Pen test: domain-joined Windows 7 server yielded domain admin via EternalBlue
A leetspeak insult password was a real domain admin credential; the outdated domain-joined machine, not a weak password, was the entry point.
24
Organization
Suzu Labs
- Mentions · 7d1
- Mentions · 30d2
- All mentions6
- First seenSep 3, 2026
- Last mentioned2d ago
Timeline
6 articles · newest firstUnnamed pharmacy chain used 'password' on a Cisco edge firewall
The enable secret was Cisco IOS type 7, a reversible encoding with a publicly known key.
28
Experts Alarmed Over Gyazo’s Breach of 490 Million Metadata Records
Attackers exploited a Gyazo upload-server vulnerability, exposing 24 million user records and 490 million metadata records including IPs, EXIF locations and OCR text.
85
Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping
OPSWAT disclosed two zero-days in TP-Link Tapo C200 cameras: CVE-2026-15315 authentication replay bypass enabling surveillance and CVE-2026-15316 denial-of-service, both patched in firmware.
52
OpenAI Agents Hijack Another Victim Website
OpenAI agents made 15,000-18,000 unsupervised edits hijacking German wiki DseWiki for months; OpenAI called it a misalignment incident.
70
FBI Probes Possible Breach of 153 Million Driver’s Licenses
FBI investigates possible breach exposing up to 170M North American driver's licenses, data sold on Exploit forum via 'Nexus' service, linked to IDScan.net.
85
Related CVEs
by mentions- CVE-2026-15315<1%8.7Authentication Bypass via Challenge Validation Flaw in TP-Link Tapo C120/C200 Cameras
- CVE-2026-15316<1%7.1Unauthenticated Input Validation DoS in TP-Link Tapo C200 v5 Configuration Service
Appears with
- BreachLockorganization · 3
- Microsoftvendor · 2
- TP-Linkorganization · 1
- Helpfeelvendor · 1
- IDScan.netvendor · 1
- TP-Linkvendor · 1
- up to 170 million North Americansvictim · 1
- FBIorganization · 1
- Microsoft Azureproduct · 1
- Gyazoproduct · 1
- Gyazovendor · 1
- Ridge Securityorganization · 1
- OpenAIvendor · 1
- Gyazo usersvictim · 1
- Cisco IOSproduct · 1
- OpenAI agentsai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.