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch
Google fixed CVE-2025-5419 in Chrome after detecting active exploitation, affecting all platforms using V8 engine.
thehackernews.com
June 3, 2025 at 11:40 AM
cyberfortress.security
www.wsj.com/business/nor...
North Korea Infiltrates U.S. Remote Jobs—With the Help of Everyday Americans
A LinkedIn message drew a former waitress in Minnesota into a type of intricate scam involving illegal paychecks and stolen data. It’s a growing problem for businesses.
www.wsj.com
May 29, 2025 at 7:01 PM
cyberfortress.security
thehackernews.com/2025/05/from...
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
Session hijacking now drives enterprise breaches—88% involve stolen credentials, often exploited within hours.
thehackernews.com
May 28, 2025 at 8:23 PM
cyberfortress.security
Nova Scotia Power says ransomware hackers have published stolen data | CBC News
Nova Scotia Power has confirmed it is the victim of a ransomware attack and that the hackers who stole data have published it.
www.cbc.ca
May 23, 2025 at 5:43 PM
cyberfortress.security
thehackernews.com/2025/05/fire...
Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards
Mozilla patched 2 Firefox zero-days exploited at Pwn2Own Berlin, risking code execution via JavaScript flaws.
thehackernews.com
May 19, 2025 at 4:36 PM
Reposted by CyberFortress Security
techcrunch.com
Coinbase says customers’ personal information stolen in data breach
Coinbase says customers' personal information stolen in data breach | TechCrunch
The crypto exchange giant said the hacker bribed contractors and employees in support roles to steal data.
techcrunch.com
May 15, 2025 at 12:04 PM
cyberfortress.security
New Chrome Vulnerability
New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy
Chrome flaw CVE-2025-4664 enables cross-origin data leaks; active exploit confirmed; update to 136.0.7103.113.
thehackernews.com
May 15, 2025 at 12:05 PM
cyberfortress.security
This shows how easy it can be to bypass MFA.
A Sneaky Phish Just Grabbed my Mailchimp Mailing List
You know when you're really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That's me right now, and the penny has just dropped that a Mailchimp phish h...
www.troyhunt.com
May 8, 2025 at 3:57 PM
cyberfortress.security
Co-op fends off hackers as police probe M&S cyber attack
The retailer says it's disabled parts of its IT systems in response to the incident.
www.bbc.com
April 30, 2025 at 2:28 PM
cyberfortress.security
RIP CVE
www.theregister.com/2025/04/16/h...
Homeland Security funding for CVE program expires
: Because vulnerability management has nothing to do with national security, right?
www.theregister.com
April 16, 2025 at 12:29 PM
cyberfortress.security
New normal.
AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections
AkiraBot spammed 80,000 websites since September 2024 using GPT-4o-Mini, evading CAPTCHA with proxy tactics.
thehackernews.com
April 10, 2025 at 4:40 PM
cyberfortress.security
Wow.
Hackers disseminate 2.9B Twitter (X) users' data: not a catastrophe, it’s public
Hackers on the illicit marketplace Breach Forums have disseminated a massive dataset allegedly containing 2.9 billion Twitter (X) user records.
cybernews.com
April 3, 2025 at 3:30 AM