TGViewer
Channel Public Channel
Netlas.io

Netlas.io

@netlas

Explore the latest in cybersecurity with Netlas.io. Stay ahead with updates on high-profile vulnerabilities, expert tutorials, essential safety tips, and the latest Netlas developments.
Open in Telegram
Subscribers
2.32K
Photos
434
Videos
3
Links
575

Showing posts older than #458 · Back to latest

Older Posts 20 shown
Post #457 612
CVE-2025-53786: Elevation of Privilege in Microsoft Exchange, 8.0 rating❗️

A vulnerability in Microsoft Exchange hybrid configurations could potentially allow an attackers with high local privileges to escalate their privileges in an organization's cloud infrastructure.

Search at Netlas.io:
👉 Link: https://nt.ls/GBh5M
👉 Dork: tag.name:"microsoft_exchange"

Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53786
  • 🔥 3
  • 🥰 1
  • 👾 1
Post #456 613
The $1.5 B Bybit Hack & How OSINT Cracked the Case 🔍

On February 21, 2025, the Lazarus Group tricked a Safe{Wallet} developer into approving malicious multisig transactions — netting over $1.4 billion from Bybit’s cold wallet — and covered their tracks with targeted JavaScript injection.

In our latest article, see how open-source sleuthing linked the heist to North Korea’s premier APT and learn the OSINT techniques that unraveled this record-breaking crypto theft.

👉 Read now: https://netlas.io/blog/bybit_hack
netlas.io The $1.5B Bybit Hack & How OSINT Led to Its Attribution - Netlas Blog Insights on the record-breaking Lazarus heist: how social engineering, AWS token hijacking, and Safe{Wallet} code injection enabled the Bybit hack.
  • 👍 7
  • 👾 3
Post #455 634
🚧 Planned Maintenance 🚧
The application may be unavailable for a period of time❗️

On Sunday, August 3, 2025, at 08:00 UTC ⏰, we will servicing the Netlas load balancer. In case of problems, the application may be unavailable for a couple of hours. Our team will do everything possible to prevent this.

Please remember to save your work before this time.
  • 👍 5
  • 💊 4
Post #454 1.58K
Hannibal Stealer Part 2: Unmasking the Modular Threat 🔓

Explore Hannibal’s evolution into a modular stealer — complete with browser cookie bypasses, Telegram & HTTP C2 channels, FTP/VPN/crypto theft modules, and clipboard hijacking — and learn how to detect and disrupt its operations.

👉 Read now: https://netlas.io/blog/hannibal_stealer_part_2/
netlas.io Hannibal Stealer: A Deep Technical Analysis - Netlas Blog In-depth analysis of Hannibal Stealer’s evolution, attack chain, credential theft, and data exfiltration techniques based on leaked code.
  • 🔥 8
  • ❤ 3
  • 😎 2
  • 👾 2
  • 👍 1
Post #451 561
C2 Hunting Case Studies 🎯

See how real-world investigations uncovered command‑and‑control infrastructures — from stealthy beaconing patterns to innovative detection techniques — and learn actionable strategies to elevate your threat hunting game.

👉 Read now: https://netlas.io/blog/c2_hunting_cases/
netlas.io Proactive Threat Hunting: Techniques to Identify Malicious Infrastructure - Netlas Blog Learn how to hunt malicious infrastructure using SSL certs, favicons, HTTP headers, JARM, and IoT search engines like Netlas, Shodan, and Censys.
  • 👍 3
  • 👀 2
  • 👾 1
Post #450 669
Pyramid of Pain: Measuring Adversary Disruption 🔺

In our new article, explore the Pyramid of Pain framework to understand which indicators — hashes, IPs, domains, tactics, and techniques — cause the most disruption to attackers.

Let's learn how to apply this model in your threat hunting and incident response to maximize detection and containment.

👉 Read now: https://netlas.io/blog/pyramid_of_pain/
netlas.io The Pyramid of Pain: Beyond the Basics - Netlas Blog Despite its simplicity, the Pyramid of Pain is a powerful concept that shifts your mindset toward proactive defense. Let’s explore how it works in practice.
  • 👍 3
  • ❤ 2
  • 👾 2
Post #449 1.04K
CVE-2025-4700, -4439, -7001, and other: Multiple vulnerabilities in GitLab, 4.3 - 8.7 rating❗️

Once again, GitLab reports a slew of vulnerabilities fixed. Several XSS, email disclosure, unauthorized access to logs, and other were disclosed.

Search at Netlas.io:
👉 Link: https://nt.ls/3VA55
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"

Vendor's advisory: https://about.gitlab.com/releases/2025/07/23/patch-release-gitlab-18-2-1-released/
  • 🔥 4
  • ❤ 2
  • 👾 2
Post #448 623
SOCMINT: Intelligence in the Social Media Era 🔍

Social media is more than just likes and shares — it’s a goldmine of public data. In our latest article, dive into what SOCMINT (Social Media Intelligence) really is, how it differs from traditional OSINT, and what it can — and can’t — uncover.

