All posts by John Doe

■■■■□ Iran 🇮🇷 | Lemon Sandstorm. An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East that lasted nearly two years. https://www.fortinet.com/blog/threat-research/fortiguard-incident-response-team-detects-intrusion-into-middle-east-critical-national-infrastructure PARISITE https://thehackernews.com/2024/08/us-agencies-warn-of-iranian-hacking.html https://thehackernews.com/2025/05/iranian-hackers-maintain-2-year-access.html

■■□□□ OSINT investigation by New York Times on zJewish (Zionist Jew) attack by Israeli 🇮🇱 forces on United Nations officers and medics from Red Crescent. Summary: Jews wait in ambush for medics, kill them, some of them at point blank range. This followed by dumping the 2 dozen UN personnel in mass grave along with…

■■■■■ CVE-2025-32433: Critical Telecom Vulnerability: No-Auth SSH and Al-Built Exploit. A critical flaw in Erlang/OTP’s SSH server allows attackers to exploit SSH message handling and execute remote code without authentication. What is Erlang? Erlang is a programming language developed by Ericsson in the ’80s, built for telecom systems. It’s still widely used in core networks…

■□□□□ Bytedance Proposes Faster Linux Inter-Process Communication With “Run Process As Library”. https://www.phoronix.com/news/Bytedance-Faster-Linux-IPC-RPAL

■■■■□ A proof-of-concept program has been released to demonstrate a so-called monitoring “blind spot” in how some Linux antivirus and other endpoint protection tools use the kernel’s io_uring interface. That interface allows applications to make IO requests without using traditional system calls. That’s a problem for security tools that rely on syscall monitoring to detect…

■■■■■ Right-Click Execution – A Tale of Windows LNK NTLM Leak. https://zeifan.my/Right-Click-LNK/

■■■□□ After #PahalgamAttack, The Indian Army College of Nursing was hacked by the infamous cyber-hacktivist group, Team_Insane_PK. Since changing their team name in May 2023, they’ve been actively hacking websites every day. From critical infrastructure to military and intelligence agencies, they’ve been gathering sensitive data. https://www.linkedin.com/posts/louis-hur-87313019_pahalgamterrorattack-cybersecurity-hacktivism-ugcPost-7321580713974067200-WmMP

🌐 Pwning the Ladybird browser. https://jessie.cafe/posts/pwning-ladybirds-libjs/

■■■■■ Zero-Day: Wormable Zero-Click Remote Code Execution (RCE) in AirPlay Protocol Puts Apple & IoT Devices at Risk. https://www.oligo.security/blog/airborne

■■■■■ And another AMSI bypass with a different DLL/patch. 🔒 https://medium.com/@andreabocchetti88/ghosting-amsi-cutting-rpc-to-disarm-av-04c26d67bb80