05/13

Pwnies Nominations – Pwnies

https://pwnies.com/nominations/
Pwnies Nominations – Pwnies

Fortinet fixes critical zero-day exploited in FortiVoice attacks

https://www.bleepingcomputer.com/news/security/fortinet-fixes-critical-zero-day-exploited-in-fortivoice-attacks/
Fortinet fixes critical zero-day exploited in FortiVoice attacks

New Intel CPU flaws leak sensitive data from privileged memory

https://www.bleepingcomputer.com/news/security/new-intel-cpu-flaws-leak-sensitive-data-from-privileged-memory/
New Intel CPU flaws leak sensitive data from privileged memory

We are sorry for the temporary outage.

https://www.bleepingcomputer.com/news/security/ivanti-warns-of-critical-neurons-for-itsm-auth-bypass-flaw/
We are sorry for the temporary outage.

MalwareBazaar | apioeaesr-icu

https://bazaar.abuse.ch/browse/tag/apioeaesr-icu/
MalwareBazaar | apioeaesr-icu

North Korea ramps up cyberspying in Ukraine to assess war risk

https://www.bleepingcomputer.com/news/security/north-korea-ramps-up-cyberspying-in-ukraine-to-assess-war-risk/
North Korea ramps up cyberspying in Ukraine to assess war risk

Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers

https://thehackernews.com/2025/05/turkiye-hackers-exploited-output.html
Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers

M&S says personal customer data stolen in recent cyber attack

https://www.bbc.co.uk/news/articles/c62v34zv828o
M&S says personal customer data stolen in recent cyber attack

SAP patches second zero-day flaw exploited in recent attacks

https://www.bleepingcomputer.com/news/security/sap-patches-second-zero-day-flaw-exploited-in-recent-attacks/
SAP patches second zero-day flaw exploited in recent attacks

kASLR Internals and Evolution | r0keb

https://r0keb.github.io/posts/kASLR-Internals-and-Evolution/
kASLR Internals and Evolution | r0keb

Release v1.1.0 · cifertech/ESP32-DIV · GitHub

https://github.com/cifertech/ESP32-DIV/releases/tag/v1.1.0
Release v1.1.0 · cifertech/ESP32-DIV · GitHub

Moldovan Police Arrest Suspect in €4.5M Ransomware Attack on Dutch Research Agency

https://thehackernews.com/2025/05/moldovan-police-arrest-suspect-in-45m.html
Moldovan Police Arrest Suspect in €4.5M Ransomware Attack on Dutch Research Agency

IOCs/2025-05-12 | UNK Stealer | Booking ClickFix at main · km3dg3/IOCs · GitHub

https://github.com/km3dg3/IOCs/blob/main/2025-05-12%20%7C%20UNK%20Stealer%20%7C%20Booking%20ClickFix
IOCs/2025-05-12 | UNK Stealer | Booking ClickFix at main · km3dg3/IOCs · GitHub

Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws

https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2025-patch-tuesday-fixes-5-exploited-zero-days-72-flaws/
Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws