Today in the SUN we feature an article from Cyera on Ni8mare, an unauthenticated remote code execution in n8n. Read more below: www.cyera.com/research-lab... #cybersecurity @andyjabbour.bsky.social

A maximum severity vulnerability dubbed "Ni8mare" allows remote, unauthenticated attackers to take control over locally deployed instances of the N8N workflow automation platform.

sharing a theory I am researching below 1.) claims of cyber-related effect in Venezuela darkreading.com/cybersecurit... 2.) potential BGP anomaly event fits timeframe x.com/blackorbird/... 3.) leaked snowden doc suggests possible relevant tooling blog.fox-it.com/2015/04/20/d...

Mad emperor is still mad.

Cisco has patched an ISE vulnerability with public proof-of-concept exploit code that can be abused by attackers with admin privileges.

Today in the SUN we feature an article from Emsisoft on the state of ransomware in the U.S. Read more below: www.emsisoft.com/en/blog/4721... #cybersecurity @andyjabbour.bsky.social

Our latest edition of the Security Sprint is out now! In this episode, Dave and Andy discuss Geo-politics, attacking the Grid, Ransomware, and more! Our podcast is available right now, go check it out! #cybersecurity @andyjabbour.bsky.social gate15.global/weekly-secur...

This vector—which has seen increased visibility and use since May 2025—has enabled credential phishing campaigns tied to phishing-as-a-service (PhaaS) platforms like Tycoon2FA, using lures such as voicemails, shared documents, HR updates, and password resets.

Phishing actors are abusing complex routing scenarios and misconfigured spoof protections to spoof organizations’ domains and deliver emails that appear internally sent. msft.it/63322tFxIO

While we wait for the podcast... today's Gen AI version of the @gate15.bsky.social SUN touches on the new report from @ransomwaresommelier.com & RF on the evolving state of ransomware in 2026. vimeo.com/1151976526/6... This video is shared daily via our GRIP (subscribe from any page on our website)

New from @derekbjohnson.bsky.social in @cyberscoop.bsky.social: AI, voting machine conspiracies fill information vacuum around Venezuela operation cyberscoop.com/ai-voting-ma... cc @gate15.bsky.social

New from @derekbjohnson.bsky.social in @cyberscoop.bsky.social: AI, voting machine conspiracies fill information vacuum around Venezuela operation potatoscoop.com/ai-voting-ma... cc @gate15.bsky.social

New Year, New @gate15.bsky.social Weekly Security Sprint! 18 minute race on geopolitics, attacking the grid, ransomware ➕ @dpounder.bsky.social & I talk Venezuela, big topics & new reports from @ransomwaresommelier.com, @kattenbarge.bsky.social & more. gate15.global/weekly-secur... #cybersecurity

"Newmark says he still gets angry about the idea of somebody trying to rip off his customers. “I take it personally, and I think everyone involved in any kind of platform should feel the same way,” he says. “It should piss them off.”" www.fastcompany.com/91467939/cra...

The State of Ransomware in the U.S.: Report and Statistics 2025 www.emsisoft.com/en/blog/4721... @gate15.bsky.social #cybersecurity #ransomware

Today in the SUN, we feature an article from @theregister.com on the dangers of failing to enforce MFA. Read more below: www.theregister.com/2026/01/06/5... #cybersecurity @andyjabbour.bsky.social

Bitdefender released an article on what scares people most about hackers, highlighting financial loss, identity theft, and scams. Read more below: www.bitdefender.com/en-us/blog/h... #cybersecurity @andyjabbour.bsky.social

Sedgwick confirms cyber incident affecting its major federal contractor subsidiary via @jgreig.bsky.social & @therecordmedia.bsky.social

Last week we have observed 103 events across 26 countries and attributed them to 22 ransomwares. The top targeted country was #UnitedStates and the most targeted sector was #Construction. The ransomware #Qilin has been busy with 30 new events (29%)! Learn more: https://ecrime.ch/

Good perspective from Jim Langevin in @cyberscoop.bsky.social, including some of what needs to be done to continue to support private-public partnerships. 'Congress — on both sides of the aisle — has the capacity to act.' Will they? cyberscoop.com/us-cyber-def... #cybersecurity @gate15.bsky.social

"Because the organizations listed below did not enforce MFA, the attacker walks right in through the front door," the cybersecurity shop said in a Monday report. "No exploits, no cookies – just a password." cc @gate15.bsky.social #cybersecurity Read more: www.infostealers.com/article/doze...

