All posts in Uncategorized

■■■■■ Zero-Day: reviously unknown Landfall spyware used in 0-day attacks on Samsung phones ‘Precision espionage campaign’ began months before the flaw was fixed. https://www.theregister.com/2025/11/07/landfall_spyware_samsung_0days/

■■□□□ Washington Post says it is among victims of cyber breach tied to Oracle software. https://www.reuters.com/business/media-telecom/washington-post-says-it-is-among-victims-cyber-breach-tied-oracle-software-2025-11-06/

■■■■□ Oddest ChatGPT leaks yet: Cringey chat logs found in Google analytics tool. ChatGPT leaks seem to confirm OpenAI scrapes Google, expert says. https://arstechnica.com/tech-policy/2025/11/oddest-chatgpt-leaks-yet-cringey-chat-logs-found-in-google-analytics-tool/

■■■■■ 🛸 Hijacking a DJI drone with $400 of equipment: Reverse-engineering the enhanced Wi-Fi link. https://it4sec.substack.com/p/hijacking-a-dji-drone-with-400-of

💻 Zero-Day MSR Kernel Exploit for Windows 11 25H2. Juan Sacco https://www.exploitpack.com/blogs/news/0-day-msr-kernel-exploit-for-windows-11-25h2

■■■■□ Interesting thread on Printer UI access via default creds to AD in a single day. https://www.linkedin.com/posts/activity-7383481638409728000-Hqcb

■■■□□ The Crimson Collective, a hacker group, successfully breached Red Hat’s consulting GitLab, exfiltrating approximately 570GB of data from 28,000 repositories. This incident impacted around 800 customers, including prominent organizations such as IBM, Siemens, Verizon, and the NSA. Red Hat has confirmed the isolation of the compromised system and asserts the security of its core…

■■■■■ Weaponizing Trust: ClickOnce Deployment with AppDomainManager Injection. Weaponizing Trust: ClickOnce Deployment with AppDomainManager Injection

■■□□□ New Linux Singularity Rootkit using Sophisticated Technique to Evade Elastic EDR Detection. New Linux Singularity Rootkit using Sophisticated Technique to Evade Elastic EDR Detection

■■□□□ Jail for hackers tasked to probe ‘sites of interest’; laptops had info linked to foreign governments. https://www.straitstimes.com/singapore/courts-crime/jail-for-hackers-tasked-to-probe-sites-of-interest-laptops-had-info-linked-to-foreign-governments