A federal Judge Denise Cote in NY rejected the #Trump admin’s effort to dismiss lawsuit alleging #DOGE directed a massive breach of #OPM data affecting millions of people.

#law #InfoSec #NationalSecurity
https://storage.courtlistener.com/recap/gov.uscourts.nysd.636793/gov.uscourts.nysd.636793.72.0.pdf

**BeyondMachines** @beyondmachines1@infosec.exchange · 6h

BeyondMachines @beyondmachines1@infosec.exchange

"Gay Daddy" dating App leaks data of 50,000 User profiles and private messages
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/gay-daddy-dating-app-leaks-data-of-50000-user-profiles-and-private-messages-d-i-1-6-9/gD2P6Ple2L

BeyondMachines"Gay Daddy" dating App leaks data of 50,000 User profiles and private messagesThe "Gay Daddy: 40+ Date & Chat" dating app experienced a severe security breach exposing sensitive personal data of approximately 50,000 users, including names, HIV status, location data, private messages, and explicit photos, after Cybernews researchers discovered the app's Firebase database was completely unprotected with authentication credentials hardcoded in the app's public code.

**AAKL** @AAKL@infosec.exchange · 6h

AAKL @AAKL@infosec.exchange

From yesterday.

ZDNET: Clicked on a phishing link? Take these 7 steps ASAP to protect yourself https://www.zdnet.com/article/clicked-on-a-phishing-link-take-these-7-steps-asap-to-protect-yourself/ @ZDNet @edbott #cybersecurity #infosec #phishing

ZDNET · 1dClicked on a phishing link? Take these 7 steps ASAP to protect yourselfBy Ed Bott

**beardedtechguy@infosec:~$** @beardedtechguy@infosec.exchange · 7h

beardedtechguy@infosec:~$ @beardedtechguy@infosec.exchange

Oracle privately confirms Cloud breach to customers https://www.bleepingcomputer.com/news/security/oracle-privately-confirms-cloud-breach-to-customers/

#InfoSec #CyberSecurity #Oracle

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

Picus: MITRE ATT&CK T1562.010 Impair Defenses: Downgrade Attack https://www.picussecurity.com/resource/blog/t1562-010-downgrade-attack #cybersecurity #Infosec

www.picussecurity.comMITRE ATT&CK T1562.010 Impair Defenses: Downgrade AttackThis blog explains the T1562.010 Downgrade Attack technique in the MITRE ATT&CK framework in detail.

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

Microsoft: Threat actors leverage tax season to deploy tax-themed phishing campaigns https://www.microsoft.com/en-us/security/blog/2025/04/03/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns/ @microsoftsec #cybersecurity #infosec

Microsoft Security Blog · 8hThreat actors leverage tax season to deploy tax-themed phishing campaigns | Microsoft Security BlogAs Tax Day approaches in the United States on April 15, Microsoft has detected several tax-themed phishing campaigns employing various tactics. These campaigns use malicious hyperlinks and attachments to deliver credential phishing and malware including RaccoonO365, AHKBot, Latrodectus, BruteRatel C4 (BRc4), and Remcos.

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

Malwarebytes: QR codes sent in attachments are the new favorite for phishers https://www.malwarebytes.com/blog/news/2025/04/qr-codes-sent-in-attachments-are-the-new-favorite-for-phishers

T-Mobile sells this screwy GPS tracker, called SyncUP.

Location, name, and photos of random kids shown to parents in child tracker mix up https://www.malwarebytes.com/blog/news/2025/04/location-name-and-photos-of-random-kids-shown-to-parents-in-child-tracker-mix-up @mbthreatintel #cybersecurity #infosec #phishing

Malwarebytes · 9hQR codes sent in attachments are the new favorite for phishersPhishers are putting QR codes as images in attachments because it helps them bypass email filters.

**AAKL** @AAKL@infosec.exchange · 7h *

7h *

AAKL @AAKL@infosec.exchange

Tracked as CVE-2025-22457.

Ivanti Security Update: Pulse Connect Secure, Ivanti Connect Secure, Policy Secure and Neurons for ZTA Gateways https://www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways #cybersecurity #infosec #Ivanti

www.ivanti.comApril Security Update | IvantiWe are issuing an important security update to disclose a security vulnerability in Pulse Connect Secure, Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways.

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

Halcyon: Hunters International Moving to Straight Data Extortion Attacks https://www.halcyon.ai/blog/hunters-international-moving-to-straight-data-extortion-attacks

Halcyon Threat Insights 015: April 2025 Ransomware Report https://www.halcyon.ai/blog/halcyon-threat-insights-015-april-2025-ransomware-report #cybersecurity #infosec #ransomware

www.halcyon.aiHunters International Moving to Straight Data Extortion AttacksWhile it’s tempting to think ransomware gangs could ditch encryption for straight data exfiltration extortion, that’s not where the majority of the ecosystem is headed

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

Group-IB: Fraud Underbelly: Australia’s Digital Boom—A Fraudster’s Goldmine? https://www.group-ib.com/blog/fraud-underbelly-australia/ @groupib #cybersecurity #Infosec

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

ESET: The good, the bad and the unknown of AI: A Q&A with Mária Bieliková https://www.welivesecurity.com/en/we-live-science/good-bad-unknown-ai-qa-maria-bielikova/ @ESETresearch #cybersecurity #infosec #AI

www.welivesecurity.comThe good, the bad and the unknown of AI: Q&A with Mária BielikováThe computer scientist and AI researcher Mária Bieliková shares her thoughts on the technologys potential and pitfalls – and what may lie ahead for us.

**Matthias Schulze** @percepticon@ioc.exchange · 7h

Matthias Schulze @percepticon@ioc.exchange

UK warns of emerging threat from ‘sadistic’ online ‘Com networks’ of teenage boys https://therecord.media/uk-threat-com-sadistic-teenager #cybersecurity #infosec

**AAKL** @AAKL@infosec.exchange · 7h

AAKL @AAKL@infosec.exchange

Again? Are they competing with Oracle?

Bitdefender: Royal Mail Investigating Alleged Security Breach Following Third-Party Cyberattack https://www.bitdefender.com/en-us/blog/hotforsecurity/royal-mail-investigating-alleged-security-breach-following-third-party-cyber-attack @bitdefender #cybersecurity #infosec #databreach

Hot for SecurityRoyal Mail Investigating Alleged Security Breach Following Third-Party Cyber AttackThe Royal Mail is investigating a potential security breach after a threat actor allegedly leaked over 144 GB of data, reportedly stolen from the British postal service’s systems.

Drag & drop to upload

Recent searches

Search options

Administered by:

Server stats:

#infosec