Mastering Zero Trust Security for a Safer Digital World - https://www.redpacketsecurity.com/mastering-zero-trust-security-for-a-safer-digital-world/

Possible Phishing
on: hxxps[:]//vempire-opal[.]vercel[.]app
Analysis at: https://urldna.io/scan/680713da3b7750000dd89a27
#cybersecurity #phishing #infosec #urldna #scam #infosec

This dumb password rule is from CENLAR.

Your password can meet all the requirements in the list and still be invalid due to
an unspecified rule: any "special characters" that are not listed in the help text
are not allowed. Worse, it provides no useful feedback other than the "New Password"
field is red.

https://dumbpasswordrules.com/sites/cenlar/

Possible Phishing
on: hxxps[:]//register-opsec[.]net
Analysis at: https://urldna.io/scan/680713af3b7750000dd89a24
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing
on: hxxps[:]//opensea-coming[.]vercel[.]app/
Analysis at: https://urldna.io/scan/68052fb63b7750000ed5ceb3
#cybersecurity #phishing #infosec #urldna #scam #infosec

Many are the tricksters preying upon the innocent and the naive. May Set feast upon their souls, may Khepri roll them into little balls and push them into the river! #cybersecurity https://cromwell-intl.com/cybersecurity/basics/09-scams.html?s=mc

Trying to find data on cybercrime case closure / conviction rates

Can you recommend a place for me to look? Or better yet, a report to read?

FBI has produced a few reports on how many criminal complaints they get, but I'm not seeing any numbers on how often anyone gets charged or convicted - proportionally (well, I have found some but they're mostly puff pieces by cybershills)

Possible Phishing
on: hxxps[:]//nbm3suspi76activity[.]weebly[.]com
Analysis at: https://urldna.io/scan/6805324d3b7750000adb7c23
#cybersecurity #phishing #infosec #urldna #scam #infosec

RustoBot Botnet Exploits Router Flaws

Pulse ID: 6808367b763a45db31e7f677
Pulse Link: https://otx.alienvault.com/pulse/6808367b763a45db31e7f677
Pulse Author: cryptocti
Created: 2025-04-23 00:38:19

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Possible Phishing
on: hxxps[:]//imtokeny[.]top/
Analysis at: https://urldna.io/scan/68052e583b7750000adb7bd2
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing
on: hxxps[:]//kaitoai-register[.]xyz
Analysis at: https://urldna.io/scan/680713873b7750000dd89a1e
#cybersecurity #phishing #infosec #urldna #scam #infosec

Marks & Spencer Faces Cyberattack: A Wake-Up Call for Retail Cybersecurity

Marks & Spencer has confirmed a cyberattack that has disrupted its operations, highlighting the vulnerabilities in retail cybersecurity. As the company engages external experts to address the incident...

https://news.lavx.hu/article/marks-spencer-faces-cyberattack-a-wake-up-call-for-retail-cybersecurity

New and impressive dashboard to track the spread of Russian disinformation through a large network of Telegram channels, twitter accounts, fake news sites, etc. via the Pravda network from DFR Labs.

https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/

Possible Phishing
on: hxxps[:]//tiktokshop[.]whhcls[.]com/
Analysis at: https://urldna.io/scan/68067a4f3b7750000ba30b77
#cybersecurity #phishing #infosec #urldna #scam #infosec

WBAL-TV11 started digging into the #Kairos attack on the State Attorney's Office for the City of Baltimore.

Kairos had exfiltrated 325 GB of files, and none of it appeared to have been protected with any encryption. My previous report on the incident can be found here: https://databreaches.net/2025/04/19/baltimore-city-states-attorneys-office-hacked-data-leaked/

The city has now confirmed they had a breach (they were notified by law enforcement as they hadn't detected it on their own, it seems). But they are not giving out any details or answering any questions. See WBAL-TV's coverage at https://www.wbaltv.com/article/baltimore-states-attorney-office-cybersecurity-incident/64551797

So, of course, I have now filed a public records request under #MPIA to try to get answers to some questions because the state ignored all of my polite email inquiries.

Did I ever mention that I hate not getting answers to questions? :)

On Twitch delving into Head of DHS Physical OpSec Fail, SignalGate 3.0, Tesla's Earning Call | Schedule I/PoE 2 | Tech & Chill: OSS, Linux Gaming, Radio, Cybersec. Dive with us: https://twitch.tv/chiefgyk3d #Infosec #Linux #Cybersecurity #Tech #Streamer

Possible Phishing
on: hxxp[:]//cfspart-idp-impot-gov-france[.]sduaicrd[.]com/login/a3ceb/
Analysis at: https://urldna.io/scan/68067d073b7750000a2f94fc
#cybersecurity #phishing #infosec #urldna #scam #infosec

Revolutionizing Security Log Management with the OCSF Mapping App

The OCSF Mapping App is set to transform how security teams handle log data by streamlining the mapping process to the Open Cybersecurity Schema Framework. With AI integration and a robust architectur...

https://news.lavx.hu/article/revolutionizing-security-log-management-with-the-ocsf-mapping-app

NEW: whistleblower stalked after revealing DOGE cover-up, Lyft "pilots" recording you, a sneaky Zoom accessibility attack, furry hacker snitches on Heritage Foundation attackers, bad news about #Covid and peens, the Star Trekulator, and more:

https://www.patreon.com/posts/cybersecurity-22-127183985 #Cybersecurity #startrek #furry #hacking

Another reminder of the virtues of running #LLM locally e.g. via #Ollama

DeepSeek Breach Opens Floodgates to Dark Web

> [Researchers discovered] a publicly accessible .. database belonging to #DeepSeek, containing more than a million lines of log streams with highly sensitive information. This exposed data included chat history, #API keys ...

https://www.darkreading.com/cyberattacks-data-breaches/deepseek-breach-opens-floodgates-dark-web