InfoSec

Saif al-Din Khader, known online as "Rey" and "Hikki-Chan," has been arrested in Jordan, according to reporting by Reuters journalists Raphael Satter, Dana Winter and Aj Vicens. Accounts in the cybersecurity community are circulating the news, saying he is allegedly cooperating with the FBI. Details about the charges remain limited so far.

Meta reportedly patched a virtual machine escape vulnerability in its MetaMuse product immediately before launch, according to 404 Media reporting. A VM escape flaw would let code break out of an isolated virtual machine, a serious security risk. Users in infosec and tech communities are discussing the fix and whether it connects to a fellow Mastodon user known to run servers from their own systems.

A user asked lawyers on the Fediverse for recommendations on how a non-lawyer can gain practical knowledge of US and state law, including classes or certifications. The question drew engagement from the infosec community and touched on self-education in legal matters.

ChainKeep, a tool aimed at digital forensics and incident response professionals, is being promoted with the message that every second matters in an investigation and that the software ensures every timestamp is accounted for. The pitch highlights chain-of-custody concerns in cybersecurity investigations, where accurate time records can determine whether evidence holds up. Discussion so far appears limited to infosec circles.

A cybersecurity commentator has published a comparative analysis of Ireland's MyGovID and Denmark's CPR personal identifier systems, examining how the two countries handle digital identity. The piece touches on age verification, digital rights, GDPR and data protection, prompting discussion among privacy and security professionals about how national ID schemes balance convenience against citizen data risks.

A new entry has been added to cybersecurity conference listings: ATLSECCON, taking place April 8-9, 2027 in Halifax, Nova Scotia, Canada. The Atlantic Canada security gathering is now on the calendar for infosec professionals planning next year's event schedule, with details available on its official website.

Security researchers are warning about a phishing site at the address facebooc-system.start.page, which imitates Facebook to steal login credentials. The deliberately misspelled domain on a free hosting service is a common scam pattern. An analysis of the site has been published on the URLDNA scanning platform, and the warning is circulating among infosec professionals.

CVE-2026-71297 describes a moderate authentication bypass in the maestro gRPC broker used by Red Hat Advanced Cluster Management and the Multicluster Engine. An attacker holding a valid client certificate could read other consumers' event streams or forge agent status reports. Security trackers and infosec communities are circulating the disclosure, with no confirmed exploitation reported so far.

Cybersecurity researchers are warning about a phishing site impersonating Facebook at a lookalike blogspot address that swaps characters in the domain to trick users. The link is being shared in defanged form so people cannot click it accidentally, and a full technical analysis has been published on URLDNA showing the site's characteristics. The warning circulates among infosec communities as a reminder to check domain spelling before entering login credentials.

Cybersecurity observers are warning about a suspected phishing page hosted on a Wix domain masquerading as a strategy firm outreach message. The warning, shared with the wider infosec community, includes a link to an analysis of the site on the URLDNA scanning platform, which breaks down the page's infrastructure and behavior. Users are advised to avoid the link and verify unsolicited outreach before responding.

A developer is asking the security community for feedback on age-rt, an encryption design inspired by the age file encryption format but built for low-latency streaming with variable chunk sizes. The proposal is being shared on Infosec Exchange, with discussion expected to focus on whether the design is sound and how it might fit real-time use cases.

A new ransomware group calling itself SilentRansomGroup has been profiled in a fresh threat intelligence write-up. The post lists the group's name and activity but leaves its targeted sector unknown, and details remain limited. Cybersecurity researchers are circulating the alert among threat intelligence and infosec communities as they track the group's emergence.

Cybersecurity analysts are warning about a possible phishing campaign hosted through a Google Forms link. The alert, shared on the social platform Mastodon, defuses the link and points to an automated URL analysis service so others can inspect the page before interacting with it. The warning is being circulated under phishing and infosec tags among the security community.

Cybersecurity observers are warning about a suspected phishing site hosted on a Blogspot address impersonating Facebook, with the domain name combining "facebook" and "bigeronline". The malicious link has been defanged and shared alongside a URL analysis report so others can inspect it. The alert circulates in infosec communities, where users are urging caution against similar fake login pages.

Cybersecurity accounts are warning about a suspected phishing website hosted on a Vercel subdomain, sharing the address in defanged form so readers cannot accidentally click it. A link to an automated scan on URLDNA lets others inspect the page's behaviour. The warning has circulated in infosec communities, with users urged to treat the domain as unsafe.

Security researchers have flagged a suspected phishing page hosted on a weebly.com subdomain mimicking Roundcube webmail. The URL has been defanged to prevent accidental clicks, and a public scan of the site has been published for others to review. The warning circulated among infosec communities, who shared it with tags for phishing, scam and cybersecurity awareness.

A new edition of BSidesLimburg has been announced for March 12, 2027 in Hasselt, Belgium. The community-run cybersecurity conference is part of the global BSides series of information security events, and the announcement is circulating among infosec professionals tracking upcoming conferences.

A claim of a mathematical proof that memory hardness cannot be reversed is circulating among cryptography and information security enthusiasts. The discussion centers on whether such a result would hold, since it would have implications for password hashing and memory-hard functions used to slow brute-force attacks. Details of the argument itself remain thin, and experts have yet to weigh in publicly on its validity.

