【工具】查询邮箱注册信息的开源工具：MailAccess
今天给大家推送一个专门用于调查电子邮箱在各种平台注册信息的自托管开源情报平台MailAccess。
Aggregator
Authorities disrupt Evil Corp’s SocGholish botnet
3 weeks 4 days ago
Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with the malware.
The post Authorities disrupt Evil Corp’s SocGholish botnet appeared first on CyberScoop.
Matt Kapko
Congress tees up No FAKES Act, aiming at AI-generated deepfakes
3 weeks 4 days ago
While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some business and digital rights groups are opposed.
The post Congress tees up No FAKES Act, aiming at AI-generated deepfakes appeared first on CyberScoop.
djohnson
Novo Nordisk Breach Highlights Software Development Pipeline Risk
3 weeks 4 days ago
A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem.
Jai Vijayan
NightSpire
3 weeks 4 days ago
You must login to view this content
cohenido
NightSpire
3 weeks 4 days ago
You must login to view this content
cohenido
Splunk AI Toolkit曝高危漏洞：CVSS 9.1，可远程执行任意系统命令
3 weeks 4 days ago
安全客
MacBook Neo vs Windows Laptops for Cybersecurity Tasks
3 weeks 4 days ago
There is no one-size-fits-all cybersecurity laptop. We’ll examine real-world work scenarios, tool compatibility, and trade-offs that impact a security professional’s day-to-day work.
Owais Sultan
Bulgaria allowed surveillance tech firm to sell products to repressive regimes, report says
3 weeks 4 days ago
The nonprofit Human Rights Watch obtained export licensing records covering 2018 through 2023, which show the Bulgarian government allowed the surveillance firm Circles to peddle the tech to law enforcement and intelligence agencies in several countries known for human rights abuses.
Operation Escaneo Signals Shift in LatAm Threat Landscape
3 weeks 4 days ago
The threat group's curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two.
Alexander Culafi
Stop Treating Your LLMs Like Web Servers
3 weeks 4 days ago
Du’An Lightfoot
Operation Endgame Disrupts SocGholish Malware Infrastructure
3 weeks 4 days ago
International law enforcement dismantled TA569's SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly 15,000 compromised websites.
Deeba Ahmed
Tor-Based Clipper Malware Targets Wallet Seed Phrases
3 weeks 4 days ago
USB .lnk malware steals crypto via clipboard hijack, replaces wallet addresses, steals seed phrases, and screenshots. Microsoft Threat Intelligence has been tracking a clipboard-stealing malware (Clipper) campaign since February 2026 that targets cryptocurrency wallets. A clipper is a type of malicious software that monitors and manipulates your clipboard, the temporary memory where data is stored […]
Pierluigi Paganini
Nintendo confirms data stolen in WebMD subsidiary cyberattack
3 weeks 4 days ago
Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service used internally, but its systems were not compromised. [...]
Bill Toulas
FIFA Bug Exposes World Cup Streams to Remote Takeover
3 weeks 4 days ago
A hacker could have "Rickrolled" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.
Nate Nelson
Qilin
3 weeks 4 days ago
You must login to view this content
cohenido
Qilin
3 weeks 4 days ago
You must login to view this content
cohenido
Qilin
3 weeks 4 days ago
You must login to view this content
cohenido
Прячется на флешке и боится диспетчера задач. Microsoft раскрыла хитрую программу, похищающую крипту
3 weeks 4 days ago
Достаточно было открыть привычный ярлык, чтобы сценарий пошёл не по плану.
Build your own vulnerability harness
3 weeks 4 days ago
We break down the technical architecture behind our multi-stage vulnerability discovery harness and automated triage loop. Learn how we manage state controls, squash false positives through adversarial review, and route around LLM context limits.
Dan Jones