Sami Laiho
@samilaiho.com
1.6K followers
170 following
2.2K posts
Keynote-speaker, Chief Research Officer, Microsoft MVP since 2011
More info: https://samilaiho.com/
Posts
Media
Videos
Starter Packs
Sami Laiho
@samilaiho.com
· 13h
GitHub - JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201: CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/S...
CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalati...
github.com
Sami Laiho
@samilaiho.com
· 1d
ShinyHunters Wage Broad Corporate Extortion Spree
A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website that threatens to publish data stolen fr...
krebsonsecurity.com
Sami Laiho
@samilaiho.com
· 1d
Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882)
We bet you thought you’d be allowed to sit there, breathe, and savour the few moments of peace you’d earned after a painful week in cyber security.
Obviously, you were horribly wrong, and you need to...
labs.watchtowr.com
Sami Laiho
@samilaiho.com
· 2d
It's Never Simple Until It Is (Dell UnityVSA Pre-Auth Command Injection CVE-2025-36604)
Welcome back, and what a week! We’re glad that happened for you and/or sorry that happened to you. It will get better and/or worse, and you will likely survive.
Today, we’re walking down the garden p...
labs.watchtowr.com
Sami Laiho
@samilaiho.com
· 3d
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
Trend™ Research has identified an active campaign spreading via WhatsApp through a ZIP file attachment. When executed, the malware establishes persistence and hijacks the compromised WhatsApp account ...
www.trendmicro.com
Sami Laiho
@samilaiho.com
· 3d
Discord discloses data breach after hackers steal support tickets
Hackers stole partial payment information and personally identifiable data, including names and government-issued IDs, from some Discord users after compromising a third-party customer service provide...
www.bleepingcomputer.com
