All posts by John Doe

■■□□□ 🇮🇱 Google and Amazon are secretly notifying Israel whenever they hand over data to foreign governments – The Guardian Leaked documents reveal that Amazon and Google, under Israel’s Nimbus cloud contract, agreed to secretly notify Israel whenever they hand over data to foreign governments, even when gag orders prevent disclosure. They use a coded…

📱 Now in private beta: Aardvark, an agent that finds and fixes security bugs using GPT-5. https://openai.com/index/introducing-aardvark/

■■■■■ Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker. Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker

■■■□□ As per hacking group DieNet the DoS attack stats are as follows that took out https://u.ae Quoting threat actor verbatim: 🎯Target: https://u.ae ⏱Time: ♾ 💪 Power: 817,028 rps 11:04 – Response: 301 11:09 – Response: 301 11:14 – Response: Connection timed out 11:17 – Response: Connection timed out 11:22 – Response: Connection timed out

■■■■□ Proximity: Open-source MCP security scanner. Proximity is a new open-source tool that scans Model Context Protocol (MCP) servers. It identifies the prompts, tools, and resources that a server makes available, and it can evaluate how those elements might introduce security risks. The tool also work with NOVA, a rule engine that checks for issues…

■■■■□ New Phishing Attack Using Invisible Characters Hidden in Subject Line Using MIME Encoding. New Phishing Attack Using Invisible Characters Hidden in Subject Line Using MIME Encoding

■■■□□ CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware. CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware

■■■■□ Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks. Google researchers believe exploitation may have started as early as July 10 and the campaign hit dozens of organizations. https://www.securityweek.com/sophisticated-malware-deployed-in-oracle-ebs-zero-day-attacks/

🔺📱PoC Exploit Released For Nothing Phone Code Execution Vulnerability. 4️⃣https://github.com/R0rt1z2/fenrir PoC Exploit Released For Nothing Phone Code Execution Vulnerability

■■■□□ Critical GitHub Copilot Vulnerability Let Attackers Exfiltrate Source Code From Private Repos. Critical GitHub Copilot Vulnerability Let Attackers Exfiltrate Source Code From Private Repos