The OVR Foundation website is live!
We were founded after the U.S. government’s 2025 threat to cut funding for the CVE program — a crucial piece of the cybersecurity landscape. Now, we’re working to create a decentralized, resilient standard for global vulnerability coordination.

Small updates will follow in the next few days.
Visit us: https://ovr-foundation.org
#CyberSecurity #OVR #Infosec #Decentralization #OpenStandard #CVE

Possible Phishing
on: hxxps[:]//blockdagliveclaim[.]web[.]app
Analysis at: https://urldna.io/scan/68067f813b7750000ba30bf4
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing
on: hxxp[:]//bace-ndax-login-sso[.]webflow[.]io/
Analysis at: https://urldna.io/scan/68067d223b7750000a2f9500
#cybersecurity #phishing #infosec #urldna #scam #infosec

Information Security Administration Service Delivery Senior Analyst - Spanish speaking
Citi
Budapest, Hungary

Apply now: https://totalcyber.io/jobs/citi/information-security-administration-service-delivery-senior-analyst-spanish-speaking

Understand NahamSec Bug Bounty Resources with DeepWiki

https://deepwiki.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

Craft CMS just faced a major breach—hackers exploited a subtle "return URL" trick and a framework flaw to get backdoor access. How did a tiny parameter turn into a full-blown server exploit, and what can admins do to stop it?

https://thedefendopsdiaries.com/craft-cms-security-challenges-understanding-the-rce-exploit-chain/

#craftcms
#rce
#cybersecurity
#zeroday
#infosec

This has to be the most amusing way to get your #breach updates.

From #aijoe and #cybernews

We have no affiliation, just sharing.

#IT #infosec #security #itsecurity

https://youtu.be/1mVqUuJ8Olw

Possible Phishing
on: hxxps[:]//allchainprotocol[.]online
Analysis at: https://urldna.io/scan/6809b63b3b7750000db484b6
#cybersecurity #phishing #infosec #urldna #scam #infosec

good thing the US is gutting beneficial ownership regulations that would make it easier to understand who actually owns US trusts and corporations while simultaneously trashing both crypto enforcement at the DOJ but also more generally cyber defense

"The companies, Blocknovas LLC and Softglide LLC, were set up in the states of #NewMexico and New York using fake personas and addresses."

* Reuters: https://www.reuters.com/sustainability/boards-policy-regulation/north-korean-cyber-spies-created-us-firms-dupe-crypto-developers-2025-04-24/
* Technical details from Silent Push: https://www.silentpush.com/blog/contagious-interview-front-companies/

Financial services alert: Banks are racing to build AI — but tech gaps are slowing them down

CIO Dive reports that banks are doubling down on cloud, cybersecurity, and data investments to unlock GenAI’s full potential:

72% of firms are scaling generative AI projects
4 in 5 rank cyber, analytics, and cloud as top priorities
Yet nearly half are battling data silos and quality issues
Leaders expect GenAI-driven productivity gains — but returns are uneven

The path forward?
Build resilient, secure cloud foundations
Tackle data modernization before scaling AI
Invest in governance, access controls, and model guardrails

AI may be the future of banking — but only if the underlying tech can support it safely.

#Banking #Cloud #CyberSecurity #GenerativeAI #DataStrategy #Fintech #security #privacy #cloud #infosec

https://www.ciodive.com/news/bank-tech-cloud-data-cyber-generative-ai-broadridge/745931/

New Open-Source Tool Spotlight

Mapping your threat-hunting workflows to the MITRE ATT&CK framework? Check out olafhartong's ThreatHunting Splunk app. With 130+ reports and dashboards, it simplifies hunting while integrating Sysmon data for deep insights. Requires tuning for best results. #ThreatHunting #MITREATTACK

Project link on #GitHub https://github.com/olafhartong/ThreatHunting

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Possible Phishing
on: hxxps[:]//swiftindexchain[.]web[.]app
Analysis at: https://urldna.io/scan/6809b7973b7750000a6bf20b
#cybersecurity #phishing #infosec #urldna #scam #infosec

Threat Researcher
Proofpoint
Multiple remote locations

Apply now: https://totalcyber.io/jobs/proofpoint/threat-researcher-1

Mobile security risk: New Android malware "SuperCard X" enables contactless payment fraud via NFC relay attacks

Here’s how it works:
Victims are socially engineered through fake bank alerts (smishing + calls)
Tricked into installing a rogue app posing as “security software”
NFC data is intercepted from real debit/credit cards
Attackers relay stolen credentials to PoS terminals and ATMs for fraudulent cashouts

Why it matters:
• Attackers no longer need stolen physical cards — just proximity + deception
• Banking customers, payment providers, and card issuers are all at risk
• Google is working on Android protections — but vigilance is key now

Tip: Always scrutinize app installs, verify messages before acting, and keep Google Play Protect enabled.

#CyberSecurity #MobileSecurity #Malware #NFC #FinancialFraud #ThreatIntel #security #privacy #cloud #infosec

https://thehackernews.com/2025/04/supercard-x-android-malware-enables.html

#Reuters: Hackeri nord-coreeni au înființat companii fictive în #SUA, pentru a sprijini ilegal programul nuclear nord-coreean. Păcăleau dezvoltatori din industria criptomonedelor, prin interviuri false, să ruleze aplicații infectate cu malware și furau date pe care le foloseau în atacuri cibernetice.

https://biziday.ro/?p=317485

Anything you say, can and will be used against you in a court of Lyft.

https://www.cbc.ca/news/canada/toronto/lyft-conversation-transcribed-1.7508106

Possible Phishing
on: hxxps[:]//btbecomingeesupportdesk[.]weebly[.]com/
Analysis at: https://urldna.io/scan/680a6efc3b7750000f9dcda9
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing
on: hxxps[:]//ektakhokhar[.]github[.]io/amazon-homepage-UI/
Analysis at: https://urldna.io/scan/68067e3f3b7750000d199c0a
#cybersecurity #phishing #infosec #urldna #scam #infosec

Security Assurance Specialist , AWS Security, Europe
AWS EMEA SARL (UK Branch)
London, United Kingdom

Apply now: https://totalcyber.io/jobs/aws-emea-sarl-uk-branch/security-assurance-specialist-aws-security-europe-1

Spionii cibernetici nord-coreeni au creat firme #America‎ne pentru a păcăli dezvoltatorii de criptografie.
Hackeri din grupul Lazarus au efectuat atacuri de tip „waterhole” asupra șase companii.

https://techrider.ro/cybersecurity/spionii-cibernetici-nord-coreeni-au-creat-firme-americane-pentru-a-pacali-dezvoltatorii-de-criptografie-hackeri-din-grupul-lazarus-au-efectuat-atacuri-de-tip-waterhole-asupra-sase/#new_tab