JuanRa
LightNews LightNews
banner
juanra-68.bsky.social
JuanRa
@juanra-68.bsky.social
35 followers 49 following 65 posts
Busco soluciones donde otros ven problemas.
Entusiasta de Destiny y Halo.
Posts Replies Media Videos
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Oracle privately confirms Cloud breach to customers
Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a "legacy environment" last used in 2017.
www-bleepingcomputer-com.cdn.ampproject.org
April 4, 2025 at 7:10 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Microsoft apologizes for removing VSCode extensions used by millions
Microsoft has reinstated the 'Material Theme - Free' and 'Material Theme Icons - Free' extensions on the Visual Studio Marketplace after finding that the obfuscated code they contained wasn't actually...
www-bleepingcomputer-com.cdn.ampproject.org
March 13, 2025 at 9:56 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Nearly 12,000 API keys and passwords found in AI training dataset
Close to 12,000 valid secrets that include API keys and passwords have been found in the Common Crawl dataset used for training multiple artificial intelligence models.
www-bleepingcomputer-com.cdn.ampproject.org
March 3, 2025 at 4:03 PM
juanra-68.bsky.social
cyberscoop.com/black-basta-...
What defenders are learning from Black Basta's leaked chat logs
The ransomware syndicate’s internal chats exposed a wide swath of the group’s inner workings.
cyberscoop.com
February 24, 2025 at 5:14 PM
juanra-68.bsky.social
www.helpnetsecurity.com/2025/02/23/w...
Week in review: PostgreSQL 0-day exploited in US Treasury hack, top OSINT books to learn from - Help Net Security
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A PostgreSQL zero-day was also exploited in US Treasury
www.helpnetsecurity.com
February 23, 2025 at 6:37 PM
juanra-68.bsky.social
www.bleepingcomputer.com/news/microso...
Windows 10 KB5051974 update force installs new Microsoft Outlook app
Microsoft has released the KB5051974 cumulative update for Windows 10 22H2 and Windows 10 21H2, which automatically installs the new Outlook for Windows app and fixes a memory leak bug.
www.bleepingcomputer.com
February 11, 2025 at 8:26 PM
juanra-68.bsky.social
www.bleepingcomputer.com/news/securit...
Massive brute force attack uses 2.8 million IPs to target VPN devices
A large-scale brute force password attack using almost 2.8 million IP addresses is underway, attempting to guess the credentials for a wide range of networking devices, including those from Palo Alto ...
www.bleepingcomputer.com
February 8, 2025 at 6:30 PM
juanra-68.bsky.social
krebsonsecurity.com/2025/02/expe...
Experts Flag Security, Privacy Risks in DeepSeek AI App
New mobile apps from the Chinese artificial intelligence (AI) company DeepSeek have remained among the top three "free" downloads for Apple and Google devices since their debut on Jan. 25, 2025. But e...
krebsonsecurity.com
February 6, 2025 at 9:37 PM
juanra-68.bsky.social
www.bleepingcomputer.com/news/securit...
Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware
Hackers are targeting vulnerable SimpleHelp RMM clients to create administrator accounts, drop backdoors, and potentially lay the groundwork for ransomware attacks.
www.bleepingcomputer.com
February 6, 2025 at 6:36 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Zyxel warns of bad signature update causing firewall boot loops
Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting the device into a boot loop.
www-bleepingcomputer-com.cdn.ampproject.org
January 24, 2025 at 11:08 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Tesla EV charger hacked twice on second day of Pwn2Own Tokyo
​Security researchers hacked Tesla's Wall Connector electric vehicle charger twice on the second day of the Pwn2Own Automotive 2025 hacking contest.
www-bleepingcomputer-com.cdn.ampproject.org
January 23, 2025 at 9:09 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
QNAP fixes six Rsync vulnerabilities in NAS backup, recovery app
QNAP has fixed six rsync vulnerabilities that could let attackers gain remote code execution on unpatched Network Attached Storage (NAS) devices.
