4906
Security news, exploits, vulnerabilities, leaks.. canyoupwn.me twitter.com/canyoupwnme fb.me/canyoupwnme
sast-skills
Collection of agent skills that turn your AI coder into a SAST scanner
https://github.com/mstfknn/sast-skills
llm-router
Minimal LLM routing proxy. Zero dependencies, single binary.
https://github.com/mstfknn/llm-router
🏴☠️ Incransom has just published a new victim : transnova-ruf.de
https://www.ransomware.live/id/dHJhbnNub3ZhLXJ1Zi5kZUBpbmNyYW5zb20=
🏴☠️ Qilin has just published a new victim : Spectra Logic
https://www.ransomware.live/id/U3BlY3RyYSBMb2dpY0BxaWxpbg==
MURKY PANDA: A Trusted-Relationship Threat in the Cloud
https://www.crowdstrike.com/en-us/blog/murky-panda-trusted-relationship-threat-in-cloud/
Amp’ed RF BT-AP 111 Bluetooth Access Point Vulnerability Let Attackers Gain Full Admin Access
https://cybersecuritynews.com/amped-rf-bt-ap-111-bluetooth-access-point-vulnerability/
MURKY PANDA: A Trusted-Relationship Threat in the Cloud
https://www.crowdstrike.com/en-us/blog/murky-panda-trusted-relationship-threat-in-cloud/
🏴☠️ Radar has just published a new victim : ROBERT G. DASHIELL, JR., P.E., INC
https://www.ransomware.live/id/Uk9CRVJUIEcuIERBU0hJRUxMLCBKUi4sIFAuRS4sIElOQ0ByYWRhcg==
Hackers left empty-handed after massive NPM supply-chain attack
https://www.bleepingcomputer.com/news/security/hackers-left-empty-handed-after-massive-npm-supply-chain-attack/
Pixel 10 fights AI fakes with new Android photo verification tech
https://www.bleepingcomputer.com/news/security/pixel-10-fights-ai-fakes-with-new-android-photo-verification-tech/
🏴☠️ Killsec has just published a new victim : BusOnlineTicket Thailand
https://www.ransomware.live/id/QnVzT25saW5lVGlja2V0IFRoYWlsYW5kQGtpbGxzZWM=
Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems
https://thehackernews.com/2025/09/chinese-apt-deploys-eggstreme-fileless.html
🏴☠️ Killsec has just published a new victim : Docklyne
https://www.ransomware.live/id/RG9ja2x5bmVAa2lsbHNlYw==
🏴☠️ Ransomhouse has just published a new victim : M8 Group
https://www.ransomware.live/id/TTggR3JvdXBAcmFuc29taG91c2U=
Jaguar Land Rover confirms data theft after recent cyberattack
https://www.bleepingcomputer.com/news/security/jaguar-land-rover-jlr-confirms-data-theft-after-recent-cyberattack/
VibeBasket
Bundle trusted MCP servers, agent skills, and project rules into one shareable install flow across AI IDEs.
https://github.com/mhmtayberk/VibeBasket
🏴☠️ Lynx has just published a new victim : Encore Leisure Group
https://www.ransomware.live/id/RW5jb3JlIExlaXN1cmUgR3JvdXBAbHlueA==
DDoS defender targeted in 1.5 Bpps denial-of-service attack
https://www.bleepingcomputer.com/news/security/ddos-defender-targeted-in-15-bpps-denial-of-service-attack/
September 2025 Patch Tuesday: Two Publicly Disclosed Zero-Days and Eight Critical Vulnerabilities Among 84 CVEs
https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2025/
🏴☠️ Qilin has just published a new victim : Ekotrade
https://www.ransomware.live/id/RWtvdHJhZGVAcWlsaW4=
September 2025 Patch Tuesday: Two Publicly Disclosed Zero-Days and Eight Critical Vulnerabilities Among 84 CVEs
https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2025/
Microsoft waives fees for Windows devs publishing to Microsoft Store
https://www.bleepingcomputer.com/news/microsoft/microsoft-waives-fees-for-windows-devs-publishing-to-microsoft-store/
🏴☠️ Radar has just published a new victim : RG ELECTRIC COMPANY INC
https://www.ransomware.live/id/UkcgRUxFQ1RSSUMgQ09NUEFOWSBJTkNAcmFkYXI=
Cursor AI editor lets repos “autorun” malicious code on devices
https://www.bleepingcomputer.com/news/security/cursor-ai-editor-lets-repos-autorun-malicious-code-on-devices/
🏴☠️ Killsec has just published a new victim : 1 ACT Driving Schools
https://www.ransomware.live/id/MSBBQ1QgRHJpdml2aW5nIFNjaG9vbHNBa2lsbHNlYw==
🏴☠️ Killsec has just published a new victim : Princeps Credit Systems Limited
https://www.ransomware.live/id/UHJpbmNlcHMgQ3JlZGl0IFN5c3RlbXMgTGltaXRIZWRKaWxsc2Vj
Apple CarPlay Exploited To Gain Root Access By Executing Remote Code
https://cybersecuritynews.com/apple-carplay-vulnerability-exploited/
🏴☠️ Killsec has just published a new victim : BFLI
https://www.ransomware.live/id/QkZMSUBraWxsc2Vj
Can I have a new password, please? The $400M question.
https://www.bleepingcomputer.com/news/security/can-i-have-a-new-password-please-the-400m-question/
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
https://thehackernews.com/2025/09/microsoft-fixes-80-flaws-including-smb.html