05/16

Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own

https://www.bleepingcomputer.com/news/security/hackers-exploit-vmware-esxi-microsoft-sharepoint-zero-days-at-pwn2own/
Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own

Jenkins Plugin Flaws Expose Critical Risks: CVE-2025-47889 Hits 9.8 CVSS with Auth Bypass

https://securityonline.info/jenkins-plugin-flaws-expose-critical-risks-cve-2025-47889-hits-9-8-cvss-with-impersonation-auth-bypass/
Jenkins Plugin Flaws Expose Critical Risks: CVE-2025-47889 Hits 9.8 CVSS with Auth Bypass

Ransomware gangs increasingly use Skitnet post-exploitation malware

https://www.bleepingcomputer.com/news/security/ransomware-gangs-increasingly-use-skitnet-post-exploitation-malware/
Ransomware gangs increasingly use Skitnet post-exploitation malware

Microsoft confirms May Windows 10 updates trigger BitLocker recovery

https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-may-windows-10-updates-trigger-bitlocker-recovery/
Microsoft confirms May Windows 10 updates trigger BitLocker recovery

How to escalate a SQL injection if there is a strict WAF? | by Deepak | May, 2025 | Medium

https://medium.com/@bug_vs_me/how-to-escalate-a-sql-injection-if-there-is-a-strict-waf-2a7798bb769e
How to escalate a SQL injection if there is a strict WAF? | by Deepak | May, 2025 | Medium

Israel arrests new suspect behind Nomad Bridge $190M crypto hack

https://www.bleepingcomputer.com/news/legal/israel-arrests-new-suspect-behind-nomad-bridge-190m-crypto-hack/
Israel arrests new suspect behind Nomad Bridge $190M crypto hack

Release DOMPurify 3.2.5 · cure53/DOMPurify · GitHub

https://github.com/cure53/DOMPurify/releases/tag/3.2.5
Release DOMPurify 3.2.5 · cure53/DOMPurify · GitHub

MalwareBazaar | 1po56mdxc-localto-net

https://bazaar.abuse.ch/browse/tag/1po56mdxc-localto-net/
MalwareBazaar | 1po56mdxc-localto-net

CISA tags recently patched Chrome bug as actively exploited

https://www.bleepingcomputer.com/news/security/cisa-tags-recently-patched-chrome-bug-as-actively-exploited-zero-day/
CISA tags recently patched Chrome bug as actively exploited

Jack Serrino

http://jackserrino.com/tcoshort
Jack Serrino

ChatGPT rolls out Codex, an AI tool for software programming

https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-rolls-out-codex-an-ai-tool-for-software-programming/
ChatGPT rolls out Codex, an AI tool for software programming

Printer maker Procolored offered malware-laced drivers for months

https://www.bleepingcomputer.com/news/security/printer-maker-procolored-offered-malware-laced-drivers-for-months/
Printer maker Procolored offered malware-laced drivers for months

New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors

https://thehackernews.com/2025/05/new-httpbot-botnet-launches-200.html
New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors

Graph Theory for Reverse Engineers | REMY HAX

https://remyhax.xyz/posts/graph-theory-for-reverse-engineers/
Graph Theory for Reverse Engineers | REMY HAX

US charges 12 more suspects linked to $230 million crypto theft

https://www.bleepingcomputer.com/news/security/us-charges-12-more-suspects-linked-to-230-million-crypto-theft/
US charges 12 more suspects linked to $230 million crypto theft

Windows 10 KB5058379 update triggers BitLocker recovery on some devices

https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5058379-update-triggering-bitlocker-recovery-after-install/
Windows 10 KB5058379 update triggers BitLocker recovery on some devices

Andrei Tarasov: Inside the Journey of a Russian Hacker on the FBI’s Most Wanted List - SecurityWeek

https://www.securityweek.com/andrei-tarasov-inside-the-journey-of-a-russian-hacker-on-the-fbis-most-wanted-list/
Andrei Tarasov: Inside the Journey of a Russian Hacker on the FBI’s Most Wanted List - SecurityWeek

Leak confirms OpenAI's ChatGPT will integrate MCP

https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openais-chatgpt-will-integrate-mcp/
Leak confirms OpenAI's ChatGPT will integrate MCP

GitHub - Adaptix-Framework/AdaptixC2

https://github.com/Adaptix-Framework/AdaptixC2
GitHub - Adaptix-Framework/AdaptixC2