All posts by John Doe

■□□□□ Fortinet acquires Israeli cyber startup Suridata for tens of millions to boost SaaS protection. Suridata raised around $14 million and built an AI-powered platform to protect SaaS apps. https://www.calcalistech.com/ctechnews/article/r1i21132blx

■■□□□ United States / China: Chinese hackers breach US local governments using Cityworks zero-day. https://www.bleepingcomputer.com/news/security/chinese-hackers-breach-us-local-governments-using-cityworks-zero-day/

■■■□□ BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory. https://www.akamai.com/blog/security-research/abusing-dmsa-for-privilege-escalation-in-active-directory https://thehackernews.com/2025/05/critical-windows-server-2025-dmsa.html

■■□□□ Marks & Spencer said hackers broke into its systems by tricking employees at a third-party contractor, skirting its digital defences to launch a cyberattack. https://www.thehindu.com/sci-tech/technology/ms-says-cyber-hackers-broke-in-through-third-party-contractor/article69604614.ece

■■□□□ CVE-2025-4123 Grafana open redirect → XSS/SSRF via path traversal.

■■■■□□ OSINT: A race of speed and lies (in war context). https://m.economictimes.com/news/india/lies-now-open-sourced-india-pakistan-conflict-puts-spotlight-on-open-source-intelligence-and-credibility-problem/articleshow/121240828.cms

🍎CVE-2025-31200: Apple iPhone RCE by opening a video file. 🎞https://youtu.be/nTO3TRBW00E

■□□□□ Microsoft admits to the support of genocide via its cyber capability.

■■■□□ South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware. High-level government institutions in Sri Lanka, Bangladesh, and Pakistan have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder. https://www.acronis.com/en-us/cyber-protection-center/posts/from-banks-to-battalions-sidewinders-attacks-on-south-asias-public-sector/ https://thehackernews.com/2025/05/south-asian-ministries-hit-by.html

■■■■□ Full-Blown SSRF to Gain Access to Millions of Users’ Records and Multiple Internal Panels. https://medium.com/@skycer_00/full-blown-ssrf-to-gain-access-to-millions-of-users-records-and-multiple-internal-panels-3719d9b802e9