All posts by John Doe

■■□□□ Data-Leak: Colt changes tune, admits data theft as Warlock gang begins auction. https://www.theregister.com/2025/08/21/colt_warlock_auction/

■■■■□ Analysis of new infection chain delivering fileless VShell Backdoor via weaponised filenames https://www.trellix.com/blogs/research/the-silent-fileless-threat-of-vshell/

■■■■□ Mozilla High Severity Vulnerabilities Enables Remote Code Execution. https://cybersecuritynews.com/mozilla-high-severity-vulnerabilities/

■■■□□ Security researcher driven by free nuggets unearths McDonald’s security flaw — changing ‘login’ to ‘register’ in URL prompted site to issue plain text password for a new account. https://www.tomshardware.com/tech-industry/cyber-security/prompted-by-free-nuggets-security-researcher-uncovers-staggering-mcdonalds-internal-platform-vulnerability-changing-login-to-register-in-url-prompted-site-to-issue-plain-text-password-for-a-new-account

■■□□□ Data-Leak: 15.8 million PayPal accounts at risk after stolen passwords put up for sale. A hacker is selling what appears to be a file full of passwords for 15.8 million PayPal accounts. https://www.pcworld.com/article/2883726/15-8-million-paypal-accounts-at-risk-after-stolen-passwords-put-up-for-sale.html

■■■■□ Threat Actors Allegedly Listed Windows Zero-Day RCE Exploit For Sale on Dark Web. Threat Actors Allegedly Listed Windows Zero-Day RCE Exploit For Sale on Dark Web

■■■□□ Amazon Q Developer: Remote Code Execution with Prompt Injection. https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/

■■■□□ Chrome High-Severity Vulnerability Let Attackers Execute Arbitrary Code. Chrome High-Severity Vulnerability Let Attackers Execute Arbitrary Code

■■■□□ Citizen Lab Reports Hidden VPN Networks Sharing Ownership and Security Flaws. https://hackread.com/citizen-lab-vpn-networks-sharing-ownership-security-flaws/

■■■□□ Chrome VPN Extension With 100,000+ Installs Silently Captures Screenshots and Exfiltrates Sensitive Data. Chrome VPN Extension With 100,000+ Installs Silently Captures Screenshots and Exfiltrates Sensitive Data