All posts by John Doe

■■■■□ CVE-2026-48778 & CVE-2026-48800 | Notepad++ | CVSS 7.8 HIGH 🐛 Config file injection – fake Run menu entries execute attacker code and survive reboots ✅ Fixed: Notepad++ 8.9.6.1 (May 27) https://notepad-plus-plus.org/news/v8961-released/

■■■□□ Claude-Red: Offensive security skills for Claude — drop-in SKILL.md files that turn Claude into a context-aware red team operator. https://github.com/SnailSploit/Claude-Red

■■■■■ Bypassing Windows Defender and AMSI: A Practical Defense Evasion Guide for Red Team Operators. Bypassing Windows Defender and AMSI: A Practical Defense Evasion Guide for Red Team Operators

■■■□□ Air-Gap Bridge via QR codes. A side channel attack to bypass DLP mechanisms. https://ckure.org/rx/QR-Beam 🔥Developer mentioned that he shall add Giber-Link in future that will allow audio based data transfer.

🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn’t new, but was focused on turning it into a practical, production-ready solution with several improvements over…

■■□□□ Threat actor Golden Falcon is targeting US allies. And claim to have hacked Japan’s solar power station.

🇮🇷📢 Iranian signal jammers have begun jamming more frequencies, mostly used by the Israeli Navy 🇮🇱

■■■□□ AMSI/ETW Bypass from Unprivileged Context: Assumed Breach Without Admin. https://github.com/osherjacobs/AD-Lab-Research/blob/main/amsi-etw-lowpriv.md

■■□□□ OSINT: China Anti Nuclear Base. https://www.reuters.com/graphics/CHINA-MILITARY/NUCLEAR/zjpqmbrlqpx/

■■■□□ Website to test the risk your browser possesses: https://ckure.org/rx/FROST/ Result comes as Low, Medium or High and you will get JSON response which you can copy for checking on any AI for more clarity. 👮