#attack

BeyondMachines :verified:beyondmachines1@infosec.exchange
2025-12-11

Gogs Zero-Day vulnerability actively exploited

A zero-day vulnerability (CVE-2025-8110) in Gogs self-hosted Git service allows authenticated attackers to achieve remote code execution through a symlink bypass. Over 700 instances are reported as compromised since July 2025. Despite responsible disclosure in July and acknowledgment in October 2025, no patch is available as of December 10, 2025.

**If you're running Gogs (version 0.13.3 or earlier), this is urgent. Disable open registration in your settings and place the service behind a VPN or IP allow-list - there's an actively exploited vulnerability with no available patch. Check your server for suspicious repositories with random 8-character owner and repository names. These indicate your server is probably already compromised.**
#cybersecurity #infosec #attack #activeexploit
beyondmachines.net/event_detai

2025-12-11

Germany developing plans to ready #airspace in case it needs to defend itself

#Germany has one of busiest airspaces in the world & it will be shut down in event of #attack against the country or #NATO ally

Germany drawing up plans to quickly ready its airspace if the country needs to #defend itself, warning that #airlines and #airports remain too naive about the possibility of such an event.

euronews.com/my-europe/2025/12

#HybridWar #RussianAggression #AirspaceViolations #drones

2025-12-10

Ukrainian Naval Drones Attack Russian Tanker in Black Sea, Causing Critical Damage and Major Economic Loss

video.echelon.pl/w/3kNaRDMMNgq

WordofTheHourwordofthehour
2025-12-10

: to assail with unfriendly speech or writing

- French: attaque

- German: angreifen

- Italian: attacco

- Portuguese: atacar / ataque

- Spanish: atacar

------------

Try our new word guessing game @ 24hippos.com

BeyondMachines :verified:beyondmachines1@infosec.exchange
2025-12-10

Notepad++ users targeted in supply chain attack through update mechanism

A supply chain attack targeted Notepad++ users by exploiting vulnerabilities in its WinGUP updater, which failed to validate update authenticity, allowing attackers to intercept update traffic and redirect users to malicious servers hosting compromised executables. The developer has released patched versions (8.8.9) that implement signature verification and force downloads exclusively from GitHub.

**If you are using Notepad++, immediately update to version 8.8.9 or later by manually downloading from notepad-plus-plus.org. Don't use the auto-update feature until you're on this version. Enterprises should temporarily block gup.exe or notepad-plus-plus.org domain access until all systems are updated.**
#cybersecurity #infosec #attack #activeexploit
beyondmachines.net/event_detai

2025-12-10

Man behind vicious one-punch attack avoids jail after paying €5,000 to charity

A man who left another man with serious head injuries after a one-punch attack has avoided going to…
#NewsBeep #News #Headlines #AtlanticBar #Attack #buncrana #donegal #IE #Ireland #SeanBreen #sentence
newsbeep.com/301053/

2025-12-10

Stockton mass shooting update: Masked gunmen fired at least 50 rounds, sheriff says

At least 50 rounds were fired by multiple masked gunmen during an attack at a crowded banquet hall…
#NewsBeep #News #Headlines #Attack #birthdayparty #crowdedbanquethall #information #investigation #investigator #maskedgunman #official #patrickpeterson #people #round #sheriff #Stockton #tuesday #UnitedStates #Us #USA #withrow
newsbeep.com/300523/

2025-12-09

Knowledge Zonekzoneind@mstdn.social
2025-12-10

A #Heart #Attack, or myocardial infarction, occurs when blood flow to a part of the heart muscle is severely reduced or blocked, usually by a clot forming on a buildup of fat and cholesterol (plaque) in the coronary arteries.