www-bleepingcomputer-com.cdn.ampproject.org
January 23, 2025 at 7:18 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Bitbucket services “hard down” due to major worldwide outage
Bitbucket is investigating a massive outage affecting Atlassian Bitbucket Cloud customers worldwide, with the company saying its cloud services are "hard down."
www-bleepingcomputer-com.cdn.ampproject.org
January 21, 2025 at 8:31 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Microsoft removes Assassin’s Creed Windows 11 upgrade blocks
​Earlier this week, Ubisoft released Assassin's Creed Valhalla and Assassin's Creed Origins patches to fix Windows 11 24H2 compatibility issues that caused crashes, freezes, and audio problems.
www-bleepingcomputer-com.cdn.ampproject.org
January 18, 2025 at 10:55 PM
juanra-68.bsky.social
leakd.com/cyber-securi...
Beware: Malware Crypto Scams Are Now Running Rampant on Telegram | Leakd
leakd.com
January 18, 2025 at 6:04 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
CISA shares guidance for Microsoft expanded logging capabilities
​CISA shared guidance for government agencies and enterprises on using expanded cloud logs in their Microsoft 365 tenants as part of their forensic and compliance investigations.
www-bleepingcomputer-com.cdn.ampproject.org
January 15, 2025 at 9:58 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Docker Desktop blocked on Macs due to false malware alert
Docker is warning that Docker Desktop is not starting on macOS due to malware warnings after some files were signed with an incorrect code-signing certificate.
www-bleepingcomputer-com.cdn.ampproject.org
January 11, 2025 at 5:08 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Fake LDAPNightmware exploit on GitHub spreads infostealer malware
A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka "LDAPNightmare") on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server.
www-bleepingcomputer-com.cdn.ampproject.org
January 11, 2025 at 4:56 PM
juanra-68.bsky.social
m.youtube.com/watch?v=zWiP...
QR Code Scams EXPOSED
YouTube video by LEAKD
m.youtube.com
January 10, 2025 at 4:38 PM
juanra-68.bsky.social
www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.blee...
Russian ISP confirms Ukrainian hackers "destroyed" its network
Russian internet service provider Nodex confirmed on Tuesday that its network was "destroyed" in a cyberattack claimed by Ukrainian hacktivists part of the Ukrainian Cyber Alliance
www-bleepingcomputer-com.cdn.ampproject.org
January 10, 2025 at 9:19 AM
juanra-68.bsky.social
leakd.com/leaks/massiv...
Massive Data Leak Allegedly Exposes Sensitive Customer Information of Kia Russia | Leakd
leakd.com
January 9, 2025 at 5:22 PM
juanra-68.bsky.social
www.infosecurity-magazine.com/news/governm...
Government Launches £1.9m Initiative to Boost UK’s Cyber Resilience
The government has pledged nearly £2m to 30 new Cyber Local projects designed to enhance cyber resilience
www.infosecurity-magazine.com
January 9, 2025 at 5:17 PM
juanra-68.bsky.social
cyberscoop.com/malicious-ha...
Malicious hackers have their own shadow IT problem
Researchers at watchTowr Labs found that abandoned and expired internet infrastructure left by hacking groups can function as backdoors within other backdoors.
cyberscoop.com
January 8, 2025 at 9:49 PM
juanra-68.bsky.social
thehackernews.com/2025/01/new-...
New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites
New "DoubleClickjacking" attack bypasses clickjacking protections by exploiting double-click timing gaps, enabling account takeovers.
thehackernews.com
January 1, 2025 at 9:21 PM
juanra-68.bsky.social
www.sisainfosec.com/white-papers...
Reimagining Compliance: A Unified Future for a Fragmented Regulatory World
As digital payments continue to evolve, organizations face an overwhelming array of regulatory requirements. The sheer complexity of managing compliance across multiple frameworks, often with overlapp...
www.sisainfosec.com
January 1, 2025 at 4:46 PM