[dos] EVerest 2025.9.0 - DoS
EVerest 2025.9.0 - DoS
Cyber Risks 894
Reporting on cyber threats: ransomware, phishing, breaches, malware and the actors behind them, curated from security news, research and vendor blogs.
Weekly Update 519: Breaches & Data Integrity
It does feel like I've bitten off too much and am now chewing like crazy this week. The 3D printing talk with Elle in Oslo, the "normal" NDC infosec talk, the cyber-broken talk with Scott in Copenhagen and then those ratbag hackers keep dumping more
Financially Motivated Threat Actor BREEZE COMET Targets Brazil
Introduction Beginning in 2024 Mandiant investigated a string of compromises affecting Brazilian financial services, retail, and eCommerce organizations. Google Threat Intelligence Group (GTIG) tracks this activity as BREEZE COMET (formerly UNC5669), a...
[webapps] Easy Appointments 1.5.1 - Blind SQL Injection
EasyAppointments 1.5.1 - Blind SQL Injection
[webapps] mini Orange 5.4.3 - Unauthenticated Auth Bypass
miniOrange 5.4.3 - Unauthenticated Auth Bypass
[webapps] Grav CMS 2.0.7 - RCE
Grav CMS 2.0.7 - RCE
[webapps] Bludit CMS - Stored XSS
Bludit CMS - Stored XSS
[webapps] Payload CMS 3.72.0 - Blind SQL Injection
Payload CMS 3.72.0 - Blind SQL Injection
[webapps] Wolf CMS 0.8.3.1 - RCE v
Wolf CMS 0.8.3.1 - RCE v
Between Two Nerds: The perfect hacker
In this edition of Between Two Nerds Tom Uren and The Grugq talk about how AI is the perfect hacker, but what makes it perfect for states is the opposite of what makes it perfect for criminals. This episode is also available on YouTube . Show notes...
This month in security with Tony Anscombe – August 2026 edition
Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news
Risky Bulletin: New powers for Dutch intelligence services
Dutch intelligence services will get new powers, a security expert has been arrested in Israel for hacking, the BTS hacker gets a 20 year sentence in South Korea, and an AfD politician in Germany has been linked to a Russian cybercrime hosting service....
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.4 - Path Traversal to Remote Code Execution
[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
[webapps] Cube Cart 6.7.4 - Cross-Site Scripting
CubeCart 6.7.4 - Cross-Site Scripting
[webapps] Cube Cart 6.7.4 - Stored XSS
CubeCart 6.7.4 - Stored XSS
[webapps] Cube Cart 6.7.4 - SQL
CubeCart 6.7.4 - SQL
[webapps] Cube Cart 6.7.4 - SQL injection
CubeCart 6.7.4 - SQL injection
[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)
C-MOR 6.0104 - Cross-Site Scripting (XSS)
[webapps] C-MOR 6.0104 - Directory Traversal
C-MOR 6.0104 - Directory Traversal
Sponsored: Attackers need to be right more than once
In this Risky Business sponsored interview, James Wilson chats with Dropzone AI’s founder and CEO Edward Wu to debunk the adage, “an attacker only has to be right once”. Modern intruders need to be successful across multiple steps before actually reaching...
Risky Bulletin: Two TeamPCP members arrested in Australia
Two members of TeamPCP arrested in Australia, Qilin hits the US firearms agency, America seizes two more Chinese botnets, CISA says most cyber activity is opportunistic. Show notes Risky Bulletin: Two TeamPCP members arrested in Australia
AI-driven OSINT in the wrong hands – and why everyone could be a target for fraud
It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.
Srsly Risky Biz: China's AI-Enabled APT Operations Are Getting Interesting
Tom Uren and James Wilson talk about evidence that Chinese APT groups are using AI in a really sensible way, to beef up their malware arsenal. This will make it harder for threat intel firms to cluster activity for attribution. They also discuss the US...
Risky Bulletin: Russia starts blocking DoH and DoT
Russia begins blocking the DoH and DoT protocols, Russian hacktivists leak Spanish police and military personnel data, China and South Korea detain a vishing gang, and AI malware is not that common. Show notes Risky Bulletin: Russia starts blocking DoH and DoT
A Cautionary Tale About Data Breach Claims, Verification and Carhartt
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even be the cybercrime guys who got this wrong, but it all starts here: 🚨Cyber
[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Between Two Nerds: Attribution is dead, long live attribution
In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether the increasing use of AI will make it harder for forensics teams to determine who is responsible for a hack. This episode is also available on YouTube . Show notes Florian Roth...
Risky Bulletin: Expired credit cards can be used for malicious transactions
Expired credit cards can be used for malicious transactions, Iranian hackers shut down a UK power plant, the Lazarus Group hacks South Korea’s Presidential Office, and an Android malware strain is infecting smart cars. Show notes Risky Bulletin: Expired...
Weekly Update 518: IoT Doorlock Nirvana with Uni Fi
I genuinely think I've nailed the IoT door lock situation! Well, Ubiquiti has, but I think I've worked out how to put it all into a residential house and have it make sense. There are a few basic tenets: Main power (never have to rely on