Security101
LightNews LightNews
security101.bsky.social
Security101
@security101.bsky.social
17 followers 71 following 1 posts
CISO enjoying every day of his profession.
Posts Replies Media Videos
Reposted by Security101
thehackernews.com.web.brid.gy
Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites
Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept traffic and capture user credentials. The extensions are advertised as a "multi-location network speed test plug-in" for developers and foreign trade personnel. Both the browser add-ons are available for download as of
thehackernews.com
December 23, 2025 at 8:05 PM
Reposted by Security101
euvd-bot.bsky.social
🚨 EUVD-2025-16605
📊 9.9/10
🏢 Roundcube

📝 Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16605

#cybersecurity #infosec #cve #euvd
December 22, 2025 at 10:32 PM
Reposted by Security101
opsmatters.com
The latest update for #Apono includes "How Attackers Maintained Persistence in #AWS After Stealing Credentials" and "Top 10 Automated #AccessControl Systems".

#Cybersecurity #DigitalIdentity #Cloud #IAM https://opsmtrs.com/4gfczmn
Apono
Securely manage permissions and adhere to compliance requirements, while allowing employees to benefit from a frictionless user experience.
opsmtrs.com
December 22, 2025 at 5:52 AM
Reposted by Security101
reconbee.bsky.social
Best Security And Risk Management Courses for Beginners

read more: reconbee.com/best-securit...

#CyberSecurityAwareness #cybersecurity #security #RiskManagement #cyberrisk #courses
Best Security And Risk Management Courses for Beginners
best security and risk management courses for beginners available on Coursera and Udemy into groups according to the suggested degree of skill
reconbee.com
December 22, 2025 at 8:26 AM
Reposted by Security101
helpnetsecurity.com
Session tokens give attackers a shortcut around MFA

🎥 Link to the video: www.helpnetsecurity.com/2025/12/22/s...

#cybersecurity #cybersecuritynews #authentication
Session tokens give attackers a shortcut around MFA - Help Net Security
Session token theft lets attackers bypass MFA by stealing browser based session tokens. Learn how it works, why teams miss it.
www.helpnetsecurity.com
December 22, 2025 at 8:51 AM
Reposted by Security101
eyalestrin.bsky.social
NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift #security #cybersecurity
NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift
Eyal Estrin unread, 5:55 AM (14 minutes ago)    to https://www.theregister.com/2025/12/21/nist_ntp_outage_warning/ Eyal Estrin CISSP, CCSP, CISM, CISA, CDPSE, CCSK Blog: https://security-24-7.com | Books: https://amzn.to/42Xai9A | https://amzn.to/3Sggbtv Twitter: @eyalestrin | Bluesky: @eyalestrin.bsky.social Reply all Reply to author Forward
groups.google.com
December 22, 2025 at 12:09 PM
Reposted by Security101
ninjaowl.ai
Docker Hardened Images now open source and available for free #cybersecurity #hacking #news #infosec #security #technology #privacy
Docker Hardened Images now open source and available for free
More than a 1,000 Docker Hardened Images (DHI) are now freely available and open source for software builders, under the Apache 2.0 license.
www.bleepingcomputer.com
December 22, 2025 at 12:09 PM
Reposted by Security101
alphahunt.io
2026 breaches won’t start with passwords—they’ll ride your OAuth/refresh tokens and sketchy extensions. Salesloft/Drift was the trailer; your browser is the perimeter. 🔑🕵️

Skim the playbook and sub to stay ahead. -> blog.alphahunt.io/the-quiet-to...

#AlphaHunt #CyberSecurity #OAuth #Salesforce
The Quiet Token Heist: Why 2026’s Biggest SaaS Breaches Won’t Start With Passwords
2026’s nastiest SaaS breaches will ride valid tokens + “trusted” apps. We already got the trailer with the Salesloft/Drift OAuth blast radius. And the browser? Yeah, it’s part of the perimeter now.…
blog.alphahunt.io
December 22, 2025 at 2:03 PM
Reposted by Security101
ralf-ladner.bsky.social
Sicherheit von Large-Language-Models

@CheckPointSW #Cybersecurity #Cybersicherheit #KI #künstlicheIntelligenz @Lakera #LargeLanguageModel #LLM #PromptInjection

netzpalaver.de/2025/...
December 22, 2025 at 2:18 PM
Reposted by Security101
winbuzzer.com
winbuzzer.com/2025/12/22/m...

