Notícias
Coleta de Informações
6 de novembro de 2025
I built Ashes CTI: a dual-mode (CLI + UI) Threat Intelligence platform for Windows
I've built an OSINT Cybersecurity Threat Intelligence Platform for Windows. Features: Dual Mode Operation (CLI + UI) Curated OSINT Ingestion Analyst-grade Summaries MITRE ATT&CK Mapping IOC Extraction + Enrichment SIEM/EDR Integration via TAXII/STIX/CSV No cloud - works offline Perfect for isolated or air-gapped environments No data collection The Windows Installer is free to download. Licenses are being given out for free during the Beta. Feedback, testing and feature suggestions are welcome. submitted by /u/Minimum_Call_3677 [link] [comments]
5 de novembro de 2025
Nikkei Says 17,000 Impacted by Data Breach Stemming From Slack Account Hack
The Japanese media giant says compromised Slack credentials were used to steal employee and business partner information. The post Nikkei Says 17,000 Impacted by Data Breach Stemming From Slack Account Hack appeared first on SecurityWeek.
5 de novembro de 2025
Exploited 'Post SMTP' Plugin Flaw Exposes WordPress Sites to Takeover
The critical vulnerability allows attackers to read arbitrary emails, including password reset messages. The post Exploited 'Post SMTP' Plugin Flaw Exposes WordPress Sites to Takeover appeared first on SecurityWeek.
5 de novembro de 2025
SonicWall blames state-sponsored hackers for September security breach
Cybersecurity firm SonicWall attributed the September security breach exposing firewall configuration files to state-sponsored hackers. In September, SonicWall urged customers to reset credentials after firewall backup files tied to MySonicWall accounts were exposed. The company announced it had blocked attackers' access and was working with cybersecurity experts and law enforcement agencies to determine the scope […]
4 de novembro de 2025
Active Directory Security Tip #14: Group Managed Service Accounts (GMSAs)
Group Managed Service Accounts (GMSAs) User accounts created to be used as service accounts rarely have their password changed. Group Managed Service Accounts (GMSAs) provide a better approach (starting in the Windows 2012 timeframe). The password is managed by AD and automatically changed. This means that the GMSA has to have security principals explicitly delegated … Continue reading
