🚨 A member of the suspected North Korean hacker group Kimsuky APT has encountered a significant data leak, exposing hundreds of GB of internal files and tools. 🧐 The intrusion likely occurred in early June 2025, revealing the organization's complex backdoors, phishing frameworks, and reconnaissance operations. Analysis of the leaked files indicates that the internal dump originated from two compromised systems belonging to an operator codenamed "KIM." One is a Linux development workstation running Deepin 20.9; the other is a publicly-facing VPS used for spear-phishing activities. cc @SlowMist_Team 🧐

🚨 A 0-Day vulnerability has been discovered in the popular cryptocurrency wallet solution HashiCorp Vault, involving authentication and authorization, remote code execution, etc. Please upgrade promptly. HashiCorp Vault 0-Day Vulnerabilities Let Attackers Execute Remote Code

It's damn hard to get a screw to do something and think for itself.

2028.

👀 Is this what we do every day? No originality or technical content = = #Telegram phishing bot

🚨Akira Ransomware targets SonicWall VPNs in likely zero-day attacks Over the past 72 hours, there has been a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSLVPN is enabled. This includes threat activity highlighted by third-party cybersecurity research teams such as: - Arctic Wolf - Google Mandiant - Huntress The below KQL uses MDE device discovery telemetry to determine if there is a SonicWall firewall in your environment and if SSLVPN functionality has been running on the client endpoint.🫡 #Cybersecurity #SonicWall #ZeroDay #AkiraRansomware

🧐 According to research by Google Cloud and cybersecurity firm Wiz, North Korean hacker groups are infiltrating cloud systems through fake IT job offers, with an estimated $1.6 billion in cryptocurrency stolen by 2025.

🧐North Korean Hackers Are Using Fake Job Offers to Breach Cloud Systems, Steal Billions in Crypto

🚨 ALERT: An EIP-7702 upgraded address lost $66k to phishing using batch transfers disguised as Uniswap swaps. 💸

We (+@ronenshh) hacked NVIDIA's Triton AI server by abusing a single error message🚨 The result is unauthenticated RCE allowing attackers to compromise the server and steal proprietary AI models🤯 For more details & mitigations check out our blog @wiz_io