All posts by John Doe

■□□□□ UAE 🇦🇪 based state sponsored CTF competition. https://bbv.ctf.ae/

■■■■□ Zeroday: Metasploit Module Released For Actively Exploited SharePoint 0-Day Vulnerabilities. Metasploit Module Released For Actively Exploited SharePoint 0-Day Vulnerabilities

■■■■□ LAMEHUG: First Known LLM-Powered Malware From APT28 Hackers Integrates AI Capabilities into Attack Methodology. First Known LLM-Powered Malware From APT28 Hackers Integrates AI Capabilities into Attack Methodology

👾 Math.random() is predictable. CVE-2025-7783: Critical Vulnerability in JavaScript Library Exposes Millions of Apps to Code Execution Attacks. Critical Vulnerability in JavaScript Library Exposes Millions of Apps to Code Execution Attacks https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4

■■■□□ Hacker group DieNet allegedly causes disruptions in Twitter (𝕏) and Star-Link as recorded by down detector. 👤 We could not verify the claim.

■■■■□ Chrome High-Severity Vulnerabilities Allow Attackers to Execute Arbitrary Code. Chrome High-Severity Vulnerabilities Allow Attackers to Execute Arbitrary Code

■■■■■ CVE-2025-53771: SharePoint vulnerability with 9.8 severity rating under exploit across the globe. Ongoing attacks are allowing hackers to steal credentials, giving privileged access. https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/

■■□□□ Microsoft’s Secure Boot UEFI bootloader signing key expires in September, posing problems for Linux users. https://www.tomshardware.com/tech-industry/cyber-security/microsoft-signing-key-required-for-secure-boot-uefi-bootloader-expires-in-september-which-could-be-problematic-for-linux-users

■■■■■ Four new Android spyware samples linked to Iran’s intel agency. Persians added snooping capabilities to DCHSpy after Israeli bombs fell. https://www.theregister.com/2025/07/21/muddywaters_android_iran/

■■■■■ A Novel Technique for SQL Injection in PDO’s Prepared Statements. A Novel Technique for SQL Injection in PDO’s Prepared Statements