All posts in Uncategorized

 The ‘Miasma’ worm source code briefly leaked on GitHub The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. […] https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/

 SAP fixes critical flaws in NetWeaver and Commerce Cloud SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four critical-severity flaws affecting SAP NetWeaver and SAP Commerce Cloud. […] https://www.bleepingcomputer.com/news/security/sap-fixes-critical-flaws-in-netweaver-and-commerce-cloud/

Free research papers https://sci-bot.ru/

■■■□□ Driving into the Unknown: Investigating and Addressing Security Breaches in Vehicle Infotainment Systems. The website is geo locked and done regions are not allowed. https://www.mdpi.com/1424-8220/26/1/77

📻🇮🇷 Active.

■□□□□ OpenAI has begun rolling out a new Lockdown Mode to ChatGPT for eligible personal accounts to reduce the risk of data exfiltration arising from prompt injection attacks. https://thehackernews.com/2026/06/new-chatgpt-lockdown-mode-limits-tools.html

■■■■□ Russia: GRU University, Where Moscow Turns Students into Spies and Hackers. Welcome to the GRU University, Where Moscow Turns Students into Spies and Hackers

👩‍💻 Performing RCE in Internet Explorer via clickjacking! Credits: Igor Sak-Sakovsky’s (𝕏 | Psych0tr1a) https://swarm.ptsecurity.com/the-click-that-shouldnt-have-worked-rce-via-clickjacking-in-internet-explorer/

📡🛰 For 19 years, GPS satellites have secretly broadcast a “numbers station” in their public signals. We decoded 12M messages: a 2011 flash where 31 of 32 satellites flipped in hours, “ghost” substrings repeating years apart, and a “TEXT” prefix spreading now. https://lsc-pagepro.mydigitalpublication.com/publication/?i=865273&p=62&view=issueViewer https://github.com/sjmurdoch/gps-special-messages https://x.com/i/status/2061829547289387209

■■■□□ Lookalike Ghidra, dnSpy, and other download sites turned trusted clicks into TDS redirects. CPR found click hijacking, gated routing, and multiple malware families downstream — including an evasive, previously undocumented framework we call SessionGate. https://research.checkpoint.com/2026/impersonation-click-hijacking-and-tds-inside-a-malware-distribution-ecosystem/