All posts by John Doe

■■□□□ News circulating online. Cloudflare just blocked the largest DDOS attack of all time at 11.5 Tbps. The attack was a UDP flood that came from Google Cloud.

🖼The One-Man APT, Part I: A Picture That Can Execute Code on the Target. The One-Man APT, Part I: A Picture That Can Execute Code on the Target

■■■□□ QNAP Vulnerability Let Attackers Bypass Authentication and Access Unauthorized Files. QNAP Vulnerability Let Attackers Bypass Authentication and Access Unauthorized Files

■■■□□ Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution. https://thehackernews.com/2025/08/researchers-warn-of-sitecore-exploit.html

■■■■□ Hardware disassembly of Starlink 🇪🇺 based drone. An investing thread on 𝕏. https://x.com/FPGAX_/status/1962179402076410322

■■■■□ Bug-Hunting 101: Sensitive Endpoint Wordlist for Bug Hunting Uncover Hidden Flaws: A Powerful Wordlist for Bug Bounty Success. https://infosecwriteups.com/sensitive-endpoint-wordlist-for-bug-hunting-1acb50034629

■■■■□ Satellite 🛰 Hacking: How to Hack a Vulnerable Satellite: PWNSAT Project. How to Hack a Vulnerable Satellite: PWNSAT Project

■■■□□ Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign. An abandoned update server associated with input method editor (IME) software Sogou Zhuyin was leveraged by threat actors as part of an espionage campaign to deliver several malware families, including C6DOOR and GTELAM, in attacks primarily targeting users across Eastern Asia. https://thehackernews.com/2025/08/abandoned-sogou-zhuyin-update-server.html

■□□□□ India: New ‘Sindoor Dropper’ Malware Targets Linux Systems with Weaponized .desktop Files. New ‘Sindoor Dropper’ Malware Targets Linux Systems with Weaponized .desktop Files

■■■■■ Bypassing HTTPS by installing custom CA by a malicious app (branded as a VPN) made by Jews of Unit-8200 calling it Onavo. This app was banned by Apple for privacy breaches. However, the Jews ✡️ used Apple’s other technical loophole to bypass this restriction with more advanced hookings. This Onavo app was used by…