All posts by John Doe

■■■□□ Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization. Threat hunters have exposed the tactics of a China-aligned threat actor called UnsolicitedBooker, which targeted an unnamed international organization in Saudi Arabia with a previously undocumented backdoor dubbed MarsSnake. https://thehackernews.com/2025/05/chinese-hackers-deploy-marssnake.html

■■■■■ kASLR Internals and Evolution. https://r0keb.github.io/posts/kASLR-Internals-and-Evolution/

■■■■■ Bypassing kASLR via Cache Timing. https://r0keb.github.io/posts/Bypassing-kASLR-via-Cache-Timing/

■■■■□ Pwnable.tw, a wargame site for hackers to test and expand their binary exploiting skills. https://pwnable.tw/ ●The co-founder of this site just got OSEE. Thought of sharing.

■■■■■ Cache poisoning via race-condition in Next.js https://zhero-web-sec.github.io/research-and-things/eclipse-on-nextjs-conditioned-exploitation-of-an-intended-race-condition

■□□□□ A Silicon Valley VC Says He Got the IDF Starlink Access Within Days of October 7 Attack. Sequoia Capital partner Shaun Maguire said in a webinar hosted by Israel’s Defense Ministry that he connected the IDF with SpaceX’s Starlink satellite internet far sooner than believed. https://www.wired.com/story/shaun-maguire-starlink-idf-israel-gaza/

■■■■□ Computer scientists discover new security vulnerability in Intel processors. https://techxplore.com/news/2025-05-scientists-vulnerability-intel-processors.html

■■■□□ Stealing A Windows Password Is As Easy As APT 123. https://www.forbes.com/sites/daveywinder/2025/05/17/warning—stealing-windows-passwords-is-as-easy-as-apt-123/

■■■□□ Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn²Own. https://www.bleepingcomputer.com/news/security/hackers-exploit-vmware-esxi-microsoft-sharepoint-zero-days-at-pwn2own/

■□□□□ French domestic intelligence chief asked Telegram, CEO, to ban conservative voices in Romania ahead of elections: Durov [owner of Telegram].