08/07

HTTP/1.1 Must Die

https://http1mustdie.com/
HTTP/1.1 Must Die

A Full-Chain Exploit of an Unfused Qualcomm Device

https://hhj4ck.github.io/qualcomm/2025/08/06/secboot-off-qcm2150.html
A Full-Chain Exploit of an Unfused Qualcomm Device

Air France and KLM disclose data breaches impacting customers

https://www.bleepingcomputer.com/news/security/air-france-and-klm-disclose-data-breaches-impacting-customers/
Air France and KLM disclose data breaches impacting customers

Microsoft warns of high-severity flaw in hybrid Exchange deployments

https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-high-severity-flaw-in-hybrid-exchange-deployments/
Microsoft warns of high-severity flaw in hybrid Exchange deployments

Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments | CISA

https://www.cisa.gov/news-events/alerts/2025/08/06/microsoft-releases-guidance-high-severity-vulnerability-cve-2025-53786-hybrid-exchange-deployments
Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments | CISA

Bouygues Telecom confirms data breach impacting 6.4 million customers

https://www.bleepingcomputer.com/news/security/bouygues-telecom-confirms-data-breach-impacting-64-million-customers/
Bouygues Telecom confirms data breach impacting 6.4 million customers

Akira ransomware abuses CPU tuning tool to disable Microsoft Defender

https://www.bleepingcomputer.com/news/security/akira-ransomware-abuses-cpu-tuning-tool-to-disable-microsoft-defender/
Akira ransomware abuses CPU tuning tool to disable Microsoft Defender

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

https://www.bleepingcomputer.com/news/security/sonicwall-finds-no-sslvpn-zero-day-links-ransomware-attacks-to-2024-flaw/
SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

An Introduction into Stack Spoofing

https://dtsec.us/2023-09-15-StackSpoofin/
An Introduction into Stack Spoofing

Microsoft accidentally confirms GPT-5, GPT-5-Mini, GPT-5-Nano ahead of launch

https://www.bleepingcomputer.com/news/artificial-intelligence/microsoft-accidentally-confirms-gpt-5-gpt-5-mini-gpt-5-nano-ahead-of-launch/
Microsoft accidentally confirms GPT-5, GPT-5-Mini, GPT-5-Nano ahead of launch

Wave of 150 crypto-draining extensions hits Firefox add-on store

https://www.bleepingcomputer.com/news/security/wave-of-150-crypto-draining-extensions-hits-firefox-add-on-store/
Wave of 150 crypto-draining extensions hits Firefox add-on store

Massive IPTV piracy service with 28,000 channels taken offline

https://www.bleepingcomputer.com/news/technology/massive-illegal-iptv-service-provider-rare-breed-tv-taken-offline/
Massive IPTV piracy service with 28,000 channels taken offline

Unmasking the SVG Threat: How Hackers Use Vector Graphics for Phishing Attacks

https://www.seqrite.com/blog/unmasking-the-svg-threat-how-hackers-use-vector-graphics-for-phishing-attacks/
Unmasking the SVG Threat: How Hackers Use Vector Graphics for Phishing Attacks

New Infection Chain and ConfuserEx-Based Obfuscation for DarkCloud Stealer

https://unit42.paloaltonetworks.com/new-darkcloud-stealer-infection-chain/
New Infection Chain and ConfuserEx-Based Obfuscation for DarkCloud Stealer

Cryptomixer founders pled guilty to laundering money for cybercriminals

https://www.bleepingcomputer.com/news/security/samourai-cryptomixer-founders-pled-guilty-to-laundering-money-for-cybercriminals/
Cryptomixer founders pled guilty to laundering money for cybercriminals

Buried in the Log. Exploiting a 20 years old NTFS Vulnerability – PT SWARM

https://swarm.ptsecurity.com/buried-in-the-log-exploiting-a-20-years-old-ntfs-vulnerability
Buried in the Log. Exploiting a 20 years old NTFS Vulnerability – PT SWARM

X

http://x.com/i/article/1952974714051174401
X

New Promptware Attack Hijacks User's Gemini AI Via Google Calendar Invite

https://hackread.com/promptware-attack-hijack-gemini-ai-google-calendar-invite/
New Promptware Attack Hijacks User's Gemini AI Via Google Calendar Invite

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

https://thehackernews.com/2025/08/malicious-go-npm-packages-deliver-cross.html
Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

New EDR killer tool used by eight different ransomware groups

https://www.bleepingcomputer.com/news/security/new-edr-killer-tool-used-by-eight-different-ransomware-groups/
New EDR killer tool used by eight different ransomware groups

PowerShell Script Minimizer

https://powershellforhackers.com/tools/psmini
PowerShell Script Minimizer