All posts in Uncategorized

■■■□□ Japan’s CERT coordination center (JPCERT/CC) on Thursday revealed it observed incidents that involved the use of a command-and-control (C2) framework called CrossC2, which is designed to extend the functionality of Cobalt Strike to other platforms like Linux and Apple macOS for cross-platform system control. thehackernews.com/2025/08/researchers-warn-crossc2-expands-cobalt.html

■■■■□ Sniffing 5G With Software-Defined Radio. Sniffing 5G with Software-Defined Radio

■■□□□ Data-Leak: HR giant Workday discloses data breach after Salesforce attack. https://www.bleepingcomputer.com/news/security/hr-giant-workday-discloses-data-breach-amid-salesforce-attacks/

■■■□□ Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware. https://thehackernews.com/2025/08/russian-group-encrypthub-exploits-msc.html

⚙️ Cybersecurity AI (CAI) is a lightweight, open-source framework that empowers security professionals to build and deploy AI-powered offensive and defensive automation. CAI is the de facto framework for AI Security, already used by thousands of individual users and hundreds of organizations. Whether you’re a security researcher, ethical hacker, IT professional, or organization looking to…

■■■■□ CVE-2025-8088 – WinRAR Zero-Day Path Traversal Vulnerability Exploited to Execute Malware. CVE-2025-8088 – WinRAR 0-Day Path Traversal Vulnerability Exploited to Execute Malware

■■■■□ A jew arrested in BlackHat ✡️ happens to be an Israeli government official in Nevada in internet crimes against children sting Tom Artiom Alexandrovich was released and returned to Israel after being charged with luring a child for a sex act. Background: The Israeli citizens are classified as semites (per law) even though most…

■■■□□ ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure. https://thehackernews.com/2025/08/ermac-v30-banking-trojan-source-code.html

■■■□□ This Spyware Campaign Is Targeting Android Users Via Messaging Apps. https://lifehacker.com/tech/this-spyware-campaign-is-targeting-android-users-via-messaging-apps

■■■■□ Google confirms data stolen in breach by known hacker group. Hackers used voice phishing to access Google’s internal Salesforce system and steal data. https://cyberguy.com/security/google-confirms-data-stolen-breach-known-hacker-group/ https://cloud.google.com/blog/topics/threat-intelligence/voice-phishing-data-extortion?rev=7194ef805fa2d04b0f7e8c9521f97343