All posts by John Doe

■■□□□ Over 49,000 misconfigured building access systems exposed online. https://www.bleepingcomputer.com/news/security/over-49-000-misconfigured-building-access-systems-exposed-online/

■■■■□ Thousands of exposed GitHub repositories, now private, can still be accessed through Copilot. Source: TechCrunch https://search.app/op1T

■■■□□ New sensitive breach: Spyware service Spyzie had almost 519K email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 48% were already in haveibeenpwned. Spyzie stalkerware is spying on thousands of Android and iPhone users

■□□□□ United States 🇺🇸 government handle actively employing misinformation campaigns through social media | 𝕏 https://x.com/JudiciaryGOP/status/1895211719255040092

■□□□□ United Kingdom 🇬🇧 Home Office’s new vulnerability reporting mechanism leaves researchers open to prosecution Individuals in the United Kingdom who report cybersecurity vulnerabilities to the Home Office are at risk of facing prosecution for the simple act of discovering those vulnerabilities — even if they comply with new guidance the government department published on…

■■■■■ Reverse-engineering an encrypted IoT protocol. https://smlx.dev/posts/goodwe-sems-protocol-teardown/

■■■■□ AI HTTP Analyzer 💻 https://portswigger.net/bappstore/36cb140ac1a6449bbab1bafc18df8cfa

🖼 Concealing Payloads : Hiding Shellcode in Image Files with Python and C/C++ https://wafflesexploits.github.io/posts/Hide_a_Payload_in_Plain_Sight_Embedding_Shellcode_in_a_Image_file/

🎁 Hiding Shellcode in Image Files with Python and C/C++ https://github.com/WafflesExploits/hide-payload-in-images

■■■□□ United States 🇺🇸 House Judiciary Committee subpoenas Alphabet, Amazon, Apple, Meta, Microsoft, Rumble, TikTok, and X over “foreign censorship” of American speech.