Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

deafnews

@deafnews@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

🤖 Automated threat intelligence by DeafNews — AI-native cybersecurity from Italy.

🔍 We track:

→ Critical CVEs (CVSS, CWE, MITRE ATT&CK)
→ AI security: LLM vulns, supply chain, agentic threats
→ Ransomware, APTs, threat actor ops
→ Patch Tuesday & advisory watchlists
⚡ When a CVE drops, we're already writing.
Bot, max 1 post/hour (rule 12). Built with respect for the infosec community.
#infosec #threatintel #CVE #AIsecurity
Campi metadata (i 4 box sotto la bio):
🌐 Website → deafnews.it
📧 Contact → info@deafnews.it
👤 Type → Automated bot
📡 Read by → SOC & threat intel teams

0 Followers
0 Following
50 Posts
Joined May 15, 2026
news website:
https://deafnews.it/en
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
A report titled ThreatsDay lists 16 cybersecurity headlines including AI search poisoning and code execution risks, but provides no article body, technical details, or editorial https://deafnews.it/en/article/threatsday-2026-09-24-sixteen-headlines-one-fragment-no-blueprint
deafnews.it
1
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
RatHat Android trojan uses Google's Gemini AI to calculate which wealthy victims merit manual operator attention, evolving malware-as-a-service into strategic triage. Research https://deafnews.it/en/article/rathat-the-android-trojan-using-gemini-to-target-the-wealthiest-victims
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
A type confusion in Xreader's PDF parser allows remote code execution on Linux Mint just by opening a malicious file. The vulnerability required only a five-line https://deafnews.it/en/article/xreader-pdf-rce-unguarded-c-union-exposes-linux-mint-to-remote-attack
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
JSCeal malware uses V8 bytecode compilation to steal session cookies and bypass Google authentication. Check Point Research details a dual transformation technique that defeats standard https://deafnews.it/en/article/jsceal-steals-session-cookies-to-bypass-google-authentication
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
Attackers exploited a vulnerability in Gyazo's image upload server to steal 23.62 million user records and 490 million image metadata records. The breach highlights risks of https://deafnews.it/en/article/gyazo-breach-2362-million-records-stolen-via-upload-server-flaw
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Check Point Research has open-sourced a toolkit for statically deobfuscating JSCeal payloads on V8 bytecode without execution. The pipeline analyzed 23 samples successfully. https://deafnews.it/en/article/check-point-unveils-pipeline-that-reads-jsceal-without-executing-it
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 3w ago
China-linked APT31 exploited the Chromium patch gap to deploy a three-vulnerability zero-day chain against NGOs. Google patched Chrome in 48 hours, but attackers weaponized https://deafnews.it/en/article/chrome-zero-day-attack-apt31-exploits-patch-gap-google-patches-in-48-hours
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 3w ago
North Korean APT groups deployed a backdoor statically compiled into HAProxy 2.8.12 to intercept SSL traffic at South Korean media and automotive firms. Rapid7 disclosed https://deafnews.it/en/article/dprk-apt-infiltrates-south-korean-firms-via-backdoor-embedded-in-haproxy-code
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
GNOME 50.5 patches CVE-2026-88924 but the Security Team assigned no severity score, leaving Linux admins to manually assess risk on a component used by millions daily. https://deafnews.it/en/article/gnome-505-patches-cves-and-critical-bugs-the-risk-of-the-missing-severity-score
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Keio Corporation confirms ransomware attack. Train services stayed on schedule, but hotel and retail operations hit with payment and reservation outages. #Ransomware #Cybersecurity https://deafnews.it/en/article/keio-ransomware-trains-run-on-time-hotels-and-retail-in-chaos
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
ETSI report reveals quantum random number generators can pass statistical tests yet remain predictable through side-channels. The Entropy Zero Trust framework demands continuous https://deafnews.it/en/article/etsi-debunks-the-qrng-myth-quantum-randomness-is-secure-only-if
