All posts by John Doe

■■■□□ 🇷🇺 Federal Security Service allegedly targeted in agent database leak A threat actor on an underground forum is claiming to leak databases allegedly tied to Russia’s Federal Security Service, also known as the FSB. The actor claims the post includes sample records and download access for alleged agent-related database content. 𝗪𝗵𝗮𝘁’𝘀 𝗮𝗹𝗹𝗲𝗴𝗲𝗱𝗹𝘆 𝗲𝘅𝗽𝗼𝘀𝗲𝗱: •…

⬡ OSIRIS: An Open Source Intelligence & Reconnaissance Integrated System. A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. https://github.com/simplifaisoul/osiris

■■■■■ Compromising Telecom Systems: Deploying and Detecting the BPFDoor Backdoor. Chinese Backdoor for Telecom Systems The Chinese have been using a backdoor to maintain persistence across telecom systems. The backdoor attaches itself to a raw network socket and inspects incoming traffic. It sees packets before firewall rules have a chance to process them. So even…

■■■■□ Threat Intelligence Report: ZionSiphon OT Malware First. https://dti.domaintools.com/research/threat-intelligence-report-zionsiphon

■■■■□ System Notification Abuse: How Attackers Force Microsoft to Send Phishing Emails. Attackers exploit Microsoft Entra ID to inject malicious messages into legitimate system emails, bypassing authentication and deceiving users.

■■■■□ Interesting Thread 🧵 Rare access to demo system developed by the Ministry of Public Security in China for the prefecture of Zhangjiakou, to track and surveil foreigners & residents. https://x.com/i/status/2056745373712925074

■■■■□ ProjectDiscovery; Triage: automatically reproduces and validates complex vulnerabilities reported on HackerOne, Bugcrowd, and Claude Code. An interesting thread 🧵 https://x.com/i/status/2056769663733027244

🤖 🆒🆒🆒🆒🆒🆒 Earlier today Cloudflare’s CSO shared how they tested Anthropic Mythos using an unreleased 8-stage vulnerability-discovery agent. Opus implemented the agent and it works via Claude SDK with a Pro or Max subscription, no API. https://github.com/evilsocket/audit 𝕏 | Simone

■■■■□ MasterDnsVPN is a scientific and research-oriented project for carrying TCP traffic through DNS queries and responses. In broad goal, it is similar to projects such as DNSTT or SlipStream, but it follows a fundamentally different structure and implementation approach. This system is designed around compatibility with many resolver behaviors and harsh network conditions, with…

■□□□□ Leaked US cable wrt. Pakistan and formed PM Imran Khan. https://x.com/i/status/2056088593047629986