All posts by John Doe

■■■■■ Whisper-Leak: An LLM side channel attack targeting stream ciphers esp. AES-GCM due to inappropriate configuration set. An interesting thread. https://www.linkedin.com/posts/yo-yo-yo-jbo_so-ever-since-january-this-year-geoff-mcdonald-activity-7392616866504007681-Z0PS

■■■■■ ThreatsLandfall Android Spyware Targeted Samsung Phones via Zero-Day. Threat actors exploited CVE-2025-21042 to deliver malware via specially crafted images to users in the Middle East. https://www.securityweek.com/landfall-android-spyware-targeted-samsung-phones-via-zero-day/

■■■□□ “Louvre.” was the password of CCTV cameras of the Louvre, Paris. https://www.snopes.com/news/2025/11/07/louvre-security-password/ https://edition.cnn.com/2025/11/06/europe/louvre-password-cctv-security-intl

■■■■■ Zero-Day: reviously unknown Landfall spyware used in 0-day attacks on Samsung phones ‘Precision espionage campaign’ began months before the flaw was fixed. https://www.theregister.com/2025/11/07/landfall_spyware_samsung_0days/

■■□□□ Washington Post says it is among victims of cyber breach tied to Oracle software. https://www.reuters.com/business/media-telecom/washington-post-says-it-is-among-victims-cyber-breach-tied-oracle-software-2025-11-06/

■■■■□ Oddest ChatGPT leaks yet: Cringey chat logs found in Google analytics tool. ChatGPT leaks seem to confirm OpenAI scrapes Google, expert says. https://arstechnica.com/tech-policy/2025/11/oddest-chatgpt-leaks-yet-cringey-chat-logs-found-in-google-analytics-tool/

■■■■■ 🛸 Hijacking a DJI drone with $400 of equipment: Reverse-engineering the enhanced Wi-Fi link. https://it4sec.substack.com/p/hijacking-a-dji-drone-with-400-of

💻 Zero-Day MSR Kernel Exploit for Windows 11 25H2. Juan Sacco https://www.exploitpack.com/blogs/news/0-day-msr-kernel-exploit-for-windows-11-25h2

■■■■□ Interesting thread on Printer UI access via default creds to AD in a single day. https://www.linkedin.com/posts/activity-7383481638409728000-Hqcb

■■■□□ The Crimson Collective, a hacker group, successfully breached Red Hat’s consulting GitLab, exfiltrating approximately 570GB of data from 28,000 repositories. This incident impacted around 800 customers, including prominent organizations such as IBM, Siemens, Verizon, and the NSA. Red Hat has confirmed the isolation of the compromised system and asserts the security of its core…