All posts in Uncategorized

👩‍💻 📱 CVE-2025-54136 – MCPoison Cursor IDE: Persistent Code Execution via MCP Trust Bypass. https://research.checkpoint.com/2025/cursor-vulnerability-mcpoison/

■■■■□ .NET Bounty Program now offers up to $40,000 in awards. https://github.com/dotnet/announcements/issues/365

■■■□□ Microsoft increases Zero Day Quest prize pool to $5 million. https://www.bleepingcomputer.com/news/microsoft/microsoft-announces-5-million-prize-pool-for-zero-day-quest-hacking-contest/

■□□□□ World’s largest chipmaker, TSMC, says it has discovered potential trade secret leaks. https://www.cnbc.com/2025/08/05/chipmaker-tsmc-says-it-has-discovered-potential-trade-secret-leaks.html

● Yet another website: meawfy.com [Mega.nz search]

■■■□□ Google says its AI-based bug hunter found 20 security vulnerabilities. techcrunch.com/2025/08/04/google-says-its-ai-based-bug-hunter-found-20-security-vulnerabilities/

■■■■■ 🚫 This was most crucial point in India – Pak war game where almost none focused on how Pakistan managed to pull off decrypting radio communications between Indian Rafale and their C&C. As per a source; and thereby current working theory: Rafales were forced off encrypted comms, making them fallback to VHF/UHF links. This…

■■■■□ Cyber-War: Ukraine says it stole intel from the Russian Navy and found weak points in its newest nuclear missile submarine. Specialists working for Ukraine’s military intelligence agency, the HUR, breached the Russian Navy and obtained internal documents concerning the new Project 955A Borei-class submarine Knyaz Pozharsky, which entered service less than two weeks ago.…

■■■■□  Proton fixes Authenticator bug leaking TOTP secrets in logs. Proton fixed a bug in its new Authenticator app for iOS that logged users’ sensitive TOTP secrets in plaintext, potentially exposing multi-factor authentication codes if the logs were shared. https://www.bleepingcomputer.com/news/security/proton-fixes-authenticator-bug-leaking-totp-secrets-in-logs/

■■■□□ Hackers Can Manipulate BitLocker Registry Keys Via WMI to Execute Malicious Code as Interactive User. Hackers Can Manipulate BitLocker Registry Keys Via WMI to Execute Malicious Code as Interactive User