Tootfinder

Threat intel experts have told me that CISOs should be prepared for DDoS attacks in terms of Iranian threats.
"'313 Team' claimed responsibility for a Distributed Denial-of-Service (DDoS) attack on Trump’s Truth Social platform just hours after the U.S. strikes."

Iranian-Aligned Hackers Claim Responsibility for Attack on Trump’s Truth Social Platform
A group of Iranian-aligned hackers has reportedly attacked something President Donald Trump holds dear — his Truth Social platform.

Make sure you check out today's Metacurity for the most critical infosec developments you should know, including
--US agency overseeing cache of nuclear weapons was breached in SharePoint attack,
--Funding for critical infrastructure cyber threat detection has expired,
--Iranians received Apple spyware warnings,
--OpenAI founder warns of AI fraud crisis,
--Clorox claims IT provider gave hackers employee passwords,
--Feds warn of Interlock ransomware.

US agency overseeing cache of nuclear weapons was breached in SharePoint attack
Funding for critical infrastructure cyber threat detection has expired, Iranians received Apple spyware warnings, OpenAI founder warns of AI fraud crisis, Clorox claims IT provider gave hackers employee passwords, Feds warn of Interlock ransomware, IVF records posted on dark web, much more

Frittentester gesucht in KA.
Von der #gpn23 aus ist das eher eine Fahrradentfernung.
Bis ca. 22:00.
geo:49.0082541,8.3945124?z=19.0(Waldstraße)
https://comaps.at/84DPfSibwZ/Waldstraß

A look at Scattered Spider, a group of mainly young UK and US hackers using targeted social engineering to gain access to company systems and install ransomware (Wired)
https://www.wired.com/story/scattered-spider-most-imminent-threat/

A Group of Young Cybercriminals Poses the ‘Most Imminent Threat’ of Cyberattacks Right Now
The Scattered Spider hacking group has caused chaos among retailers, insurers, and airlines in recent months. Researchers warn that its flexible structure poses challenges for defense.

Warnings issued as hackers actively exploit critical zero-day in Microsoft SharePoint https://therecord.media/microsoft-sharepoint-zero-day-vulnerability-exploited-globally

From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs
Alsharif Abuadbba, Chris Hicks, Kristen Moore, Vasilios Mavroudis, Burak Hasircioglu, Diksha Goel, Piers Jennings
https://arxiv.org/abs/2506.13434

From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs
Large Language Models (LLMs) are set to reshape cybersecurity by augmenting red and blue team operations. Red teams can exploit LLMs to plan attacks, craft phishing content, simulate adversaries, and generate exploit code. Conversely, blue teams may deploy them for threat intelligence synthesis, root cause analysis, and streamlined documentation. This dual capability introduces both transformative potential and serious risks. This position paper maps LLM applications across cybersecurity fram…

Google says its Big Sleep AI agent for finding unknown software vulnerabilities recently discovered a critical SQLite flaw that "was at risk of being exploited" (Jonathan Greig/The Record)
https://therecord.media/google-big-sleep-ai-tool-found-bug

Google says ‘Big Sleep’ AI tool found bug hackers planned to use
On Tuesday, Google said Big Sleep managed to discover CVE-2025-6965 — a critical security flaw that Google said was “only known to threat actors and was at risk of being exploited.”

From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs
Alsharif Abuadbba, Chris Hicks, Kristen Moore, Vasilios Mavroudis, Burak Hasircioglu, Diksha Goel, Piers Jennings
https://arxiv.org/abs/2506.13434

From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs
Large Language Models (LLMs) are set to reshape cybersecurity by augmenting red and blue team operations. Red teams can exploit LLMs to plan attacks, craft phishing content, simulate adversaries, and generate exploit code. Conversely, blue teams may deploy them for threat intelligence synthesis, root cause analysis, and streamlined documentation. This dual capability introduces both transformative potential and serious risks. This position paper maps LLM applications across cybersecurity fram…

This https://arxiv.org/abs/2411.17931 has been replaced.
initial toot: https://mastoxiv.page/@arXiv_csCR_…

Combining Threat Intelligence with IoT Scanning to Predict Cyber Attack
While the Web has become a global platform for communication, malicious actors, including hackers and hacktivist groups, often disseminate ideological content and coordinate activities through the "Dark Web", an obscure counterpart of the conventional web. Presently, challenges such as information overload and the fragmented nature of cyber threat data impede comprehensive profiling of these actors, thereby limiting the efficacy of predictive analyses of their online activities. Concurrently, t…