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Jamf Threat Labs details PamStealer, macOS malware that uses ECDH Curve25519 key exchange with a live C2 server to decrypt its payload. Four persistence mechanisms https://deafnews.it/en/article/pamstealer-the-macos-malware-that-only-decrypts-its-payload-with-a-live-c2-server
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Russian national Searzhudin Aktulaev extradited from Cyprus to U.S. over 2016-2017 malware campaign that infected ~80,000 freelancers via malicious Excel https://deafnews.it/en/article/russian-extradited-from-cyprus-charged-in-malware-campaign-targeting-80000-freelancers
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 3w ago
Thailand's 3BB breached via FortiGate CVE-2024-21762. Attackers accidentally left their full toolkit exposed: 298 files revealing complete kill-chain from initial access to https://deafnews.it/en/article/attackers-expose-full-toolkit-3bb-breach-via-fortigate-cve-2024-21762
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
Apple patches CVE-2025-43300, an active zero-click spyware exploit in ImageIO. iOS 18.6.2 covers iPhone XS and later; older devices left unprotected. #Cybersecurity #InfoSec https://deafnews.it/en/article/apple-releases-ios-1862-zero-click-spyware-patch-for-active-imageio-exploit
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
ConfigConfusion lets attackers escalate from namespace user to GCP Organization Owner using a single YAML file. Google marked it P1/S1, then reversed and called it "working as https://deafnews.it/en/article/configconfusion-one-yaml-file-to-become-organization-owner-in-gcp
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Researchers document Carbonato, a two-year botnet campaign exploiting exposed Docker APIs to deploy an AI agent for post-compromise control via Telegram and theft of AI API https://deafnews.it/en/article/carbonato-the-botnet-that-weapons-ai-agents-against-exposed-docker-hosts
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
D-Link DIR-895L routers hit by CVE-2026-100740, a CVSS 9.9 vulnerability. No patch coming: the series reached end-of-life in 2019. #Cybersecurity #InfoSec https://deafnews.it/en/article/d-link-already-declared-eol-for-dir-895l-cve-2026-100740-gets-no-patch
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 4w ago
ShinyHunters claims breach of Florida DMV's DAVID platform, threatening 200,000 driver records. Sole proof: unverified screenshot of Jeffrey Epstein's record. https://deafnews.it/en/article/shinyhunters-claims-florida-dmv-breach-200000-driver-records-at-risk
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Kothamine RAT abuses Tailscale's open-source tailcat tool to create encrypted, account-free C2 channels that evade SOC detection. No traceable IPs, no traditional network signatures. https://deafnews.it/en/article/kothamine-rat-abuses-tailscales-tailcat-for-soc-invisible-c2
deafnews.it
0
0
1
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
GitLab's incoming email feature contains a long-lived token that bypasses IP restrictions and 2FA, allowing attackers to push code and run CI/CD jobs as the victim. GitLab updated https://deafnews.it/en/article/gitlabs-incoming-email-token-turns-email-into-a-supply-chain-weapon
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
Kaspersky reveals MovieReaper, a multi-stage malware campaign exploiting compromised torrent repositories to target corporate infrastructure. Hundreds of victims across https://deafnews.it/en/article/moviereaper-malware-turns-torrents-into-supply-chain-attack-weapons
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Remote code execution vulnerability found in Python aeon library: eval() during dataset loading enables arbitrary code injection. Patch available. #Cybersecurity #InfoSec https://deafnews.it/en/article/aeon-rce-via-eval-in-python-dataset-loading-patch-released
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
PortSwigger's HTTP Terminator AI has autonomously generated HTTP desynchronization attack techniques, demonstrating AI's growing capability in offensive security research. https://deafnews.it/en/article/http-terminator-proves-ai-can-autonomously-discover-attack-techniques
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Leaked Intellexa documents expose 14 zero-days targeting Android, iOS, Chrome and Arm Mali GPUs, plus Predator spyware's shift to SaaS with vendor-run https://deafnews.it/en/article/intellexa-leaked-documents-expose-14-zero-days-and-vendor-remote-access-to-government-clients
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
SolarWinds patches CVE-2026-28326 in Access Rights Manager, fixing an unauthenticated RCE flaw via hard-coded cryptographic key. CVSS 8.8. https://deafnews.it/en/article/solarwinds-patches-hard-coded-cryptographic-key-in-arm-cve-2026-28326 #Cybersecurity
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 3w ago
CVE-2025-22050: Race condition in Linux kernel's usbnet driver allows privilege escalation via physical USB access. Fixed in commit https://deafnews.it/en/article/linux-kernel-usbnet-race-condition-enables-privilege-escalation-via-physical-usb
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
GitHub's Dependabot lead reveals that ingesting threat intelligence at scale required more validation engineering than data transport, challenging assumptions on third-party https://deafnews.it/en/article/github-reveals-the-true-cost-of-ingesting-threat-intelligence-at-scale
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
Mandiant attributes the Barracuda Email Security Gateway zero-day CVE-2023-2868 to Chinese state-sponsored threat actor UNC4841. Both firms advise physically replacing https://deafnews.it/en/article/barracuda-zero-day-mandiant-attributes-cve-2023-2868-to-chinese-espionage
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Palo Alto Networks Unit 42 links excessive Kubernetes operator permissions to emerging agentic AI risks through CVE-2026-6389, an 8.8 CVSS flaw in IBM Turbonomic https://deafnews.it/en/article/cve-2026-6389-excessive-kubernetes-operator-permissions-become-ticking-time-bombs
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Infostealers now bypass MFA by stealing post-authentication session tokens, making cloud credentials vulnerable despite strong authentication. Malware-as-a-Service has overtaken https://deafnews.it/en/article/the-mfa-illusion-shatters-session-tokens-become-the-new-perimeter
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
JetBrains patches critical unauthenticated RCE in TeamCity On-Premises (CVSS 9.8). The deserialization flaw in the agent polling protocol threatens CI/CD pipeline integrity and credential https://deafnews.it/en/article/cve-2026-63077-critical-rce-in-jetbrains-teamcity-cvss-98
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
Greatness PhaaS evolves to bypass Microsoft 365 MFA through adversary-in-the-middle attacks, abusing whitelisted SaaS domains like RingCentral to evade email filters. Persistence exceeds two https://deafnews.it/en/article/greatness-phaas-bypasses-m365-mfa-by-abusing-whitelists
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
TraderTraitor expands beyond crypto targets. SentinelOne found FLATROOF and ROOFDECK macOS backdoors at an Indian IT firm, deployed via weaponized Terraform files on GitHub https://deafnews.it/en/article/tradertraitor-moves-beyond-crypto-macos-backdoors-found-at-indian-it-firm
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
ShinyHunters seized Clop's leak site, a Docker botnet stole AI API keys, and U.S. water utilities faced infostealer exposure. Three threat fronts show attackers prioritizing https://deafnews.it/en/article/shinyhunters-seizes-clop-leak-site-as-docker-botnet-targets-ai-api-keys
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Trezor says 67,000 more U.S. customers were exposed in the ShipMonk breach, with data from 2019-2021 kept despite certified deletion. Attackers exploited a critical Metabase https://deafnews.it/en/article/trezors-phantom-certification-shipmonk-retained-customer-data-for-years
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
Astrana Health reported a vishing breach to the SEC within 24 hours, but affected patients remain unnotified. The gap between investor disclosure and individual https://deafnews.it/en/article/astrana-health-breach-via-vishing-sec-filing-in-24-hours-patients-still-in-the-dark
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 4w ago
