NOXLEVIATHAN404

Chinese hackers breach US local governments using Cityworks zero-day Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United States. Sergiu Gatlan | bleepingcomputer​.com • May 22, 2025

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise Windows Server 2025 flaw allows any user with dMSA write permissions to escalate privileges and compromise AD. The Hacker News | thehackernews​.com • May 22, 2025

FTC finalizes order requiring GoDaddy to secure hosting services The Federal Trade Commission (FTC) has finalized an order requiring web hosting giant GoDaddy to secure its services to settle charges of data security failures that led to several data breaches since 2018. Sergiu Gatlan | bleepingcomputer​.com • May 22, 2025

Hacktivist Targets India Between April 22 and May 5, 2025, Indian organizations faced a significant surge in hacktivist activities, driven primarily by geopolitical tensions stemming from the recent terrorist attack in Pahalgam, Jammu & Kashmir. Here’s a quick overview of the evolving threat landscape: •80 cyber incidents observed; 71% (57 incidents) linked to ideologically motivated hacktivist groups. •Primary attack types included website defacements, DDoS attacks, data breaches, and credential leaks. •Telegram emerged as the primary platform (44 incidents) for attack coordination and propaganda. •Government, education, and industrial sectors were predominantly targeted due to their visibility and symbolic value. Key hacktivist groups involved: •Dark Cyber Gang (DCG): Led with defacement attacks. •SYLHET GANG-SG and FANATIX LEGION: Actively coordinating attacks on public platforms. •Kazuya: Engaged in defacements, utilizing dark forums. https://x.com/nanduhari/status/1919505803016544762

XENOSTRESSER TOOLS Layer 7 DDoS Tools Price: 75k Advantages: - CAN ADD DDOS API ON VPS OR PTERODACTYL PANEL - NO ENC - FREE METHOD AND API FILE - FREE TUTORIAL IF CONFUSED - TOOLS CAN BE RESOLD - PROXY SCRAPER - OVERPOWER METHOD - CAN BE RUN ON TERMUX POWERPROOF: https://whatsapp.com/channel/0029VbAcPLU0bIdsxqRqB51J Want to buy? Chat: +62 889-5945-494 +62 857-6750-6441 +62 812-5413-7725 Xenostresser vs support spotify https://whatsapp.com/channel/0029VbAcPLU0bIdsxqRqB51J/100 Xenostresser vs octoplay(hardwebsite) https://whatsapp.com/channel/0029VbAcPLU0bIdsxqRqB51J/148 Xenostresser vs klikhoki(hardwebsite) https://whatsapp.com/channel/0029VbAcPLU0bIdsxqRqB51J/149 IF YOU WANT TO BUY CHAT ON WHATSAPP, DON'T ON TELEGRAM Join free channel sc: https://whatsapp.com/channel/0029VaeOcyy59PwVACImgZ3d

Fake AI video generators drop new Noodlophile stealer malware Fake AI-powered video generation tools are being used to distribute a new information-stealing malware family called 'Noodlophile,' under the guise of generated media content. Bill Toulas | bleepingcomputer​.com • May 10, 2025

Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection Google fined $1.375B by Texas for secretly tracking location and biometric data without user consent. The Hacker News | thehackernews​.com • May 10, 2025

Ascension says recent data breach affects over 430,000 patients Ascension, one of the largest private healthcare systems in the United States, has revealed that a data breach disclosed last month affects the personal and healthcare information of over 430,000 patients. Sergiu Gatlan | bleepingcomputer​.com • May 9, 2025

Google Chrome to use on-device AI to detect tech support scams Google is implementing a new Chrome security feature that uses the built-in 'Gemini Nano' large-language model (LLM) to detect and block tech support scams while browsing the web. Bill Toulas | bleepingcomputer​.com • May 9, 2025

BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. Dutch and U.S. law enforcement have dismantled a long-running criminal proxy botnet powered by over 7,000 infected IoT and end-of-life (EoL) devices The Hacker News | thehackernews​.com • May 9, 2025

Chinese hackers behind attacks targeting SAP NetWeaver servers Forescout Vedere Labs security researchers have linked ongoing attacks targeting a maximum severity vulnerability impacting SAP NetWeaver instances to a Chinese threat actor. Sergiu Gatlan | bleepingcomputer​.com • May 9, 2025

Germany takes down eXch cryptocurrency exchange, seizes servers The Federal police in Germany (BKA) seized the server infrastructure and shut down the 'eXch' cryptocurrency exchange platform for alleged money laundering cybercrime proceeds. Bill Toulas | bleepingcomputer​.com • May 9, 2025

Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials Brazil-targeted phishing abuses RMM trialware via NF-e lures + Dropbox links, enabling stealth access The Hacker News | thehackernews​.com • May 9, 2025

Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business AI agents pose real threats like data leaks and misuse—Auth0's webinar shares how to secure them fast. The Hacker News | thehackernews​.com • May 9, 2025

Beyond Vulnerability Management – Can You CVE What Over 1.3M security issues across 68K assets expose CVE overload + inefficiency in patching response. The Hacker News | thehackernews​.com • May 9, 2025

Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android Google’s AI scam defenses now block 20x more malicious pages, cutting airline and visa scams by 80%+ in 2024. The Hacker News | thehackernews​.com • May 9, 2025

Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell China-based hackers exploited SAP flaw CVE-2025-31324 since April 29, impacting global industries via web shells. The Hacker News | thehackernews​.com • May 9, 2025

FBI: End-of-life routers hacked for cybercrime proxy networks The FBI warns that threat actors are deploying malware on end-of-life (EoL) routers to convert them into proxies sold on the 5Socks and Anyproxy networks. Bill Toulas | bleepingcomputer​.com • May 8, 2025

Cisco fixes max severity IOS XE flaw letting attackers hijack devices Cisco has fixed a maximum severity flaw in IOS XE Software for Wireless LAN Controllers by a hard-coded JSON Web Token (JWT) that allows an unauthenticated remote attacker to take over devices. Bill Toulas | bleepingcomputer​.com • May 8, 2025

Education giant Pearson hit by cyberattack exposing customer data Education giant Pearson suffered a cyberattack, allowing threat actors to steal corporate data and customer information, BleepingComputer has learned. Lawrence Abrams | bleepingcomputer​.com • May 8, 2025