All posts by John Doe

■■■□□ 35 jailbreak techniques for Bypassing Guard-Rail: Summon a demon and bind it: A grounded theory of LLM red teaming. https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0314658 LLM red teamers: People are hacking AI chatbots just for fun and now researchers have catalogued 35 “jailbreak” techniques

■■■■□ EDR Evasion: A New Technique Using Hardware Breakpoints. https://cymulate.com/blog/blindside-a-new-technique-for-edr-evasion-with-hardware-breakpoints/

■■■■□ Havoc C2 with AV/EDR Bypass Methods in 2024 (Part 1). https://medium.com/@sam.rothlisberger/havoc-c2-with-av-edr-bypass-methods-in-2024-part-1-733d423fc67b

■■■□□ Deploy Hidden Virtual Machine For VMProtections Evasion and Dynamic Analysis. https://r0ttenbeef.github.io/Deploy-Hidden-Virtual-Machine-For-VMProtections-Evasion-And-Dynamic-Analysis/

■■□□□ Kimsuky #APT exploited #BlueKeep #RDP flaw in attacks against South Korea and Japan. Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and Japan

■■■□□ Cookie-Bite Attack Lets Hacker Bypass MFA & Maintain Access to Cloud Servers. New Cookie-Bite Attack Let Hackers Bypass MFA & Maintain Access to Cloud Servers

■■■■□ SuperCard X Android Malware Enables Contactless ATM and PoS Fraud via NFC Relay Attacks. SuperCard X Android Malware A new Android malware-as-a-service (MaaS) platform named SuperCard X can facilitate near-field communication (NFC) relay attacks, enabling cybercriminals to conduct fraud cashouts. https://thehackernews.com/2025/04/supercard-x-android-malware-enables.html

■■□□□ LDAP Injection 💉 Dependency Injector. Covers why it’s crucial for clean code, with Python examples before Go. 🎞 https://youtu.be/BhLpqRev80s

■■■■□  Active! Mail RCE flaw exploited in attacks on Japanese orgs. An Active! Mail zero-day remote code execution vulnerability is actively exploited in attacks on large organizations in Japan. https://www.bleepingcomputer.com/news/security/active-mail-rce-flaw-exploited-in-attacks-on-japanese-orgs/

■■□□□ New Malware Targets Docker — but it’s not about crypto mining anymore. Hackers are hijacking Docker to run fake nodes on a Web3 network called Teneo. Instead of mining, they farm TENEO tokens by sending fake heartbeat signals. 🔹 325+ downloads from Docker Hub https://thehackernews.com/2025/04/docker-malware-exploits-teneo-web3-node.html