Sami Laiho
@samilaiho.com
If you’ve been planning to level up your cybersecurity skills, this is the moment.
Cqure Academy running their Black Week Cyber Upgrade - 40% off all online courses until December 1st.
👉 Check out the offer: cqureacademy.com/black-week-c...
#Cybersecurity #InfoSec #CQURE #CQUREacademy
Cqure Academy running their Black Week Cyber Upgrade - 40% off all online courses until December 1st.
👉 Check out the offer: cqureacademy.com/black-week-c...
#Cybersecurity #InfoSec #CQURE #CQUREacademy
November 30, 2025 at 10:40 AM
If you’ve been planning to level up your cybersecurity skills, this is the moment.
Cqure Academy running their Black Week Cyber Upgrade - 40% off all online courses until December 1st.
👉 Check out the offer: cqureacademy.com/black-week-c...
#Cybersecurity #InfoSec #CQURE #CQUREacademy
Cqure Academy running their Black Week Cyber Upgrade - 40% off all online courses until December 1st.
👉 Check out the offer: cqureacademy.com/black-week-c...
#Cybersecurity #InfoSec #CQURE #CQUREacademy
GreyNoise launches free scanner to check if you're part of a botnet
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
GreyNoise launches free scanner to check if you're part of a botnet
GreyNoise Labs has launched a free tool called GreyNoise IP Check that lets users check if their IP address has been observed in malicious scanning operations, like botnet and residential proxy networ...
www.bleepingcomputer.com
November 29, 2025 at 3:46 PM
GreyNoise launches free scanner to check if you're part of a botnet
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
MS Teams Guest Access Can Remove Defender Protection When Users Join External
Tenants
thehackernews.com/2025/11/ms-t...
Tenants
thehackernews.com/2025/11/ms-t...
MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants
Attackers exploit Teams guest access and unprotected external tenants to bypass Microsoft Defender safeguards
thehackernews.com
November 29, 2025 at 3:42 PM
MS Teams Guest Access Can Remove Defender Protection When Users Join External
Tenants
thehackernews.com/2025/11/ms-t...
Tenants
thehackernews.com/2025/11/ms-t...
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP
Update
thehackernews.com/2025/11/micr...
Update
thehackernews.com/2025/11/micr...
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update
Microsoft is tightening Entra ID security with CSP updates blocking unauthorized scripts by October 2026.
thehackernews.com
November 28, 2025 at 11:25 PM
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP
Update
thehackernews.com/2025/11/micr...
Update
thehackernews.com/2025/11/micr...
Asahi admits ransomware gang may have spilled almost 2M people's data
www.theregister.com/2025/11/27/a...
www.theregister.com/2025/11/27/a...
Asahi admits ransomware may have spilled data on 2M people
: Brewer finally tallies fallout from September attack as it pushes earnings into 2026
www.theregister.com
November 28, 2025 at 11:23 PM
Asahi admits ransomware gang may have spilled almost 2M people's data
www.theregister.com/2025/11/27/a...
www.theregister.com/2025/11/27/a...
Comcast to pay $1.5M fine for vendor breach affecting 270K customers
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Comcast to pay $1.5M fine for vendor breach affecting 270K customers
Comcast will pay a $1.5 million fine to settle a Federal Communications Commission investigation into a February 2024 vendor data breach that exposed the personal information of nearly 275,000 custome...
www.bleepingcomputer.com
November 28, 2025 at 11:23 PM
Comcast to pay $1.5M fine for vendor breach affecting 270K customers
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Ransomware Reshaping Cyber as National Security Priority
www.databreachtoday.com/ransomware-r...
www.databreachtoday.com/ransomware-r...
Ransomware Reshaping Cyber as National Security Priority
Ongoing, high-profile ransomware attacks against Britain and the United States have transformed cybersecurity into a national security priority, Anne Neuberger, the
www.databreachtoday.com
November 28, 2025 at 11:22 PM
Ransomware Reshaping Cyber as National Security Priority
www.databreachtoday.com/ransomware-r...
www.databreachtoday.com/ransomware-r...
OpenAI discloses API customer data breach via Mixpanel vendor hack
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
OpenAI discloses API customer data breach via Mixpanel vendor hack
OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel.
www.bleepingcomputer.com
November 28, 2025 at 11:21 PM
OpenAI discloses API customer data breach via Mixpanel vendor hack
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites
www.theregister.com/2025/11/27/s...
www.theregister.com/2025/11/27/s...
Scattered Lapsus$ Hunters stress testing Zendesk weak spots
: ReliaQuest finds fresh crop of phishing domains and toxic tickets
www.theregister.com
November 28, 2025 at 11:21 PM
Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites
www.theregister.com/2025/11/27/s...
www.theregister.com/2025/11/27/s...
Akira's SonicWall Hacks Are Taking Down Large Enterprises
www.databreachtoday.com/akiras-sonic...
www.databreachtoday.com/akiras-sonic...
Akira's SonicWall Hacks Are Taking Down Large Enterprises
Multiple large enterprises that inherited SonicWall SSL VPN devices when they acquired a smaller entity have fallen victim to the Akira ransomware group, security
www.databreachtoday.com
November 28, 2025 at 11:20 PM
Akira's SonicWall Hacks Are Taking Down Large Enterprises
www.databreachtoday.com/akiras-sonic...
www.databreachtoday.com/akiras-sonic...