Cybersecurity accounts are warning about a suspected phishing page hosted on a GitBook subdomain, sharing the address in defanged form so readers cannot accidentally click it. A scan link from the URL analysis service urlDNA has been attached, letting other researchers inspect the domain's infrastructure, hosting details and behaviour. The warning is circulating with standard tags like #phishing and #infosec.

Cybersecurity researchers are warning about a suspected phishing website hosted on a Cloudways application domain (wordpress-1644952-6533726.cloudwaysapps.com). A link analysis of the address has been published on URLDNA so others can inspect the site's infrastructure. The warning is being circulated in infosec communities with the standard advice to treat the domain as unsafe.

A security researcher has shared a promotional video for BitShot, an app demonstrating a complete screen-recorded process tied to bitcoin, OSINT and data scraping. The demo follows an earlier written article by the same person and highlights the tool's open-source approach to cryptocurrency monitoring and privacy-related security research.

A cybersecurity researcher has raised an alert over a suspected phishing site hosted on the domain mailer05-tra.mdbgo.io, defanging the link to prevent accidental clicks. A scan report from URLDNA was shared alongside the warning so others can inspect the domain's technical details. The post circulated among infosec communities under phishing and scam tags.

A GitHub repository collecting calls for papers and speaking opportunities for hackers and security researchers, called the Hacker CFP Tracker, is being circulated within the infosec community. The tracker is being highlighted during Cybersecurity Awareness Month, with users sharing it as a resource for researchers looking to present at security conferences.

The 15th SECCON open conference has been scheduled for February 20-21, 2027 in Tokyo. The Japanese cybersecurity event, run by the SECCON organization known for its capture-the-flag competitions, brings together security researchers and professionals. The announcement is circulating among infosec practitioners tracking upcoming industry conferences.

A cybersecurity researcher is warning of a suspected phishing website at hsbcpress.com, a domain designed to look like it belongs to HSBC. The site has been submitted for technical analysis on the URLDNA scanning service. The warning circulated among infosec communities, with observers urged to avoid interacting with the domain and to treat similar bank-themed sites with caution.

A new Cisco security advisory is circulating among cybersecurity professionals, describing a vulnerability in Cisco SD-WAN's web authentication component labelled as a zero-day. Security commentators are sharing the advisory link on Infosec forums, tagging it with zero-day and SD-WAN hashtags, urging network administrators to review their Cisco SD-WAN deployments for the flaw and apply recommended mitigations or patches.

A cybersecurity researcher has flagged a possible phishing page hosted on a Weebly subdomain, sharing the link in defanged form along with a public URL analysis on urldna.io. The post serves as a warning to the infosec community, allowing others to inspect the site's infrastructure without exposing themselves to the scam. Details about the phishing campaign's targets or scale were not provided.

Security researchers are warning about a phishing site impersonating DocuSign, hosted on a Webflow domain that mimics the e-signature service. The suspicious link has been defanged to prevent accidental clicks, and a public URL analysis has been shared so others can inspect the site's infrastructure. Infosec communities are circulating the alert to help people avoid credential theft scams that use fake document-signing pages.

The network AS15897, located in Istanbul, Turkey, was added to Shodan's internet-wide scanning database on 30 September 2026. Security researchers use these ASN additions to track newly visible networks and exposed devices. The listing is being shared within the infosec community as part of routine monitoring of newly indexed internet infrastructure.

Cybersecurity observers are warning about a suspected phishing site operating under the domain messagerlev0cal8883900.fo.team, a name that mimics Facebook Messenger's legitimate local addresses. The domain has been defanged and submitted to the URLdna scanning service for analysis, with the warning shared under cybersecurity and phishing tags. The deliberately confusing hostname suggests an attempt to trick users into entering login credentials on a fake page.

Cybersecurity researchers are warning about a phishing page hosted on a compromised WordPress site, mimicking Caixa's card verification service. The malicious page, found under a plugins directory, is designed to steal banking credentials. A full analysis of the fraudulent infrastructure has been published, and the warning is circulating among infosec professionals tracking scams targeting banking customers in Spanish-speaking regions.

Cybersecurity researchers are warning about a possible phishing site operating through a Weebly-hosted page that impersonates network or helpdesk services. The suspicious link has been defused and shared with a technical analysis via urldna.io so that other security professionals can inspect the domain and its infrastructure. The report has circulated in infosec communities, which frequently post such alerts to warn the public about scam pages before they spread more widely.

Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.

Sherpa Intelligence has published its Basecamp Briefing for October 7th, a curated roundup covering information security, governance, risk and compliance, and open-source intelligence topics. The briefing is part of the firm's regular effort to package key cybersecurity developments into one digest for practitioners.

Cybersecurity observers are warning about a suspected phishing site hosted on a Weebly subdomain imitating First Jackson, with a link-out to a URL analysis report. Alerts like this circulate regularly in infosec communities so defenders can block or take down malicious pages. The defanged link is shared to prevent accidental clicks while allowing others to verify the finding.