All posts by John Doe

■■■□□ Second Wave of Attacks Hitting SAP NetWeaver After Zero-Day Compromise. Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability. https://www.securityweek.com/second-wave-of-attacks-hitting-sap-netweaver-after-zero-day-compromise/

■■■■■ BREAKING: Jew criminal spyware maker NSO Group must pay $167 million to WhatsApp for a hacking campaign in 2019 that targeted more than 1,400 chat app users. This is a huge win for WhatsApp. NSO says it will consider appealing. NSO Group must pay more than $167 million in damages to WhatsApp for spyware…

■□□□□ OSINT report by France24.

■■□□□ Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware. Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware

BLINDER: A self-hosted, web-based Blind XSS detection and management tool that delivers real-time notifications via Telegram bot. The program is under 300 lines of code. https://github.com/AamerShah/blinder

■■■■□ Confirmed — 19 Billion Compromised Passwords Published Online. https://www.forbes.com/sites/daveywinder/2025/05/05/new-warning—19-billion-compromised-passwords-create-hacking-arsenal/

■■■■■ TeleMessage, a modified Signal clone used by US government officials, has been hacked. TeleMessage, a modified Signal clone used by US government officials, has been hacked

■□□□□ GISEC – Dubai, a free cyber security event, will kick off from 6 – 9 May. https://gisec.ae/

■■□□□ Passive port scan without actually sending network traffic to the target using naabu, which uses sata from engines like shodan. echo hackerone.com naabu -passive

■■■■□ Iran 🇮🇷 | Lemon Sandstorm. An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East that lasted nearly two years. https://www.fortinet.com/blog/threat-research/fortiguard-incident-response-team-detects-intrusion-into-middle-east-critical-national-infrastructure PARISITE https://thehackernews.com/2024/08/us-agencies-warn-of-iranian-hacking.html https://thehackernews.com/2025/05/iranian-hackers-maintain-2-year-access.html