All posts by John Doe

■■■■□ Chinese Weaver Ant hackers spied on telco network for 4 years. Researchers investigating the intrusion found multiple variants of the China Chopper backdoor and a previously undocumented custom web-shell called ‘INMemory’ that executes payloads in the host’s memory. https://www.bleepingcomputer.com/news/security/chinese-weaver-ant-hackers-spied-on-telco-network-for-4-years/

■■■■■ The Oracle Cloud Supply Chain Hack. The Oracle Cloud Supply Chain Hack

■■■■□ Cloudflare is luring web-scraping bots into an ‘AI Labyrinth’Rather than block web scrapers, Cloudflare invites them to trawl a web of useless ‘AI-generated nonsense.’ https://www.theverge.com/news/634345/cloudflare-ai-labyrinth-web-scraping-bots-training-data

🌐 Russian zero-day seller is offering up to $4 million for Telegram exploits. Russian zero-day seller is offering up to $4 million for Telegram exploits

■■■■■ Caido v0.47.0 Released – Burp Suite Alternative Web Pentesting Tool Brings New Features. Caido v0.47.0 Released – Burp Suite Alternative Web Pentesting Tool Brings New Features

■■■■□ Find open Juice S3 Bucket using lazys3 Tool Link: https://github.com/nahamsec/lazys3 Some writeups https://medium.com/p/f6ae24cdcdfa https://medium.com/securing/exploring-25k-aws-s3-buckets-f22ec87c3f2a https://suleyman-celik8.medium.com/enumerate-s3-buckets-using-lazys3-d2f5de14d31

■■■□□ HTTP Hacking 101 An interesting 𝕏 thread https://x.com/0xAsm0d3us/status/1903162621869822146

■■■□□ RansomHub ransomware uses a new Betruger ‘multi-function’ backdoor. https://www.bleepingcomputer.com/news/security/ransomhub-ransomware-uses-new-betruger-multi-function-backdoor/

■■□□□ Noam Brown, who leads AI reasoning research at OpenAI, says certain forms of “reasoning” AI models could’ve arrived 20 years earlier had researchers “known [the right] approach” and algorithms. OpenAI research lead Noam Brown thinks certain AI ‘reasoning’ models could’ve arrived decades ago

■■■■□ Researchers have found that large language models (LLMs) tend to parrot buggy code when tasked with completing flawed snippets. That is to say, when shown a snippet of shoddy code and asked to fill in the blanks, AI models are just as likely to repeat the mistake as to fix it. https://www.theregister.com/2025/03/19/llms_buggy_code/