Even if you don't run Telnet, you should strongly consider blocking these ASNs from hitting remote access systems on your perimeter. They are the worst of the worst for this campaign, and will 100% be used for other attacks (b/c they always are).

AS4837, AS4134, AS23969, AS3462, AS4713, AS8151, AS45899, AS4766

A stealth #phishing campaign hid on Google Cloud & Cloudflare for 3+ years.

📌 48K+ hosts across 86 clusters
📌 Expired domains hijacked
📌 Brand clones tricking victims

👉 Lesson: Continuous monitoring & domain vigilance are non-negotiable.
#CyberSecurity #InfoSec #Cloud

In remembrance of all the victims. 24 years ago today. Never forget 9/11.

Hackers exploit trusted AI platforms to steal Microsoft 365 credentials.

👉A recent campaign used Simplified AI to host fake login portals, evading traditional defenses.

Would your team detect phishing from a “legitimate” AI tool?
#CyberSec #Phishing #Microsoft365 #AI #InfoSec

Nevada cyber attack forced state offices to shut down, disrupted services, & led to personal data theft.

🔐 Gov’t systems remain high-value targets for attackers.

👉 Strengthen resilience with: paxioncyber.com
#CyberAttack #DataBreach #Ransomware #IncidentResponse

Nevada cyber attack forced state offices to shut down, disrupted services, & led to personal data theft.

🔐 Gov’t systems remain high-value targets for attackers.

👉 Strengthen resilience with: paxioncyber.com
#CyberAttack #DataBreach #Ransomware #IncidentResponse

A stealth #phishing campaign hid on Google Cloud & Cloudflare for 3+ years.

📌 48K+ hosts across 86 clusters
📌 Expired domains hijacked
📌 Brand clones tricking victims

👉 Lesson: Continuous monitoring & domain vigilance are non-negotiable.
#CyberSecurity #InfoSec #Cloud

🚨 Palo Alto Networks confirms data breach!

Hackers exploited OAuth tokens in the Salesloft Drift–#Salesforce integration to steal:
🔹 Contact info
🔹 Sales data
🔹 Credentials for cloud services

👉 Lesson: 3rd-party risks are real.
#Cybersecurity #DataBreach #ZeroTrust

#LabourDay2025 #LaborDay #CYBER #Paxion

🚨 New Threat: AI Waifu RAT Malware 🚨

Disguised as an “AI companion tool,” it:
⚠️ Executes arbitrary commands
⚠️ Reads/exfiltrates files
⚠️ Disables antivirus

DM us and stay protected. paxioncyber.com
#CyberSecurity #Malware #RAT #AI #InfoSec #PaxionCyber

Critical Nagios XI XSS flaw in Graph Explorer allows attackers to run malicious JavaScript in admin browsers.

⚠️ Risks: session hijacking, data theft, configuration tampering.
✅ Fixed in v2024R2.1 — patch now!

🔒At Paxion, we help orgs stay secure.
#Cyber #XSS #Nagios #InfoSec

7,500 Instacart and Shipt gig worker accounts hacked.

Cyber awareness and strong defenses are crucial for gig workers and companies handling sensitive customer data.

⚠️ Always verify code requests!

🔒 Paxion Cyber: Simplify. Educate. Secure.
#CyberSecurity #PhishingAwareness

New Chrome 0-Day (CVE-2025-9478)

Critical use-after-free flaw in Chrome’s ANGLE library allows arbitrary code execution. Full system compromise is possible.

✅ Update Chrome to v139.0.7258.154/.155+
🔐 Use EDR, browser isolation, and CSP.
#CyberSecurity #Chrome #0day #InfoSec

⚠️ New AI risk: Prompt Insertion Attacks.

Hackers can embed malicious instructions in an OpenAI account name, bypassing filters and exposing system prompts.

#AI #CybersecurityNews #LLM #Prompts #PaxionCyber

🔗 https://cybersecuritynews.com/openai-name-trigger-chatgpt-jailbreaks/

Ransomware Strikes Drug Research Firm Inotiv

Don’t let a cyberattack derail your mission. Visit https://paxioncyber.com to learn how we can secure your future.

#Cybersecurity #PaxionCyber #CyberResilience #InfoSec #DataProtection

UAC-0057 hackers weaponize PDF "invitation" files to deploy shell scripts & spy on Ukraine/Poland orgs.

📊 XLS macros → DLL implants → persistent access.

🔐 #Paxion defends with MDR & layered defenses.

📰 https://cybersecuritynews.com/uac-0057-hackers-weaponizing-pdf/

#CyberSecurity #Threat #Malware

UAC-0057 hackers weaponize PDF "invitation" files to deploy shell scripts & spy on Ukraine/Poland orgs.

📊 XLS macros → DLL implants → persistent access.

🔐 #Paxion defends with MDR & layered defenses.

📰 https://cybersecuritynews.com/uac-0057-hackers-weaponizing-pdf/

#CyberSecurity #Threat #Malware

Group UNC5518 hacks real websites to inject fake CAPTCHAs that trick users into running malware.

➡️ One click = malicious PowerShell command
➡️ Payload = CORNFLAKE.V3 backdoor

🔒Stay sharp. Stay secure. Stay Paxion.
#CyberSecurity #Malware #ClickFix #Paxion #FakeCAPTCHA

RingReaper malware targets Linux servers, using io_uring to evade EDR solutions.

⚠️ Capabilities:
🔹 Process & network discovery
🔹 Privilege escalation
🔹 Self-destructs to hide traces

Our proactive defenses catch what others miss.
#RingReaper #LinuxMalware

Pirated games are a new cyber weapon.

Attackers spread HijackLoader malware via trusted piracy sites, bypassing SmartScreen + Adblockers.

Paxion offers proactive defense against evolving threats.

🔒 Stay protected. Don’t take risks.
#CyberSecurity #HijackLoader #PiratedGames