Recognizing symptoms like chest pain, shortness of breath, and discomfort in the arm or jaw and seeking immediate medical attention is crucial, as prompt treatment can limit damage to the heart muscle.

knowledgezone.co.in/posts/Hear

The All About Nothing: Podcasttheallaboutnothingpodcast
2025-12-10

🎙️ @politicalbillsc and @barrettgruber discussing on !
🎧 Listen wherever you get or 📺 Watch on YouTube!
🔗 linktr.ee/theallaboutnothingpo

2025-12-09

Sheldon Roma’s attack on autistic man was ‘mistaken vigilante justice’

Roma’s lawyer Jesse Lang pushed for his client’s name to be permanently suppressed, citing the safety of him…
#NewsBeep #News #Headlines #Attack #autistic #Justice #man #mistaken #NewZealand #NZ #on #romas #sheldon #vigilante #was
newsbeep.com/298317/

General Strike Nowstrike@libranet.de
2025-12-08

Syrians' General Strike Against the Jolani Regime · Western Media Confused by the Destructive Capabilities of the Mysterious 303 Missile · world ...

The US Secretary of War, at an event at the John F. Kennedy Center in Washington, D.C., left reporters' questions about the possibility of US ground attacks on Venezuela unanswered.#US #Secretary #of #War #Refuses #to #Answer #Questions #About #Attack #on #Venezuela
US Secretary of War Refuses to Answer Questions About Attack on Venezuela

2025-12-08

Mt Wellington daylight attack: Second man arrested in relation to alleged stabbing

The Herald has been told the man was set upon after being knocked from his motorcycle. Auckland City…
#NewsBeep #News #Headlines #alleged #Arrested #Attack #auckland #been #connection #daylight #in #man #mt #NewZealand #NZ #relation #second #stabbing #suburb #to #wellington #with
newsbeep.com/296412/

libramoonlibramoon
2025-12-07

theguardian.com/us-news/2025/d

Senator says ’ caused ‘horrific’ injuries to unresisting man as he was
Patty Murray of Washington state said ICE agents lied to Wilmer Toledo-Martinez to lure him outside before dog attacked him

..."An ICE agent lured Wilmer out of his home under false pretenses, posing as a construction worker who claimed to have hit Wilmer’s car and ne...

BeyondMachines :verified:beyondmachines1@infosec.exchange
2025-12-06

Active exploitation reported of command injection flaw in Array Networks AG Series VPN gateways

Array Networks has patched a critical command injection vulnerability in its Array AG Series secure access gateways that has been actively exploited since August 2025. Attackers are installing PHP webshells and creating unauthorized accounts to gain persistent access to compromised systems. Despite a patch being available since May 2025 (ArrayOS AG version 9.4.5.9), many organizations remain vulnerable.

**If you have Array AG Series access gateways, plan an urgent update to ArrayOS AG version 9.4.5.9. Your devices are actively hacked, and they can't be hidden from the internet. They are designed to be accessible from the Internet. if you can't update right away, disable the DesktopDirect feature or apply URL filtering to stop semicolons in URLs. Check your systems for webshells, unauthorized accounts, or any suspicious activity.**
#cybersecurity #infosec #attack #activeexploit
beyondmachines.net/event_detai

2025-12-06

Kaitāia woman sentenced after four dogs injure neighbours in Kaiwaka attack

On March 15, 2025, Walker-Haturini was in Kaitāia when her ex-partner allegedly let one of their four dogs…
#NewsBeep #News #Headlines #after #Attack #Dogs #four #in #injure #kaitia #kaiwaka #neighbours #NewZealand #NZ #sentenced #woman
newsbeep.com/292317/

Anarchism Newsanarchismhub@todon.nl
2025-12-05

Puget Sound Anarchists: **Social War Bulletin #1 – Against Flock and its World**

pugetsoundanarchists.org/socia

anonymous submission – The first issue of the Social War Bulletin – Against Flock and Its World This is an irregular print counter-info…

#Analysis #Attack #Surveillance #Automatedlicenseplatereaders #Flock #Publication

Osna.FMosnafm
2025-12-05

The rhetoric surrounding Germany's domestic intelligence agency, the Verfassungsschutz, has escalated sharply following controversial remarks made by Alice Weid... news.osna.fm/?p=26153 |

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst