#HackingAlert

[osintelligence]

https://bit.ly/46G6SIa - 🚨 Hackers are actively exploiting a critical vulnerability in ownCloud, identified as CVE-2023-49103. This flaw, which exposes admin passwords and other sensitive credentials, particularly affects containerized deployments of the widely-used open-source file synchronization and sharing solution. #CyberSecurity #ownCloudVulnerability 💻 The vulnerability allows remote attackers to execute 'phpinfo()' through the 'graphapi' app in ownCloud. This exposes server environment variables, including sensitive data like admin passwords, mail server credentials, and license keys. The severity of this issue is underscored by its maximum CVSS score of 10.0. #DataBreach #CVE2023-49103 🔥 Active exploitation of this vulnerability has been reported since November 25, 2023. Threat tracking firms like Greynoise and Shadowserver have observed significant exploitation activities, with over 11,000 exposed instances detected worldwide. #HackingAlert #ThreatIntelligence 🌍 The exploitation is particularly widespread in Germany, the United States, France, and Russia. The heatmap of vulnerable endpoints indicates a global impact, urging immediate action from ownCloud administrators. #GlobalCyberThreat #TechSecurity 🛡️ To mitigate the risk, administrators should take specific remedial actions. Deleting a particular file in the 'graphapi' app, disabling the 'phpinfo' function in Docker containers, and changing exposed secrets are recommended. It's crucial to note that simply disabling the 'graphapi' app does not eliminate the threat.

[presspausewithjouhayna]

Why Your Password Is Putting You in Danger 😱 (Do This Instead!) Are you still using the same password for everything? That’s the easiest way to get hacked — and most people don’t even realize it! 😳 In this short, we break down how to create strong, secure passwords using simple tricks AND how to manage them without losing your mind. 💡 Learn why password managers like LastPass and 1Password are game changers for online safety. Please visit my website to get more information: https://ift.tt/toQazEk 🔔𝐃𝐨𝐧'𝐭 𝐟𝐨𝐫𝐠𝐞𝐭 𝐭𝐨 𝐬𝐮𝐛𝐬𝐜𝐫𝐢𝐛𝐞 𝐭𝐨 𝐦𝐲 𝐜𝐡𝐚𝐧𝐧𝐞𝐥 𝐟𝐨𝐫 𝐦𝐨𝐫𝐞 𝐮𝐩𝐝𝐚𝐭𝐞𝐬. https://www.youtube.com/@PressPauseWithJo/?sub_confirmation=1 ⭐⭐⭐ Audio Podcast is currently on your favorite platforms: Spotify:https://ift.tt/L6nuX3S ApplePodcast:https://ift.tt/ZWbs5U2 ✅ Important Link to Follow 🔗 Linktree https://ift.tt/QPG14Uj 🔗 Stay Connected With Me. Instagram: https://ift.tt/J6yUtrl Tiktok: https://ift.tt/kbWf9x1 Website: https://ift.tt/toQazEk 📩 For inquiries: info@jouhaynaalmheiri.com ============================= 🎬Suggested videos for you: ▶️ https://www.youtube.com/watch?v=cDe7Wpbo_l0 ▶️ https://www.youtube.com/watch?v=WLcTc8fTWFY ▶️ https://www.youtube.com/watch?v=6QsoM7cD7QU ▶️ https://www.youtube.com/watch?v=tMnsGMnmtCU ================================= ✅ About Press Pause with Jouhayna. Welcome to Press Pause with Jouhayna! Hi, I’m Jouhayna. This is the podcast channel where I take a moment to slow down in life’s chaos and have meaningful conversations. I interview fascinating people from all walks of life—everyday heroes, trailblazers, and visionaries—and explore their stories, insights, and lessons. I also bring a unique twist with my exclusive conversation game, designed to surprise, inspire, and connect on a deeper level. Each episode is a chance to reflect, learn, and celebrate the power of storytelling and human connection. Join me as it’s time to press pause and embrace the magic of meaningful conversations. For Collaboration and Business inquiries, please use the contact information below: 📩 Email: info@jouhaynaalmheiri.com 🔔 Take a break from the rush—subscribe and enjoy heartfelt interviews, untold stories, unique perspectives, and inspiring life lessons! https://www.youtube.com/@PressPauseWithJo/?sub_confirmation=1 ================================= 🔎 Related Phrases: how to create strong passwords, password manager apps, secure your online accounts, best password tips 2025, avoid getting hacked, online safety tips, protect your digital identity, strong password examples, LastPass tutorial, OnePassword guide, data protection tips, cyber hygiene, prevent online hacking, password security tricks, internet safety tips Hashtags #CyberSecurity #OnlineSafety #PasswordTips #StrongPasswords #DigitalSecurity #TechTips #PasswordManager #LastPass #OnePassword #InfoSec #InternetSafety #DigitalPrivacy #CyberSafe #HackingAlert #PasswordSecurity #CyberSecurityAwareness #PasswordVault #SecureYourAccounts #LifeHack2025 #TechTok #YouTubeShorts #FYP #ExplorePage #ReelTips #ShortsFeed #2FA #OnlineProtection #DigitalSecurityTips #PreventHacking #PasswordMistakes #CyberTips via Press Pause with Jouhayna https://www.youtube.com/channel/UCjEUVi0vOnYkx0YkQDB2FEA May 21, 2025 at 01:53PM

[isoah-corporate-blog]

Government spying is an open secret now and both government and private organizations are into cyber spying techniques to squeeze information and intelligence as much as possible. Read: http://bit.ly/2iAllzh

So, it's important to consider your mobile security seriously to protect your data from intruders.

[genebook-blog]

Beware of valentines day virus/spam

{o.a.}

 Spam trumpeting the power of love is nothing more than an old trick dressed up in new clothes, more evidence that the backers of the Waledec bot Trojan are the same bunch that hammered users in 2007 with Storm, security companies are warning.

Multiple security vendors, including MX Logic Inc., Trend Micro Inc., and Panda Security, have issued alerts about new Valentine's Day-themed spam campaigns that try to dupe users into installing the Waledec bot.

Subject lines for the spam, said Sam Masiello , vice president of information security at MX Logic, are "short and sweet," and include "Me and You," "In Your Arms" and "With all my love." From the spam, users who browse to the embedded link reach a site with a dozen hearts, any one of which download an executable file when clicked.

Masiello first noted the campaign last Thursday, but other researchers, including those at Trend Micro and Panda, picked up on the trend Monday. Both Masiello and Florabel Baetiong, an anti-spam research engineer with Trend, noted the similarity between the recent infection attempt and Valentine's Day scams launched last year by hackers controlling Storm, another bot Trojan that has since fallen into disuse, possibly because the crew responsible surrendered to heavy pressure by security experts .

"Clearly the old Storm folks are working as hard as they can to build up their new botnet, and are following the old tried-and-true methods of centering their social engineering tactics around holiday themes," said Masiello in a post to the MX Logic blog .

Storm used Valentine's Day spam in both 2007 and 2008 to hijack PCs.

Most researchers have come around to the idea that Waledec is, in fact, the new Storm. Joe Stewart , an expert on botnets -- Storm, in particular -- was confident that the group that backed Storm essentially re-wrote its code to come up with Waledec. "If it's not the same people, they would have had to study Storm intensively to match the functionality," Stewart said in an interview recently. "It's so similar that it's unlikely to be a different group."

The Waldec malware first began infecting systems just before Christmas , when it used phony holiday greetings and e-cards as bait, another Storm tactic during 2008. Last week, it surfaced again, this time hitchhiking on a spam run that claimed then President-elect Barack Obama would not take the oath of office on Jan. 20.

Although the Waledec botnet remains relatively small -- Stewart put it at just 10,000 machines -- it's growing at "an alarming rate," according to MessageLabs Ltd. In a report on botnets the e-mail security company released Monday (download PDF) , MessageLabs speculated that the botnet owners are "focusing on growing and developing this new botnet, rather than sending spam through it at this stage."

Masiello said that messages designed to plant Waledec were running at a volume of about 4,000-5,000 per hour, down from approximately 12,000 an hour last Friday, and had been holding steady for the last 48 hours. "I'd agree with MessageLabs," said Masiello on Tuesday. "It does look like they are in the process of building up the botnet." MX Logic has not seen any evidence that the Waledec botnet is, in turn, sending spam of its own.

Several botnets that were heavily disrupted by the takedown of McColo Corp., a California-based hosting company, are in the same condition, Masiello added. After suffering losses when McColo -- which had hosted command-and-control servers for several botnets, particular one dubbed "Srizbi" and other called "Rustock" -- was yanked off the Internet, they have spent the last several months adding new PCs to their collection.