All posts by John Doe

■■■■□ Weaponized file name flaw makes updating glob an urgent job. https://www.theregister.com/2025/11/23/infosec_news_in_brief/

■■■■□ OSINT on social media accounts of Israelis allowed Palestinian army (Hamas) to get technical knowledge of Merkava 4 tanks of postal including a kill switch. An interesting thread: https://x.com/grok/status/1992604660516241461

■■■□□ ShinyHunters ‘does not like Salesforce at all,’ claims the crew accessed Gainsight 3 months ago. https://www.theregister.com/2025/11/21/shinyhunters_salesforce_gainsight_breach/

■■■■□ Study exposes how a large state-funded “Censorship Network” steers the online debate in Germany, endangering freedom of expression in Europe’s largest economy.

■■■■□ Brazilian Campaign: Spreading the Malware via WhatsApp. https://labs.k7computing.com/index.php/brazilian-campaign-spreading-the-malware-via-whatsapp/

■■■■□ Unkraine | Electronic Warfare: How Spoofing Is Diverting Russian Missiles Into Empty Fields. Allegedly 21 Kinzhal Hypersonic missiles have been diverted by Ukrainian forces upto 144 meters in one case. https://www.forbes.com/sites/davidhambling/2025/11/20/how-spoofing-is-diverting-russian-missiles-into-empty-fields/

🏷️ Critical Windows Graphics Vulnerability Lets Hackers Seize Control with a Single Image. Critical Windows Graphics Vulnerability Lets Hackers Seize Control with a Single Image

■■■■■ CVE-2025-41115: Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation. https://thehackernews.com/2025/11/grafana-patches-cvss-100-scim-flaw.html

■■■■■ Iran: Interesting thread on APT-35 (Charming Kitten’s) elaborate cyber-espionage and HUMINT operation. https://x.com/blackorbird/status/1992075483836744154

■□□□□ Veeam bets on more VMware alternatives, including Red Hat and China’s Sangfor Plans a universal API to back up all hypervisors, too. https://www.theregister.com/2025/11/21/veeam_13_hypervisor_support/