๐๐๐๐๐๐๐ ` ๐ซ
4.1K posts

๐๐๐๐๐๐๐ ` ๐ซ
@bofheaded
My forte: APT/s Hunting | Attribution and Correlation | TTPs and Attack to TA | Threat Intelligence. r00tit @ https://t.co/KIbYXeEFzc

Windows Notepad.exe now has a remote code execution vulnerability. You read that right. Notepad.exe, which used to be a simple text editor, has had so many network connect features added (including AI and Microsoft account subscriptions)โฆ that it now has security vulnerabilities. This CVE is rated as โSEVEREโ and given an 8.8 score. cve.org/CVERecord?id=Cโฆ


Russian #APT28 carries out cyberattacks against Ukraine and EU countries using the CVE-2026-21509 exploit: cert.gov.ua/article/6287250 All mentioned samples collected and uploaded abuse.ch bazaar.abuse.ch/browse/tag/APTโฆ bazaar.abuse.ch/browse/tag/CVEโฆ Used #covenant DLL also available: bazaar.abuse.ch/sample/40c2e55โฆ


๐จ New Censys research: -- โ10.6K exposed #Ollama instances ๐ฌ1.5K+ respond to prompts ๐ขMany running on random ports LLMs are fueling innovation and expanding the attack surface. Misconfigurations are real - Censys can help. -- Full analysis โ hubs.ly/Q03KWPys0














