DataDog has launched pathfinding.cloud, a database of IAM permissions and permission sets that allow privilege escalation in AWS.
pathfinding.cloud - AWS IAM Privilege Escalation Library
Understand, Detect & Demonstrate AWS IAM Privilege Escalation. Comprehensive documentation of attack paths with exploitation steps and mitigations.
The DomainTools security team looks at recent APT35 leaks showing how the group operates with extreme government oversight and bureaucracy, rather than a group of loose canon hackers
DomainTools Investigations | DTI
The APT35 Dump Episode 4: Leaking The Backstage Pass To An Iranian Intelligence Operation - DomainTools Investigations | DTI
APT35/Charming Kitten's leaked documents expose the financial machinery behind state-sponsored hacking. Learn how bureaucracy, crypto micro-pa...
A Latvian crew member was detained for installing a RAT on an Italian ferry:
Bluesky Social
David Shipley (@davidshipley.bsky.social)
Don’t see this everyday. @patrick.risky.biz https://www.france24.com/en/live-news/20251217-france-probes-foreign-interference-after-malware-found...
Google's Wiz division has awarded $320,000 to security researchers for 11 exploits used during the ZeroDay Cloud hacking contest last week
wiz.io
Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra | Wiz Blog
ZDC awarded hackers $320,000 and uncovered a record‑breaking tally of critical CVEs for core cloud infrastructure, underscoring the scale and urg...
 image
French authorities said they arrested the man who hacked their Ministry of Interior email servers. He's a known hacker who was already convicted this year. Anyone has any ideas who this could be? https://www.rfi.fr/en/france/20251218-france-detains-suspect-over-interior-ministry-cyberattack-as-probe-widens
Sweet... a SonicWall zero-day to go with that Cisco zero-day right before your Xmas holiday
Security Advisory
React2Shell used as initial access vector for Weaxor ransomware deployment
React2Shell used as initial access vector for Weaxor ransomware deployment
S-RM has responded to an incident where a threat actor used the recently disclosed critical vulnerability known as React2Shell (CVE-2025-55182) to ...