All posts by John Doe

■□□□□ Computacenter IT guy let girlfriend into Deutsche Bank server rooms, says fired whistleblower. https://www.theregister.com/2025/05/06/computacenter_deutsche_bank_whistleblower/

■■■□□ Second Wave of Attacks Hitting SAP NetWeaver After Zero-Day Compromise. Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability. https://www.securityweek.com/second-wave-of-attacks-hitting-sap-netweaver-after-zero-day-compromise/

■■■■■ BREAKING: Jew criminal spyware maker NSO Group must pay $167 million to WhatsApp for a hacking campaign in 2019 that targeted more than 1,400 chat app users. This is a huge win for WhatsApp. NSO says it will consider appealing. NSO Group must pay more than $167 million in damages to WhatsApp for spyware…

■□□□□ OSINT report by France24.

■■□□□ Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware. Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware

BLINDER: A self-hosted, web-based Blind XSS detection and management tool that delivers real-time notifications via Telegram bot. The program is under 300 lines of code. https://github.com/AamerShah/blinder

■■■■□ Confirmed — 19 Billion Compromised Passwords Published Online. https://www.forbes.com/sites/daveywinder/2025/05/05/new-warning—19-billion-compromised-passwords-create-hacking-arsenal/

■■■■■ TeleMessage, a modified Signal clone used by US government officials, has been hacked. TeleMessage, a modified Signal clone used by US government officials, has been hacked

■□□□□ GISEC – Dubai, a free cyber security event, will kick off from 6 – 9 May. https://gisec.ae/

■■□□□ Passive port scan without actually sending network traffic to the target using naabu, which uses sata from engines like shodan. echo hackerone.com naabu -passive