The Exploit Post

Sign in Subscribe

Red Dog Security

AI Chatbots Like ChatGPT Are Providing Fake URLs for Major Companies

AI Chatbots Like ChatGPT Are Providing Fake URLs for Major Companies

Cybersecurity analysts at Netcraft have uncovered a troubling trend: AI chatbots frequently generate incorrect or misleading URLs when asked to provide official website links for major brands. According to researchers, this flaw opens a dangerous new vector for phishing and domain hijacking attacks. Key Findings from Netcraft’s Study The

Hackers Leak Allegedly Stolen Telefónica Data

Hackers Leak Allegedly Stolen Telefónica Data

A hacker is threatening to release 106 GB of data allegedly stolen from Spanish telecommunications giant Telefónica, though the company firmly denies any recent breach or data compromise. The threat actor, operating under the alias “Rey,” claims the intrusion occurred on May 30, during which over 12 hours of data

.es Domains Become 19 Times More Popular Among Phishers

.es Domains Become 19 Times More Popular Among Phishers

Cybersecurity researchers at Cofense report a dramatic rise in phishing campaigns leveraging .es domains, which are officially reserved for Spanish-language websites or entities based in Spain. The use of these domains by cybercriminals has surged 19-fold since the beginning of 2025, making .es the third most exploited top-level domain (TLD)

Critical Sudo Vulnerability Allows Root Privilege Escalation in Linux

Critical Sudo Vulnerability Allows Root Privilege Escalation in Linux

Two vulnerabilities have been discovered in the widely used sudo utility, enabling local attackers to escalate privileges to root on affected Linux systems. The flaws—identified by security researchers at Stratascale—include a newly discovered 12-year-old bug. One of the vulnerabilities (CVE-2025-32462) has existed in the sudo codebase since 2013,

Spy App Catwatchful Exposes Data of 62,000 Users

Spy App Catwatchful Exposes Data of 62,000 Users

A security researcher has uncovered a critical vulnerability in the Android spyware app Catwatchful, marketed as a parental control tool. The flaw exposed sensitive data belonging to over 62,000 users, including plain-text email addresses and passwords. Although positioned as a monitoring solution, Catwatchful fits the classic definition of stalkerware—

Microsoft Asks Users to Ignore Windows Firewall Errors

Microsoft Asks Users to Ignore Windows Firewall Errors

Microsoft is advising users to disregard Windows Firewall error messages that may appear after installing the June 2025 non-security preview update for Windows 11. The issue, which affects only select systems running the 24H2 build, has been linked to a feature still under development. What’s Happening? After installing KB5060829,

Hunters International Ransomware Group Shuts Down, Releases Free Decryptors

Hunters International Ransomware Group Shuts Down, Releases Free Decryptors

In a surprising move, the Ransomware-as-a-Service (RaaS) group Hunters International has announced that it is shutting down operations and releasing free decryption tools to help victims recover encrypted data—without paying a ransom. Key Announcements from Hunters International The group posted an official statement on its dark web leak site,