Threadmark Cyber @Threadmark_IT

threadmarkcyber.au/home/ Australia Joined April 2018

Tweets

464
Followers

13
Following

168
Likes

70

Threadmark Cyber @Threadmark_IT

2 months ago

Critical flaw in Windows Server 2025 dMSAs (Delegated Managed Service Accounts) allows attackers with KDS root key to generate passwords for ALL dMSAs & gMSAs, enabling lateral movement & persistent access across Active D #Cybersecurity #WindowsServer #ActiveDirectory #GoldendMSA

0 0 0 42 0

Threadmark Cyber @Threadmark_IT

2 months ago

UNC6148 is targeting fully-patched, end-of-life SonicWall SMA 100 appliances, deploying OVERSTEP backdoor via potential zero-day exploit, stolen credentials or OTP seeds. This allows for persistent access, credential theft & data e #Cybersecurity #ThreatIntel #SonicWall #OVERSTEP

0 0 0 27 0

Threadmark Cyber @Threadmark_IT

2 months ago

Louis Vuitton UK confirms data breach exposing customer names, contact info, and purchase history. No financial data compromised. Authorities notified. This is the third LVMH cyberattack in 3 months. #Cybersecurity #DataBreach #LouisVuitton #Privacy

0 0 0 32 0

Threadmark Cyber @Threadmark_IT

2 months ago

14 arrested in UK & Romania for a massive phishing scam defrauding UK taxpayers of £47M. Coordinated raids targeted a cybercrime network that compromised over 100,000 accounts. #Cybercrime #PhishingScam #Fraud #UKNews

0 0 0 17 0

Threadmark Cyber @Threadmark_IT

2 months ago

Critical FortiWeb SQLi (CVE-2025-25257) allows pre-auth RCE! Proof-of-concept exploits are now public. Patch immediately to FortiWeb 7.6.4, 7.4.8, 7.2.11, 7.0.11 or later. #Fortinet #Cybersecurity #SQLi #RCE

0 0 0 64 0

Threadmark Cyber @Threadmark_IT

2 months ago

UK arrests four suspects, aged 17-20, allegedly linked to Scattered Spider hacking group targeting retailers like Marks & Spencer and previously MGM Resorts. Charges include computer misuse, blackmail & money laundering. #Cybercrime #ScatteredSpider #UKCrime #Cybersecurity

0 0 0 31 0

Threadmark Cyber @Threadmark_IT

2 months ago

Trend Micro Password Manager has a security flaw (versions 5.8.0.1327 & below) that could let attackers delete files and escalate privileges via link following. Update now! #CyberSecurity #InfoSec #Vulnerability #PasswordManager

0 0 1 30 0

Threadmark Cyber @Threadmark_IT

2 months ago

Critical Chromium V8 vulnerability! Remote attackers can potentially read/write data via malicious HTML. Update Chrome, Edge, Opera ASAP! #Cybersecurity #Vulnerability #Chrome #Edge

0 0 0 33 0

Threadmark Cyber @Threadmark_IT

2 months ago

Russian basketball player Daniil Kasatkin arrested in France on US hacking charges related to ransomware attacks. He denies involvement, claiming he unknowingly bought a compromised computer. Extradition pending. #Cybercrime #Hacking #Ransomware #France

0 0 0 27 0

Threadmark Cyber @Threadmark_IT

2 months ago

Honeywell Experion PKS & OneWireless WDM have a memory buffer vulnerability (CDA) that could lead to remote code execution. Update to Experion PKS 520.2 TCU9 HF1/530.1 TCU3 HF1 & OneWireless 322.5/331.1 ASAP. #Cybersecurity #ICS #Vulnerability #Honeywell

0 0 0 29 0

Threadmark Cyber @Threadmark_IT

2 months ago

Critical vulnerabilities (stack-based buffer overflows) found in Tenda O3V2 1.0.0.12(3880) httpd component. Remote exploitation possible, exploits publicly available. Consider updating firmware! #Tenda #Vulnerability #Cybersecurity #RouterSecurity

0 0 0 25 0

Threadmark Cyber @Threadmark_IT

2 months ago

McDonald's Australia job applicants' data exposed after AI chatbot, Olivia, hacked using default password "123456". Security flaw in Paradox.ai's system revealed access to millions of records. McDonald's "disappointed." #Cybersecurity #DataBreach #Privacy #McDonalds

0 0 0 31 0

Threadmark Cyber @Threadmark_IT

2 months ago

Researchers found eSIM vulnerabilities that could allow cloning and spying on communications. Attack requires temp physical access to extract key. Kigen has been notified and is mitigating. Other eSIM vendors may be vulnerable too. #eSIM #Security #Cybersecurity #JavaCard

0 0 0 31 0

Threadmark Cyber @Threadmark_IT

2 months ago

Supply chain attack hit VS Code extension Ethcode (6k+ installs) via malicious GitHub pull request. Attackers injected obfuscated code to download malware, potentially stealing crypto or poisoning contracts. Extension was removed #Cybersecurity #SupplyChainAttack #VSCode #Ethcode

0 0 0 29 0

Threadmark Cyber @Threadmark_IT

2 months ago

AMD CPUs have a new vulnerability called Transient Scheduler Attacks (TSA) allowing potential data leaks via speculative execution timing. Microcode updates are available for affected Ryzen & EPYC processors. Requires local code execution. #AMD #CPU #Security #Vulnerability

0 0 0 28 0

Threadmark Cyber @Threadmark_IT

2 months ago

Beware ATO tax scams! Cybercriminals impersonating the ATO are using AI to create convincing fake emails & calls. The ATO primarily communicates via MyGov. Never click suspicious links or share personal info. Verify directly via the ATO websit #TaxScams #ATO #Cybersecurity #Fraud

0 0 0 25 0

Threadmark Cyber @Threadmark_IT

2 months ago

Pakistan police busted a scam call center in Faisalabad, arresting 149 people including 71 foreigners (mostly Chinese) involved in Ponzi schemes and investment fraud. Victims were lured via social media with promises of returns. #Cybercrime #Pakistan #Fraud #Scam

0 0 0 65 0

Threadmark Cyber @Threadmark_IT

2 months ago

Qantas customers hit by the recent cyberattack are receiving *another* email, as more of their data (phone numbers, in many cases) was stolen than initially reported. Stay vigilant against unexpected calls. #CyberSecurity #DataBreach #Qantas #Privacy

0 0 0 55 0

Threadmark Cyber @Threadmark_IT

2 months ago

Thai police raided 19 locations, targeting a transnational crime network linked to scams & money laundering operating from Cambodia. Key suspect Kok An faces charges. Luxury vehicles & ฿27M seized. Many Thai workers were deceived a #Cybercrime #Thailand #Cambodia #MoneyLaundering

0 0 0 66 0

Threadmark Cyber @Threadmark_IT

2 months ago

New Atomic macOS Stealer (AMOS) variant includes a backdoor, increasing the risk of data theft and system control for Mac users. Exercise caution with downloads and be wary of phishing attempts. #MacOS #Malware #Security #Cybersecurity