Microsoft 365 Phishing Surge: Attackers Weaponize Legitimate Device Code Flow to Bypass MFA

#Phishing #CyberSecurity #Microsoft365 #MFA #CyberCrime #InfoSec #Hacking #CloudSecurity #OAuth #IdentitySecurity #Microsoft
Microsoft 365 Phishing Surge: Attackers Weaponize Legitimate Device Code Flow to Bypass MFA - WinBuzzer
Cybercriminals have launched a widespread phishing campaign exploiting Microsoft's OAuth device code flow to bypass MFA and hijack accounts without passwords.
winbuzzer.com
December 22, 2025 at 2:23 PM
Reposted by Security101
kubesploit.io
OpenBao provides an open-source solution to manage, store, and distribute secrets, certificates, and keys with secure encryption, dynamic secrets, automated leasing, and detailed revocation

➤ https://ku.bz/qg3j1t67t
December 20, 2025 at 6:06 PM
Reposted by Security101
tom-doerr.bsky.social
https://github.com/ilsilfverskiold/Awesome-LLM-Resources-List/
December 20, 2025 at 8:28 PM
Reposted by Security101
scottpiper.bsky.social
This is the best write-up on threat actor tradecraft I've seen from AWS. aws.amazon.com/blogs/securi...
Cryptomining campaign targeting Amazon EC2 and Amazon ECS | Amazon Web Services
Amazon GuardDuty and our automated security monitoring systems identified an ongoing cryptocurrency (crypto) mining campaign beginning on November 2, 2025. The operation uses compromised AWS Identity ...
aws.amazon.com
December 16, 2025 at 11:48 PM
Reposted by Security101
Security Leadership Master Class 6 : When Disaster Strikes

- Capabilities beat just plans
- Engineering resilience
- Building crisis management muscle memory
- Learning from events
- Shrines of failure
- and more…..

www.philvenables.com/post/securit...
December 13, 2025 at 4:25 PM
Reposted by Security101
kubesploit.io
Kviklet provides a secure, self-hosted tool for engineering teams to request, review, and approve production database queries with a workflow inspired by code reviews

➤ https://ku.bz/blQ6ybFXN
https://github.com/kviklet/kviklet/raw/main/images/ExecutedRequest_light.png#gh-light-mode-only
December 13, 2025 at 6:06 PM
Reposted by Security101
tom-doerr.bsky.social
https://github.com/context-machine-lab/sleepless-agent/
December 13, 2025 at 9:04 PM
Reposted by Security101
tom-doerr.bsky.social
https://github.com/aws-samples/remote-swe-agents/
December 14, 2025 at 1:06 AM
Reposted by Security101
tom-doerr.bsky.social
https://github.com/aws-samples/bedrock-chat/
December 14, 2025 at 1:22 AM
Reposted by Security101
japi.bsky.social
Top 25 Most Dangerous Software Weaknesses 2025

cwe.mitre.org/news/archive... #cybersecurity #CWE #appsec
CWE - News & Events - 2025
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
cwe.mitre.org
December 13, 2025 at 11:40 AM
Reposted by Security101
japi.bsky.social
"We evaluate ten #cybersecurity professionals alongside six existing #AI agents and ARTEMIS, our new agent scaffold, on a large university network consisting of ∼8,000 hosts across 12 subnets."

arxiv.org/abs/2512.09882 #appsec
Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing
We present the first comprehensive evaluation of AI agents against human cybersecurity professionals in a live enterprise environment. We evaluate ten cybersecurity professionals alongside six…
arxiv.org
December 13, 2025 at 11:49 AM
Reposted by Security101
thedailytechfeed.com
Alert: Sophisticated phishing campaign bypasses MFA, targeting Microsoft 365 and Okta users. Stay vigilant and enhance your security measures. #CyberSecurity #PhishingAlert #MFABypass Link: thedailytechfeed.com/sophisticate...
December 13, 2025 at 5:18 PM
Reposted by Security101
bilaltariq01.bsky.social
How I Stay Relevant in a World Moving Faster Than Ever https://cstu.io/6b4b70 #cybersecurity #oneplus #automation
How I Stay Relevant in a World Moving Faster Than Ever
The pace of change today isn’t just fast. It’s relentless. New tools every week. New narratives...
cstu.io
December 14, 2025 at 3:16 AM
Reposted by Security101
2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy
BISO Glossary Who This Article Is For For leaders and practitioners working at the intersection of cybersecurity and business: BISOs, CISOs, product owners, business-unit leaders (BUs), CFOs, and a...

#resources #career #leadership #cybersecurity

Origin | Interest | Match
BISO Glossary
Who This Article Is For For leaders and practitioners working at the intersection of...
zeroday.forem.com
December 14, 2025 at 3:56 AM
Reposted by Security101
ninjaowl.ai
Supply Chain Attacks Targeting GitHub Actions Increased in 2025 #cybersecurity #hacking #news #infosec #security #technology #privacy
Supply Chain Attacks Targeting GitHub Actions Increased in 2025
At this week's Black Hat Europe conference, two researchers urged developers to adopt a shared responsibility model for open source software.
www.darkreading.com
December 13, 2025 at 11:38 AM
Reposted by Security101
technadu.com
Full Article: www.technadu.com/ai-to-the-re...

The question isn’t whether AI will dominate cybersecurity - it’s who adapts faster. #CyberSecurity #AIThreats #PromptInjection #React2Shell #Infosec
AI to the Rescue as Attackers Exploit Software Bugs, Human Vulnerabilities, and Artificial Intelligence
This week’s cybersecurity roundup covers AI-powered threats, software flaws, human exploitation, and how defenders are preparing for 2026.
www.technadu.com
December 13, 2025 at 12:14 PM