Multiple Zero-Day Exploits Discover That Bypass BitLocker, Exposing All Encrypted Data https://gbhackers.com/researchers-discover-multiple-zero-day-exploits-that-bypass-bitlocker/ #CyberSecurityNews #cybersecurity #ZeroDay

Multiple Zero-Day Exploits Discover That Bypass BitLocker, Exposing All Encrypted Data https://gbhackers.com/researchers-discover-multiple-zero-day-exploits-that-bypass-bitlocker/ #CyberSecurityNews #cybersecurity #ZeroDay
@spocko
The #conspiracy-like part is connecting the #Epstein FBI #SharePoint file exposure to the recent #Chinese #zeroday #exploit, potentially implying it was either:
exploited intentionally,
the result of deep systemic failure,
or even deliberate mishandling tied to a broader cover-up.
There’s currently no #credible evidence backing that link. Misconfiguration is a more parsimonious explanation for the older #FBI case. #conspiracytheorists #infosec
Question for my #Infosec friends
@emptywheel talked about how FBI agents reviewing the #Epstein #Maxwell materials put together a list for #PamBondi & placed it on an internal #SharePoint server.
https://www.muellershewrote.com/p/the-epstein-cover-up-at-the-fbi
@briankrebs wrote about this #ZeroDay exploit 7-21-25 https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/
Do you think a group has that info?
If so, what's the best way to use existence of that hacked list as POLITICAL leverage against DJT to get the full list out?
@nicolesandler https://www.youtube.com/live/thdaQyDzYFI?si=EjKSqi7B3cRCBIO4&t=4110
@bluetea Also, here is the release:
Customer guidance for SharePoint vulnerability CVE-2025-53770
https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/
https://archive.ph/Dlhra #SharePoint #CVE #Hack #ZeroDay #InfoSec
#Japan-based #NipponSteel Solutions on Tuesday disclosed a data breach that resulted from the exploitation of a zero-day vulnerability.
#CyberAttacks #DataBreach
#Zeroday https://www.securityweek.com/nippon-steel-subsidiary-blames-data-breach-on-zero-day-attack/
Google Chrome encaisse sa troisième faille zero-day depuis le début de l’année, et elle est déjà exploitée https://www.clubic.com/actualite-571050-google-chrome-encaisse-sa-troisieme-faille-zero-day-depuis-le-debut-de-l-annee-et-elle-est-deja-exploitee.html #zero-day #cybersécurité #googlechrome #zeroday #web #faille #google_chrome #navigateur
#China-linked group #Houken hit French organizations using zero-days
https://securityaffairs.com/179602/apt/china-linked-group-houken-hit-french-organizations-using-zero-days.html
#securityaffairs #hacking #zeroday
#Bluetooth was a mistake: Millions of Bluetooth headphones can potentially be turned in eavesdropping devices. Best-seller #Sony and #Bose #headphones are affected by at least some of the disclosed flaws among many others. The true dimension of these flaws is yet unknown as the the vulnerable component is very widely in use under different names.
Disclosure of the vulnerabilities: https://insinuator.net/2025/06/airoha-bluetooth-security-vulnerabilities/
No updates or official statements available yet.
Gefahr in der Luft: Forscher haben eine kritische Sicherheitslücke aufgedeckt, die Millionen drahtlose Kopfhörer in potenzielle Abhörgeräte verwandeln könnte.
Zum Artikel: https://heise.de/-10457857?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
@heiseonline Obwohl diese Überwachungsmaßnahmen nur zielgerichtet eingesetzt werden sollen, schaden sie uns allen – auch in Deutschland und anderen Ländern. Denn damit der Bundestrojaner im Bedarfsfall funktioniert, müssen Sicherheitslücken offengehalten (#zeroday) oder eingeschmuggelt (#backdoor) werden.
Dadurch wird die gesamte globale IT-Infrastruktur unsicherer: Kriminelle und feindliche Geheimdienste können diese Hintertüren genauso nutzen wie die eigenen Geheimdienste.
Wäre schön, wenn Heise diese Zusammenhänge im Artikel erläutern würde.
Gee, I was just thinking that if the Sun decides to go "#ZeroDay" on us, that could put the damper on the AI menace that's been unleashed upon the planet...
The U.S. Ran Its First Space Weather Preparedness Drill—Here’s How It Went
Ironically, the exercise last May was interrupted by a real scenario, when Earth was hit by the strongest solar storm in two decades
Margherita Bassi - Daily Correspondent
May 21, 2025
"According to the NASA statement, the exercise demonstrated 'a critical need' for 'more robust forecasting capabilities of space weather drivers and effects.' The report also emphasizes the need to educate the public, continue developing response plans, make critical infrastructure less vulnerable and collaborate with both the private sector and international agencies."
Two critical Ivanti zero-days (CVE-2025-4427 + CVE-2025-4428) are now being actively exploited after a surge in scanning activity last month. Immediate patching is required. Get more details here https://www.greynoise.io/blog/ivanti-epmm-zero-days-reconnaissance-exploitation
#ZeroDay #CyberSecurity #threatintel
Pwn2Own Berlin 2025: exploit su AI, Docker, Windows e Linux
https://gomoot.com/pwn2own-berlin-2025-exploit-su-ai-docker-windows-e-linux
Quote of the day (HD Moore keynote at @NorthSec ) : "no need to run faster than the bear, just run faster than your friend" :-o
Time to go update yo shit again!
Microsoft Urges Immediate Action to Address Five Actively Exploited Windows Zero-Days
#Windows #ZeroDay #Bug Exploited for Browser-Led RCE. #Microsoft's May 2025 Patch Tuesday update also contains four other actively exploited zero-day #security #vulnerabilities, two publicly known bugs, and 12 critical patches.
https://www.darkreading.com/vulnerabilities-threats/windows-zero-day-bug-exploited-browser-rce
Well, simply don't use Microsoft products. Use #freesoftware, much less sensible to vulnerabilities, and more respecting your #privacy and your #personaldata
#Linux #Distro are the best
En #China, un #robot #humanoide #H1 ha protagonizado una escena digna de una película de ciencia ficción o de terror al perder el control y, aparentemente, tratar de agredir a las personas que se encontraban a su alrededor.
Well shit... I can't access account balances in TWO different bank accounts. One just spins then says, "Try again later," the other is actually acknowledging they are having "technical difficulties." WHAT IS GOING ON?!!! Is anyone else having these issues?