All posts by John Doe

■■■■■ Websites have a new way to spy on visitors: Analyzing their SSD activity. Telltale SSD activity can be measured in the browser using simple JavaScript. https://arstechnica.com/security/2026/05/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity/

😔 Mini Plasma Zero-Day by Chaotic Eclipse (aka Nightmare Eclipse) with a total of 6 0-Days in 6 weeks. Official blog: https://deadeclipse666.blogspot.com https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge

 BTMOB Android malware service generates custom phishing payloads An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures. […] https://www.bleepingcomputer.com/news/security/btmob-android-malware-service-generates-custom-phishing-payloads/

■■■□□ Python-based web vulnerability scanner utilizing Acunetix vulnerability database. https://codeberg.org/neolead/acuscan.git https://github.com/neolead/acuscan

■■■□□ Open-source LLM Red-Team lab. 159 transforms, 25 tool surfaces, BYOK gateway. Runs in your browser. https://github.com/m4xx101/cryptex-oss

■■■■■ GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip. https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip

■■■□□ GitHub has terminated the account of “Nightmare-Eclipse,” an anonymous rogue security researcher known for dropping critical unpatched Windows vulnerabilities since Microsoft left them “homeless with nothing.” The vigilante has now moved to GitLab, releasing more threats. https://cybernews.com/security/github-bans-researcher-releasing-windows-zero-days

■■■■□ AdStrike — AI Powered Active Directory Attack Framework 💀🔥 A modular red-team framework built for advanced AD operations, Kerberos workflows, ADCS abuse, credential access, lateral movement & attack-path analysis. ⚡ 🔥 58 interactive modules 🛡️ Kerberos-aware workflows 🤖 AI-assisted operator agent 📊 HTML / JSON / Markdown reporting ⚔️ BloodHound, Impacket, Certipy, NetExec integration…

■■■□□ Telegram, the FSB, and the Man in the Middle Investigation. The technical infrastructure that underpins Telegram is controlled by a man whose companies have collaborated with Russian intelligence services. https://www.occrp.org/en/investigation/telegram-the-fsb-and-the-man-in-the-middle

■■■■□ Free media links website. A guy named nbatman on Reddit accidentally built the most useful website on the internet. It’s called FMHY (Free Media Heck Yeah). This is the website Google delisted from search for DMCA violations, Reddit shadow-banned for promoting piracy, the Motion Picture Association flagged as a top piracy threat, and the…