Taiwan's National Security Bureau warns against Chinese apps like TikTok, WeChat, and Rednote, citing excessive data collection and transfer to China as national security risks.

Splunk uncovers XWorm's evolution: a modular RAT now delivering LockBit ransomware. It uses flexible delivery, AMSI/ETW bypasses, and process injection to evade detection.

In today’s digital world, cyber threats don’t always hide behind complex codes or technical tricks. Often, they come through the front…

OpenCTI (Open Cyber Threat Intelligence) is an open-source platform designed to aggregate, manage, and visualize cyber threat intelligence in one unified system. Built by Filigran and originally…

https://jenkins96.github.io/2025-07-06-SillyPutty-Malware-Analysis/

Vladimir Tsakanyan

Find what belongs to you and get it back

Apa Itu Rootkit? Pengertian, Cara Kerja, dan Cara Mencegahnya — Rootkit adalah malware yang menyembunyikan aktivitas berbahaya di komputer…

A long, long time ago I was listening to the radio and the person being interviewed (I can’t recall who it was, it was REALLY a long time…

Dylan became Microsoft's youngest security researcher at 13, uncovering a Teams flaw that prompted a Bug Bounty program rule change. He's since submitted 20 reports.

Spanish authorities busted a €10M+ international crypto investment fraud ring, arresting 21 individuals in Barcelona, Madrid, and other cities, dismantling fake call centers.

Over 40 malicious Firefox extensions, disguised as crypto wallets, are stealing seed phrases and funds. Mozilla removed most, but users must verify developers and stay vigilant.

ANSSI exposes "Houken," a China-linked APT exploiting Ivanti CSA zero-days (CVE-2024-8190, CVE-2024-8963, CVE-2024-9380) and deploying Linux rootkits for cyber-espionage against strategic sectors.

DreamWalkers Reflective shellcode loader inspired by MemoryModule and Donut, with advanced call stack spoofing and .NET support. Unlike traditional call stack spoofing, which often fails within reflectively loaded modules due to missing unwind metadata, DreamWalkers…

A flaw (CVE-2025-48367, CVSS 7.0) in Redis HyperLogLog allows authenticated RCE via out-of-bounds writes. PoC available. Update to 8.0.3, 7.4.5, 7.2.10, or 6.2.19!

Redis discloses CVE-2025-48367 (CVSSv4 7.0), a DoS flaw where authenticated clients can misuse multi-bulk commands. No direct code fix is planned; reinforce access controls.

Apple's H2 2025 roadmap: iPhone 17 series (new Air model), Apple Watch Ultra 3 (5G/satellite), M5 Macs/iPads, and refreshed smart home devices, totaling over 15 new products.

🧩 Part 1: What is the DOM?

Hello hackers!
In this write-up, I’ll share a recent hunting experience on one of my old targets — a platform that had already accepted…