Mastodon Digest
for the past
scorer
threshold
Posts

‼️🇯🇵 BYOD ransomware claims Toyota, alleging exposure of personal information and access to kiosk devices.

🇯🇵 Toyota - A Japanese automotive manufacturer producing passenger vehicles, commercial vehicles, and mobility technologies worldwide.

The group claims it obtained full names, email addresses, physical addresses, phone numbers, dates of birth, and data related to kiosk devices. BYOD says much of the environment was isolated but claims it found remaining access paths.

Claim is currently unverified.

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out my Telegram: t.me/SliceForLifeee

🇫🇷 SIKOA (sikoa.fr) a été victime d'une cyberattaque autour du 02 novembre 2026.

La SIKOA, bailleur social, a signalé une cyberattaque survenue le 2 novembre 2026, qui a potentiellement entraîné le vol de données personnelles de ses locataires. L'entreprise met en garde ses usagers contre les tentatives de fraude par courriel, SMS ou téléphone, et informe que ses lignes téléphoniques fixes sont indisponibles. Les locataires sont priés de ne répondre à aucune demande de paiement douteuse et de vérifier les coordonnées des expéditeurs.

👉 la1ere.franceinfo.fr/guadeloup

🚨 SAP patches critical 10.0-rated flaws allowing hackers to take full control of enterprise systems without authentication

SAP has released emergency security fixes for multiple critical vulnerabilities affecting NetWeaver, Web Dispatcher, and Gateway, including flaws that could allow unauthenticated attackers to remotely execute commands and completely compromise enterprise systems.

Two vulnerabilities, CVE-2026-76964 and CVE-2026-89126, collectively known as ICM2SHELL, exploit memory corruption in WebSocket handling. Researchers at Onapsis developed a working exploit demonstrating full remote code execution without credentials.

A third vulnerability, CVE-2026-89103, dubbed ProxyGate, could allow attackers to bypass network restrictions and execute commands with elevated privileges.

All three vulnerabilities carry the maximum CVSS score of 10.0. SAP has released patches as part of its November security update and is urging administrators to apply them immediately.

Source: support.sap.com/en/my-support/

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

Don’t worry it’s not like billionaire tech guys have a habit of spending hundreds of millions trying to directly influence elections and usher in fascism or something. We definitely need more of them, it’ll be great.

“At that valuation, each (founder) will have a net worth of about $18 billion”

I wonder why they’re hyping things

🚨 Microsoft confirms hackers are exploiting Outlook zero-day to steal Windows authentication hashes, CVE-2026-124194

Microsoft has patched an actively exploited vulnerability in Outlook that could allow attackers to steal NTLM authentication hashes by tricking users into opening specially crafted files.

The flaw, tracked as CVE-2026-124194 (CVSS 6.5), allows Outlook to connect to attacker-controlled locations without displaying the usual external content security warning, potentially exposing credentials to further attacks.

Microsoft confirmed exploitation in the wild as part of its November 2026 Patch Tuesday updates. Users and administrators are urged to install the latest security fixes immediately.

Source: msrc.microsoft.com/update-guid

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

Boosts

The tech bros aren't enjoying this.

**Update: this is from August. They've settled for 1-2% of said amount. They're not "sued into oblivion" alas!

Meta

One of the worst consequences of the 2008 financial crisis was the introduction of the concept of “too big to fail.” This has incentivized companies to make themselves appear oversized, increase market valuation even when they turn zero profit, and get themselves listed in enough pension funds that their failure leads to catastrophic consequences far beyond the company itself. It turns governments, banks and shareholders into advocates for the product.

today, a lot of CEOs are questioning whether their extramarital partners are only with them because they’re spies extracting high level secrets or if it’s because they genuinely love them for their money