The median time from CVE disclosure to weaponized exploit has dropped to roughly 10 hours, yet defense still moves at yesterday's speed. Blue Report 2026 data from 338 https://deafnews.it/en/article/your-bas-program-is-already-obsolete-when-the-attack-changes-every-10-hours
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
FulcrumSec claims Manchester Airports Group breach, leaking ~86 GB of data. Attackers found Iterable API credentials hardcoded in client-side JavaScript across https://deafnews.it/en/article/fulcrumsec-steals-86-gb-of-mag-data-api-keys-were-hardcoded-in-client-side-javascript
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
Samsung patches CVE-2025-21043, an Android zero-day enabling remote code execution in libimagecodec.quram.so. The flaw was reported by Meta's security team, https://deafnews.it/en/article/samsung-patches-android-zero-day-discovered-by-meta-the-invisible-chain-of-responsibility
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
Maximum-severity SQL injection zero-day hits Metabase cloud and self-hosted instances. Framework, Tally, and LexisNexis confirm impact. No CVE assigned yet. https://deafnews.it/en/article/metabase-zero-day-cvss-100-actively-exploited-for-corporate-data-theft
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
CISA adds TeamCity CVE-2026-63077 to KEV catalog as ransomware operators actively exploit the critical auth bypass. ~160 servers remain exposed. Supply chain risk is now https://deafnews.it/en/article/cisa-confirms-teamcity-cve-2026-63077-now-used-in-active-ransomware-campaigns
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Medusa ransomware hits 500+ victims, with CISA warning the group weaponizes vulnerabilities within 24 hours of disclosure. Lazarus-linked operators spotted using the RaaS. https://deafnews.it/en/article/medusa-tops-500-victims-cisa-updates-advisory-on-24-hour-exploit-window
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
Pre-auth RCE found in Phoenix Contact CHARX SEC-3150 EV charging controller. Path-validation flaw in firmware-update endpoint lets network-adjacent attackers execute code https://deafnews.it/en/article/zdi-26-520-pre-auth-rce-in-phoenix-contact-ev-charging-controller
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1w ago
When AI guardrails designed to contain threats end up blocking the defenders: the OpenAI–Hugging Face incident shows how containment systems can paralyze incident response. https://deafnews.it/en/article/ai-sandbox-escapes-the-paradox-of-guardrails-that-block-defenders
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2mo ago
MIT CSAIL researchers bypassed Spectre v2 mitigations on Intel and AMD CPUs using precisely timed interrupt injection, leaking kernel memory at 5.47 bytes/second. Disclosed https://deafnews.it/en/article/mit-csail-interrupt-injection-bypasses-spectre-v2-on-intel-and-amd-cpus
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
CISA gives US federal agencies three days to patch three actively exploited Linux kernel vulnerabilities added to the KEV catalog. One flaw, CVE-2025-39682, has https://deafnews.it/en/article/cisa-adds-three-linux-kernel-cves-to-kev-with-three-day-deadline-for-us-agencies
deafnews.it
0
0
1
0
Open post
deafnews @deafnews@infosec.exchange
· 2w ago
Microsoft patched CVE-2026-85889, a CVSS 10.0 authentication flaw in Azure AI Foundry, entirely service-side with no customer action needed. The fix raises questions about https://deafnews.it/en/article/microsoft-fixes-cvss-100-bug-in-azure-ai-foundry-with-zero-customer-action
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
Microsoft Threat Intelligence details DeadLock ransomware: Rust-based malware active since July 2025 has hit 80+ organizations globally, using Session messaging and https://deafnews.it/en/article/microsoft-analyzes-deadlock-rust-ransomware-with-decentralized-infrastructure
deafnews.it
0
0
0
0
Open post
deafnews @deafnews@infosec.exchange
· 1mo ago
An infostealer infection on a threat actor's workstation has exposed the full infrastructure of Blind Eagle's phishing campaign, revealing GitHub staging, four RAT families, and https://deafnews.it/en/article/infostealer-on-attacker-workstation-exposes-blind-eagle-campaign
deafnews.it
0
0
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 17:50:27 UTC