All posts by John Doe

■□□□□ A model that reconstructs any scene in 3D from a regular video, in real-time. one camera. no LiDAR. 10,000+ frames without falling apart. just walk around with your camera and watch the entire world get rebuilt in 3D at 20 fps. → runs at ~20 FPS on a single GPU → Stable over 10,000+…

■□□□□ An interesting 𝕏 thread: AWS users are in shock as the company shows them wildly inflated cost estimates running into billions of dollars per account. AWS has confirmed a global billing console bug as the cause. https://x.com/i/status/2078093372632301879

■■■■□ This is how macOS devs get compromised by opening a .docx (file opening a resume, opening a p.o. sow whatever) In short: > docx can have a remote template (feature to let it pull styles from an http server) > docx remote template runs VBA in your machine > this VBA can run an…

🔴Yet another website: privacyguides.org

💻😯Windows includes a file-system virtualization feature that can redirect one local path to another without modifying the original file or leaving a persistent filesystem artifact. It is implemented by bindflt.sys, the Bind Filter minifilter driver, and used legitimately by Store apps, Windows Sandbox, and Windows containers. https://www.bitdefender.com/en-us/blog/businessinsights/bind-link-abuses-windows-feature-edr-evasion-technique https://x.com/i/status/2078016406856282445

■■□□□ Vulnerabilities in Election system: Trump releases documents reportedly exposing election interference in U.S. https://www.whitehouse.gov/election-integrity/

■■■■□ Responsible disclosure report 2022-2025 – Oversecured found 176 vulnerabilities in Samsung preinstalled apps. https://github.com/oversecured/Samsung_Vulnerabilities

■■■■□ Graphene-OS allegedly compromised by Catalonian police via custom malware. An interesting thread: https://discuss.grapheneos.org/d/23823-security-breach-by-catalan-police https://www.mobil.se/nyheter/pixel-telefoner-vacker-brottsmisstankar/1639898

■■□□□ Exploitation speed has reached record highs, with the window between CVE announcement and attack shrinking from months to mere hours. Attackers are now reverse-engineering repositories to exploit vulnerabilities before they are even public, while AI agents are discovering and exploiting zero-days in a continuous loop.

■□□□□ Data-Leak: 🇵🇰 Alleged Askari Bank Customer Database Advertised on Underground Forum, Breached. A threat actor is claiming to be selling an alleged Askari Bank customer database containing approximately 40,000 records. According to the forum post, the dataset reportedly includes: * Bank name * Branch name * CNIC / National ID * Customer names *…