All posts by John Doe

■■■■□ Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying. ‘Only’ a local access bug but important part of N Korea, Russia, and China attack picture. https://www.theregister.com/2025/03/18/microsoft_trend_flaw/

■■■■□ Investigation into Israel-based spyware company Paragon Solutions reveals multiple threads linked to the proliferation of its mercenary spyware operations across the globe. Virtue or Vice? A First Look at Paragon’s Proliferating Spyware Operations

■■■■□ De-Classified: JFK Assassination Records – 2025 Documents Release. https://www.archives.gov/research/jfk/release-2025

■□□□□ Former FBI agent thought he had seen it all in cybercrime. Then he became a corporate executive in charge of information security. https://fortune.com/2025/03/11/former-fbi-agent-ciso-cybersecurity-kaseya/

■■□□□ New SuperBlack ransomware exploits Fortinet auth bypass flaws. https://www.bleepingcomputer.com/news/security/new-superblack-ransomware-exploits-fortinet-auth-bypass-flaws/

■□□□□ Privacy | United Kingdom 🇬🇧 Google refuses to deny it received encryption order from UK government. https://therecord.media/google-refuses-to-deny-it-received-uk-tcn

■■■□□ Chinese Hackers Sat Undetected in Small Massachusetts Power Utility for Months. State-sponsored Volt Typhoon hackers were poking around the Littleton Electric Light and Water Departments for at least 300 days before the FBI gave the utility a heads up. https://me.pcmag.com/en/security/28845/chinese-hackers-sat-undetected-in-small-massachusetts-power-utility-for-months

■■■■□ Critical PHP RCE vulnerability mass exploited in new attacks. https://www.bleepingcomputer.com/news/security/critical-php-rce-vulnerability-mass-exploited-in-new-attacks/

■■■■□ Cyberattack on X Hit Servers Faulted for Lacking Key Protection. A cyberattack that brought down Elon Musk’s X targeted servers that were insufficiently protected from malicious traffic, according to cybersecurity analysts. https://www.livemint.com/companies/news/cyberattack-on-x-hit-servers-faulted-for-lacking-key-protection-11741744077608.html

■■■□□ Malicious code on GitHub: How hackers target programmers. Kaspersky discovered over 200 repositories with fake projects on GitHub. Using them, attackers distribute stealers, clippers, and backdoors. https://www.kaspersky.com/blog/malicious-code-in-github/53085/