We review the most popular SOCMINT tools, unpack real‑world case studies, and highlight key ethical and legal considerations so you can leverage this powerful discipline responsibly.

👉 Read now: https://netlas.io/blog/socmint/
netlas.io SOCMINT: Intelligence in the Social Media Era - Netlas Blog How does Social Media Intelligence differ from OSINT? A review of the most popular SOCMINT tools, their true capabilities, and a few real-world cases.
  • 👾 3
  • 👍 2
  • 🔥 2
Post #444 559
CVE-2025-7624, -7382 and other: Multiple vulnerabilities in Sophos Firewall, 6.8 - 9.8 rating 🔥

The vulnerabilities allow an attacker to perform SQL injection, which could lead to remote code execution.

Search at Netlas.io:
👉 Link: https://nt.ls/6J59n
👉 Dork: http.favicon.hash_sha256:f1b3895ca4ba5ef27244a9a7cd45fad7d05afb261f08f375ee4d0bd7008f87d5

Vendor's advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce
  • 🔥 3
  • 👍 2
  • 👾 1
Post #443 761
CVE-2025-53770: Deserialization of Untrusted Data in Microsoft SharePoint, 9.8 rating 🔥

The most high-profile recent vulnerability allows an attacker to perform RCE on a Microsoft SharePoint server. Hackers are already exploiting it, so be careful!

Search at Netlas.io:
👉 Link: https://nt.ls/Ix8gb
👉 Dork: http.headers.microsoftsharepointteamservices:*

Vendor's advisory: https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/
  • 👾 2
  • 👍 1
  • 🔥 1
Post #442 1.53K
Hannibal Stealer vs. Browser Security 🔓

Ever wondered how modern malware rips session cookies right out of your browser?

In our latest article, discover how Hannibal Stealer dissects Chrome’s new “Cookie v20” encryption, evades sandbox protections, and harvests credentials across Chromium and Firefox – and learn practical countermeasures to harden your defenses.

👉 Read now: https://netlas.io/blog/hannibal_stealer_part_1/
netlas.io Hannibal Stealer vs. Browser Security - Netlas Blog How Hannibal Stealer bypasses modern browser protections to steal cookies and credentials, with deep insights into Chrome v20 encryption and evasion techniques.
  • 🔥 8
  • ❤ 6
  • 👾 5
Post #441 567
CVE-2025-40776, -40777: Cache Poisoning and DoS in BIND DNS Software, 7.5 - 8.6 rating❗️

Birthday attacks and zero timeout vulnerability could allow attackers to take down a server or poison its cache.

Search at Netlas.io:
👉 Link: https://nt.ls/z90xJ
👉 Dork: dns.banner:"BIND" OR dns_tcp.banner:"BIND"

Read more: https://kb.isc.org/docs/cve-2025-40776
  • 🔥 2
  • 👾 2
Post #439 495
❗️Technical Issue Alert❗️

Due to issues with the Cloudflare load balancer, some requests to the Netlas web servers may result in a 526 error or even timeouts. We apologize for any instability this may cause.

Our team is working hard to resolve the issue as quickly as possible.

👉 You can also follow the Netlas status on the corresponding page: https://status.netlas.io/

We sincerely apologize for the inconvenience and appreciate your patience 🙏
  • ❤ 5
  • 💊 4
Post #438 530
CVE-2025-53506: Uncontrolled Resource Consumption in Apache Tomcat, 7.5 rating❗️

A vulnerability in some versions of Apache Tomcat could allow an attacker to cause a DoS.

Search at Netlas.io:
👉 Link: https://nt.ls/Wr1bj
👉 Dork: http.favicon.hash_sha256:64a3170a912786e9eece7e347b58f36471cb9d0bc790697b216c61050e6b1f08 OR http.headers.server:"Apache-Coyote"

Vendor's advisory: https://lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0
  • 🔥 4
  • 👍 2
  • 👾 2
Post #437 519
CVE-2025-7340, -7341, 7360: Multiple vulnerabilities in HT Contact Plugin for WordPress, 9.1 - 9.8 rating 🔥

Three vulnerabilities allow attackers to upload and execute arbitrary files, potentially leading to remote code execution.

Search at Netlas.io:
👉 Link: https://nt.ls/I1NeM
👉 Dork: http.body:"plugins/ht-contactform"

Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ht-contactform/ht-contact-form-widget-for-elementor-page-builder-gutenberg-blocks-form-builder-221-unauthenticated-arbitrary-file-upload
  • 👾 3
  • 👍 1
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →