FreedomHack

11/03/2025

A Deep Dive Into Warlock Ransomware Deployed Via ToolShell SharePoint Chained Vulnerabilities

https://hybrid-analysis.blogspot.com/2025/10/a-deep-dive-into-warlock-ransomware.html

11/03/2025

The Australian Signals Directorate (ASD) Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability

A new implant called BADCANDY is exploiting CVE-2023-20198 even after patches.

ASD confirms BADCANDY malware re-infecting patched Cisco IOS XE devices through CVE-2023-20198 flaw.

11/03/2025

CVE-2025-62725 : From “docker compose ps” to System Compromise

https://www.imperva.com/blog/cve-2025-62725-from-docker-compose-ps-to-system-compromise/

11/03/2025

Is Shell2http dangerous?

11/03/2025

Hacking India’s largest automaker: Tata Motors

E-Dukaan is a Tata Motors site where their customers can buy spare parts for their vehicles. It’s a typical E-Commerce site, but it had a AWS S3 secret!

Tata Motors gave away the keys to their infrastructure and customer data on their public websites.

11/03/2025

OpenAI Unveils Aardvark : GPT-5 Agent That Finds and Fixes Code Flaws Automatically

OpenAI’s GPT-5 Aardvark scans, exploits, and patches software flaws autonomously—marking a leap in AI-driven cybersecurity.

11/03/2025

CVE-2025-2783 (Chrome zero-day vulnerability) : Italian-made spyware Dante linked to Chrome zero-day exploitation campaign

,
Italian company Memento Labs (formerly Hacking Team) Comeback.

https://www.helpnetsecurity.com/2025/10/28/dante-spyware-chrome-zero-day/

11/03/2025

Security researchers reveal new Pixnapping technique that can capture pixels on Android smartphone screens to steal data within 30 seconds.

11/03/2025

OpenAI's Sora AI quickly surpasses ChatGPT in download numbers despite negative feedback

11/02/2025

DPRK IOC

favicon (NAVER)

11/02/2025

China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems

China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.

11/02/2025

EY เปิดเผยการสํารองข้อมูลเซิร์ฟเวอร์ 4TB SQL แบบสาธารณะบน Microsoft Azure

มีการค้นพบไฟล์สํารอง SQL Server ขนาดใหญ่ 4TB ที่เป็นของ Ernst & Young (EY) ยักษ์ใหญ่ของโลกบน Microsoft Azure

https://securityaffairs.com/184062/data-breach/ernst-young-exposes-4tb-sql-server-backup-publicly-on-microsoft-azure.html