Can't tell if my browser is having a stroke or mocking me. image
> aD bLoCkErS aRe ThEfT
Infoblox Blog
Vane Viper: Russia–Cyprus AdTech Nexus Delivering Malware
DNS analysis links Vane Viper's AdTech abuse to AdTech Holding and PropellerAds, delivering malware through fake software, APKs, and redirects.
 #threatIntel
Hey security vendors: Maybe try not calling threat actors "low skilled" or "script kiddies" just because a particular attack or exploit was not "sophisticated." You may have observed them hitting low hanging fruit in this instance but when they inevitably pants your customers and you suddenly start calling them "sophisticated" I'm going to call you out, especially in sales and support calls.
Tenda https://www.cve.org/CVERecord?id=CVE-2025-10443 https://www.cve.org/CVERecord?id=CVE-2025-10442 https://www.cve.org/CVERecord?id=CVE-2025-10432 D-Link https://www.cve.org/CVERecord?id=CVE-2025-10441 https://www.cve.org/CVERecord?id=CVE-2025-10440 Intelbras https://www.cve.org/CVERecord?id=CVE-2025-55976 cc: @Dio9sys [@da_667](
Infosec Exchange
da_667 (@da_667@infosec.exchange)
323 Posts, 1.71K Following, 5.9K Followers Β· Senior Security Researcher, Proofpoint Emerging Threats. I've been doing this cybersecurity thing ...
 ) #internetOfShit
So I'm using VMWare Workstation on Windows 11 right now and there's a OneNote window open behind the VMWare window. And as I'm using VMWare, I keep getting tool tips for OneNote popping up over VMWare. How is any of this allowed to go to production? And why are companies still paying ridiculous amounts of money for it? Yes that's rhetorical.
*C.R.E.A.M.* ( 2025 )# 🎢 Cloudflare ruins everything around me 🎢
I can't remember if I posted about it here before, but the assholes behind AS44477 ( Stark Industries / PQ Hosting / THE.Hosting / etc. ) are also running AS209847. I suggest blocking the entire ASN if possible. As of this morning, here are the IPv4 prefixes associated with it per RIPE: > 2.56.119.0/24 > 2.56.124.0/24 > 5.182.37.0/24 > 5.182.39.0/24 > 5.253.40.0/24 > 45.12.129.0/24 > 45.12.131.0/24 > 45.12.136.0/24 > 45.15.178.0/23 > 45.15.184.0/22 > 45.67.34.0/24 > 45.83.20.0/24 > 45.83.131.0/24 > 45.83.142.0/24 > 45.120.179.0/24 > 45.133.216.0/24 > 45.142.213.0/24 > 45.142.215.0/24 > 45.159.251.0/24 > 91.132.134.0/24 > 94.131.10.0/24 > 94.131.13.0/24 > 94.131.14.0/24 > 94.131.104.0/24 > 94.131.119.0/24 > 95.164.32.0/24 > 95.164.62.0/23 > 103.113.69.0/24 > 103.231.72.0/23 > 146.19.75.0/24 > 171.22.129.0/24 > 176.120.67.0/24 > 185.106.98.0/24 > 185.203.7.0/24 > 185.234.56.0/24 > 193.43.146.0/24 > 194.76.139.0/24 Posting this ( again? ) for **reasons**. #GAYINT #FURINT #threatIntel
The new NetScaler CVEs for the EITW 0days are published. No, not those ones. No, not those ones either. These are new ones. Yes, newer than those new ones you're thinking of. https://www.cve.org/CVERecord?id=CVE-2025-7775 https://www.cve.org/CVERecord?id=CVE-2025-7776