CISA posts tips and resources to help secure critical infrastructure: 'Secure Your Business; Protect your business, employees and customers with smart cybersecurity practices. You Can Protect Your Business from Online Threats.' www.cisa.gov/audiences/sm... @gate15.bsky.social youtu.be/vEtXtSdPozs

New! From @ransomwaresommelier.com: New ransomware tactics to watch out for in 2026. Observations, emerging trends and one BIG BOLD prediction about the #ransomware threat environment in 2026. 👀 Good work, Allan! www.recordedfuture.com/blog/ransomw... @gate15.bsky.social @ecrime.ch #cybersecurity

The cost of ransomware... 'According to a financial statement.. Tata Motors, the UK-based carmaker suffered a 25.1% year-on-year decline in retail sales during the third quarter of 2025, with just 79,600 vehicles sold.' www.infosecurity-magazine.com/news/jlr-q3-... @gate15.bsky.social

Today in the SUN we feature an article from @bleepingcomputer.com.web.brid.gy on over 10K Fortinet firewalls being exposed to an actively exploited 2FA bypass. Read more below: www.bleepingcomputer.com/news/securit... #cybersecurity @andyjabbour.bsky.social

Leduc County said it was the target of a deliberate cybersecurity attack which disabled some of Read more: https://www.ctvnews.ca/edmonton/article/leduc-county-target-of-christmas-day-cybersecurity-attack/

AI Deepfakes Are Impersonating Pastors to Try to Scam Their Congregations; Religious communities around the US are getting hit with AI depictions of their leaders sharing incendiary sermons and asking for donations, from @kattenbarge.bsky.social cc @gate15.bsky.social www.wired.com/story/ai-dee...

Today in the SUN we feature an article from Cyble on how CISA's Known Exploited Vulnerabilities catalog surged 20% in 2025. Read more below: cyble.com/blog/cisa-ke... #cybersecurity @andyjabbour.bsky.social

We added Fortinet SSL-VPN CVE-2020-12812 to our daily Vulnerable HTTP Report: www.shadowserver.org/what-we-do/n... After 5 1/2 years since being published still over 10K Fortinet firewalls remain unpatched. Actively exploited as recently highlighted by Fortinet: www.fortinet.com/blog/psirt-b...

From Pornhub to AI to data breaches to 0 days and more, Lawrence Abrams lists off @bleepingcomputer.com's 15 biggest cybersecurity and cyberattack stories of 2025 www.bleepingcomputer.com/news/securit... #cybersecurity #databreach @gate15.bsky.social

CISA’s Known Exploited Vulnerabilities (KEV) Catalog Grew By 20% In 2025, Including 24 Vulnerabilities Exploited By Ransomware Groups. cyble.com/blog/cisa-ke... #cybersecurity #ransomware @gate15.bsky.social

Today in the SUN we feature an article from @wired.com on fears mounting that US federal cybersecurity is stagnating—or worse. Read more below: www.wired.com/story/expire... #cybersecurity @andyjabbour.bsky.social

Security Boulevard released an article on some lessons learned from the top 10 ransomware incidents in 2025. Ransomware continued to disrupt organizations across every sector in 2025. Read the full article below: securityboulevard.com/2025/12/less... #cybersecurity @andyjabbour.bsky.social

RSF discovers Belarusian surveillance malware targeting Android phones, requiring physical access: rsf.org/en/exclusive...

'“On a daily basis I’m worrying that federal cybersecurity and critical infrastructure protection may be backsliding,”' - @malwarejake.bsky.social tells @lhn.bsky.social in @wired.com. Me too, brother. Me too. www.wired.com/story/expire... @gate15.bsky.social @fergdawg.bsky.social #cybersecurity

Today in the SUN we feature an article from The Independent on how cyber attacks surged into prominence in 2025, exposing widespread vulnerabilities across the economy. Read more below: www.independent.co.uk/news/uk/home... #cybersecurity @andyjabbour.bsky.social

MongoBleed update: We added MongoDB CVE-2025-14847 tagging today that is version based. This results in 74,854 possibly unpatched versions (out of 78,725 exposed today). IP data on vulnerable instances shared in our Open MongoDB Report: www.shadowserver.org/what-we-do/n...

A day late but nonetheless, HBD, @briankrebs.infosec.exchange.ap.brid.gy / Krebs on Security! Happy 16th Birthday, KrebsOnSecurity [.] com! 16 years of fantastic cyber threat reporting. krebsonsecurity.com/2025/12/happ... #cybersecurity cc @gate15.bsky.social

This story has been developing for a while. New from the DOJ: Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware www.justice.gov/opa/pr/two-a... @gate15.bsky.social @ecrime.ch @campuscodi.risky.biz @ransomwaresommelier.com #cybersecurity #ransomware

Today in the SUN we feature an article from SC Media on the projected cybersecurity spending boom. Read more below: www.scworld.com/news/cyber-s... #cybersecurity @andyjabbour.bsky.social

"Internal documents from a Chinese artificial intelligence (AI) company indicated that China has been using the technology to intervene in foreign elections, including propaganda targeting Taiwan’s local elections next year and presidential elections in 2028" www.taipeitimes.com/News/front/a...

End of year roundup as @lhn.bsky.social takes a cut on 'The Worst Hacks of 2025; From university breaches to cyberattacks that shut down whole supply chains, these were the worst cybersecurity incidents of the year.' New, in @wired.com www.wired.com/story/worst-... cc @gate15.bsky.social

Today in the SUN we feature an article from @bleepingcomputer.com on Trust Wallet confirming an extension hack led to $7 million of crypto theft. Read more below: www.bleepingcomputer.com/news/securit... #cybersecurity @andyjabbour.bsky.social

Password vaults stolen from LastPass at the end of 2022 were cracked and used to steal cryptocurrency as recently as this year, with the stolen funds being laundered through Russia-based cryptocurrency exchanges www.trmlabs.com/resources/bl...

Today in the SUN we feature an article from @techcrunch.com on US insurance giant Aflac saying customers’ personal data was stolen during a cyberattack. Read more below: techcrunch.com/2025/06/23/u... #cybersecurity @andyjabbour.bsky.social

A Cybersecurity and Infrastructure Security Agency program that warns organizations about immine Read more: https://www.cybersecuritydive.com/news/cisa-ransomware-warning-program-key-employee-left/808589/

Aflac 'not affected by ransomware, but attributed the breach to an unspecified cybercrime group known to be targeting the U.S. insurance industry' - @zackwhittaker.com in @techcrunch.com techcrunch.com/2025/06/23/u... cc @gate15.bsky.social #cybersecurity

Today in the SUN we feature an article from @theguardian.com on a Neo-Nazi terror group stepping up US operations as the FBI pulls back. Read more below: www.theguardian.com/us-news/2025... #cybersecurity @andyjabbour.bsky.social

Certik released Hack3D: The Skynet Web3 Security Report for 2025, a data-driven examination of Web3 security trends, vulnerabilities, and threat intelligence across the Web3 ecosystem. Read below: www.certik.com/resources/bl... #cybersecurity @andyjabbour.bsky.social @campuscodi.risky.biz

The Australian Signals Directorate announced that organizations should consider their cyber hygiene in light of global events. Read the full article here: www.cyber.gov.au/about-us/vie... #cybersecurity @andyjabbour.bsky.social @campuscodi.risky.biz