All posts by John Doe

🆕 We will move to a new website 📡 ckure.org

■■■□□ Signal adds new cryptographic defense against quantum attacks. https://www.bleepingcomputer.com/news/security/signal-adds-new-cryptographic-defense-against-quantum-attacks/

■■■■■ New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer. In yet another piece of research, academics from Georgia Institute of Technology and Purdue University have demonstrated that the security guarantees offered by Intel’s Software Guard eXtensions (SGX) can be bypassed on DDR4 systems to passively decrypt sensitive data. https://thehackernews.com/2025/10/new-wiretap-attack-extracts-intel-sgx.html

■■■■□ Data-Leak | Security update: Incident related to Red Hat Consulting GitLab instance. https://www.redhat.com/en/blog/security-update-incident-related-red-hat-consulting-gitlab-instance

🔑 OpenSSL Vulnerabilities Let Attackers Execute Malicious Code and Recover Private Key Remotely. ➿CVE-2025-9230: Memory Corruption Vulnerability ➿CVE-2025-9231: Timing Side-Channel Flaw OpenSSL Vulnerabilities Let Attackers Execute Malicious Code and Recover Private Key Remotely

■■■□□ 📡 Cisco Meraki interactive auditing tool in python. 〰️Installs its own dependencies. 〰️Tool does read-only API check. 〰️Dumps the config in JSON (missing natively in Meraki Dashboard) 〰️Has option to select Network or dump-all 〰️Performs security audit and saves in csv And saves as: meraki/ └── NetworkName/ ├── config.json # Complete configuration dump └──…

■□□□□ Hackers Actively Scanning to Exploit Palo Alto Networks PAN-OS Global Protect Vulnerability. Hackers Actively Scanning to Exploit Palo Alto Networks PAN-OS Global Protect Vulnerability

■■□□□ Dubai Police launched a Dh 223,000 cybersecurity contest to attract ethical hackers. Registration opens on October 1, with online qualifiers running from October 5 until the end of the month. https://www.khaleejtimes.com/uae/dubai-police-launch-cybersecurity-competition

■■■■□ GhostSocks: From Initial Access to Residential Proxy. https://synthient.com/blog/ghostsocks-from-initial-access-to-residential-proxy

■■■□□ CVE-2025-32463: Another critical EoP in sudo has been discovered. https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-linux-sudo-flaw-exploited-in-attacks/