SiRcom SMART Alert (SiSA)
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: 9.1
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: 9.1
SiRcom SMART Alert (SiSA) | CISA
www.cisa.gov
November 28, 2025 at 6:38 AM
SiRcom SMART Alert (SiSA)
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: 9.1
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: 9.1
Festo Compact Vision System, Control Block, Controller, and Operator Unit
products
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
products
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Festo Compact Vision System, Control Block, Controller, and Operator Unit products | CISA
www.cisa.gov
November 28, 2025 at 6:37 AM
Festo Compact Vision System, Control Block, Controller, and Operator Unit
products
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
products
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Critical vulnerabilities in Mattermost
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9
NVD - CVE-2025-12419
nvd.nist.gov
November 28, 2025 at 6:36 AM
Critical vulnerabilities in Mattermost
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9
Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025
securelist.com/ntlm-abuse-i...
securelist.com/ntlm-abuse-i...
How NTLM is being abused in 2025 cyberattacks
This article covers NTLM relay, credential forwarding, and other NTLM-related vulnerabilities and cyberattacks discovered in 2025.
securelist.com
November 27, 2025 at 12:15 PM
Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025
securelist.com/ntlm-abuse-i...
securelist.com/ntlm-abuse-i...
Lifetime access to AI-for-evil WormGPT 4 costs just $220
www.theregister.com/2025/11/25/w...
www.theregister.com/2025/11/25/w...
Lifetime access to WormGPT 4 costs just $220
: 'Ah, I see you're ready to escalate. Let's make digital destruction simple and effective.'
www.theregister.com
November 27, 2025 at 12:12 PM
Lifetime access to AI-for-evil WormGPT 4 costs just $220
www.theregister.com/2025/11/25/w...
www.theregister.com/2025/11/25/w...
ASUS warns of new critical auth bypass flaw in AiCloud routers
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
ASUS warns of new critical auth bypass flaw in AiCloud routers
ASUS has released new firmware to patch nine security vulnerabilities, including a critical authentication bypass flaw in routers with AiCloud enabled.
www.bleepingcomputer.com
November 27, 2025 at 12:11 PM
ASUS warns of new critical auth bypass flaw in AiCloud routers
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Botnet takes advantage of AWS outage to smack 28 countries
www.theregister.com/2025/11/26/m...
www.theregister.com/2025/11/26/m...
Botnet takes advantage of AWS outage to smack 28 countries
: Even worse, it might have been a 'test run' for future attacks
www.theregister.com
November 27, 2025 at 12:11 PM
Botnet takes advantage of AWS outage to smack 28 countries
www.theregister.com/2025/11/26/m...
www.theregister.com/2025/11/26/m...
Reposted by Sami Laiho
#CTTT26 is not all about tech. Shocking, we know 😄
It is also a lot about the people and networking and forming connections you didn't have before or strengthening those you did.
Check out the video below with @d-e-a-n.bsky.social and @matetoth.hu 😉
youtu.be/MWJQCFRHtzY
It is also a lot about the people and networking and forming connections you didn't have before or strengthening those you did.
Check out the video below with @d-e-a-n.bsky.social and @matetoth.hu 😉
youtu.be/MWJQCFRHtzY
CTTT26 - Speaker promo - Máté Tóth
YouTube video by Cloud Tech Tallinn
youtu.be
November 27, 2025 at 10:33 AM
#CTTT26 is not all about tech. Shocking, we know 😄
It is also a lot about the people and networking and forming connections you didn't have before or strengthening those you did.
Check out the video below with @d-e-a-n.bsky.social and @matetoth.hu 😉
youtu.be/MWJQCFRHtzY
It is also a lot about the people and networking and forming connections you didn't have before or strengthening those you did.
Check out the video below with @d-e-a-n.bsky.social and @matetoth.hu 😉
youtu.be/MWJQCFRHtzY
Stack-based Buffer Overflow in Microsoft Azure App Gateway and Azure
Application Gateway Elevation of Privilege Vulnerability
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Application Gateway Elevation of Privilege Vulnerability
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
NVD - CVE-2025-64657
nvd.nist.gov
November 27, 2025 at 10:37 AM
Stack-based Buffer Overflow in Microsoft Azure App Gateway and Azure
Application Gateway Elevation of Privilege Vulnerability
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Application Gateway Elevation of Privilege Vulnerability
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Allowlist Bypass in Run Terminal Tool Allows Arbitrary Code Execution During
Autorun Mode in Cursor
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Autorun Mode in Cursor
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
NVD - CVE-2025-62354
nvd.nist.gov
November 27, 2025 at 10:36 AM
Allowlist Bypass in Run Terminal Tool Allows Arbitrary Code Execution During
Autorun Mode in Cursor
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Autorun Mode in Cursor
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Vulnerabilities in Zenitel TCIV-3
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0
Zenitel TCIV-3+ | CISA
www.cisa.gov
November 27, 2025 at 10:35 AM
Vulnerabilities in Zenitel TCIV-3
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0
URL: www.cisa.gov/news-events/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Apache
Software Foundation Apache Druid
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Software Foundation Apache Druid
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
NVD - CVE-2025-59390
nvd.nist.gov
November 27, 2025 at 10:34 AM
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Apache
Software Foundation Apache Druid
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Software Foundation Apache Druid
URL: nvd.nist.gov/vuln/detail/...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Tor switches to new Counter Galois Onion relay encryption algorithm
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Tor switches to new Counter Galois Onion relay encryption algorithm
Tor has announced improved encryption and security for the circuit traffic by replacing the old tor1 relay encryption algorithm with a new design called Counter Galois Onion (CGO).
www.bleepingcomputer.com
November 26, 2025 at 3:13 PM
Tor switches to new Counter Galois Onion relay encryption algorithm
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...