Congrats to Casimiro! Friday's winner of three free months in my Analyst Skills Vault! networkdefense.co/skillsvault

Each day of the sale, one person who uses this discount code will be randomly selected to win!

Talks from the r2con 2025 security conference, which is taking place over the weekend, are available on YouTube:

www.youtube.com/@radareorg/p...

An iPhone app called ICEBlock, which allows anyone to lawfully and anonymously report ICE sightings and get notified about nearby ICE agents, went viral overnight after criticism from the US Attorney General.

FYI: The app doesn't collect or store user data. (I checked by doing a traffic analysis.)

#TMSGNL, a chat app by a US-Israeli firm used by Trump officials, has halted operations after a hacker accessed messages and backend data.

Read: hackread.com/telemessage-...

#CyberSecurity #TeleMessage #Privacy #Breach #Trump

Sharing for the night crew. The MalChela YARA & Malware Analysis toolkit now has a GUI. But there’s much more than that. An updated fileanalyzer module, 15 new detections in mstrings and 3rd party tool integrations.

GitHub: github.com/dwmetz/MalCh...
Blog: bakerstreetforensics.com/2025/04/25/m...

SilentPush has published a profile of Chinese cybercrime group Smishing Triad.

The group is massive, with operations across 121 countries.

The report also looks at the group's new phishing kit, named Lighthouse.

www.silentpush.com/blog/smishin...

🚨 THREAT REPORT: Silent Push Threat Analysts confirm the evolving threat actor Scattered Spider is actively targeting high-profile organizations in 2025.

Read: hubs.ly/Q03gl0kx0

Targets: Chick-fil-A, Credit Karma, Forbes, Nike, T-Mobile and more... 🎯

#scatteredspider #cyberattack #phishing #CTI

Oracle has a serious, customer impacting security incident playing out in Oracle Classic, a cloud SaaS service they manage. They're attempting to deny it by saying there's no problem in "Oracle Cloud", which is wordplay. doublepulsar.com/oracle-attem...

Revamped and updated my Amazon list for Digital Forensic go-kit hardware, take a look! #DFIR amzn.to/4bUgDXj

New Akira decryption method found: tinyhack.com/2025/03/13/d...

Works only with Akira 2024 variants.

Code: github.com/yohanes/akir...

A new report from Forescout Research's Vedere Labs details the tactics, techniques, and procedures (TTPs) used by Mora_001, along with recommended detection and mitigation strategies. www.forescout.com/blog/new-ran...

A security researcher known as Buherator has published a write-up and PoC for an Apache Tomcat remote code execution vulnerability (CVE-2025-24813) patched this week

scrapco.de/blog/analysi...

lists.apache.org/thread/j5fkj...

Google's Mandiant team has released GoStringUngarbler, a Python CLI tool to automatically decrypt strings found in garble-obfuscated Go binaries

cloud.google.com/blog/topics/...

github.com/mandiant/gos...