All posts by John Doe

■■■■□ Fortinet disclosed a significant security flaw in its FortiOS operating system, identified as CVE-2025-24477. This heap-based buffer overflow vulnerability, classified under CWE-122, affects the cw_stad daemon and could enable an authenticated attacker to execute arbitrary code or commands through specially crafted requests. FortiOS Buffer Overflow Vulnerability Allows Attackers to Execute Arbitrary Code

■■■■□ Iran has hacked the Israeli-funded Iran International Telegram channel. 71,000 individuals who provided content from Iran have been identified Working with hostile networks is punishable by 25 years in prison in Iran.

■■■■■ Slides 📈 by Jun Kokatsu on AI hacking. The talk was presented at #shibuyaxss.

■■■■■ ⚠️ CVE-2025-5777 (CitrixBleed 2) – Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices. PoC: https://github.com/win3zz/CVE-2025-5777

■■■■□ Analysis: #Kimsuky mshta + VBScript ut_happy(x64).dll (VMProtect) #HappyDoor https://mp.weixin.qq.com/s/fDan8ihUQEAF5Kf_6fXATQ

■■■□□ Remote Work Job for OSINT. Pay: ~2️⃣🔠 USD💵 Employer: Stealth-Mole https://x.com/stealthmole_int/status/1942121033487798279

■■□□□ ChatGPT prompt that can help learn everything about a topic. https://www.techradar.com/computing/artificial-intelligence/i-tried-the-incredible-chatgpt-prompt-that-can-help-you-learn-everything-about-a-topic-and-its-a-game-changer

■□□□□ Google Ordered to Pay $314M for Misusing Android Users’ Cellular Data Without Permission. https://thehackernews.com/2025/07/google-ordered-to-pay-314m-for-misusing.html

4️⃣ Scanned all of GitHub’s “Oops Commits” for Leaked Secrets. https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets

■■■■■ United States: 29 North Korean laptop farms busted by U.S. Department of Justice — illicit IT workers across 16 states reportedly obtained employment with more than 100 U.S. companies to help fund regime. https://www.tomshardware.com/tech-industry/cyber-security/29-north-korean-laptop-farms-busted-by-u-s-department-of-justice-illicit-it-workers-across-16-states-reportedly-obtained-employment-with-more-than-100-u-s-companies-to-help-fund-regime