Forwarded from The Hacker News
🚨 Hackers are using Microsoft’s ClickOnce to deploy stealth malware—no admin rights, no alerts.
Targeting energy, oil & gas, the “OneClik” campaign hides Go-based backdoors via fake sites + AWS. It evades detection, hijacks trusted Windows processes, and mimics Cobalt Strike.
Learn more → https://thehackernews.com/2025/06/oneclik-malware-targets-energy-sector.html
Targeting energy, oil & gas, the “OneClik” campaign hides Go-based backdoors via fake sites + AWS. It evades detection, hijacks trusted Windows processes, and mimics Cobalt Strike.
Learn more → https://thehackernews.com/2025/06/oneclik-malware-targets-energy-sector.html
Forwarded from The Hacker News
🚨 Hackers are scanning MOVEit servers again—big spike started May 27.
Over 300 suspicious IPs hit in one day. Old ransomware bugs are being tested again.
If you use MOVEit, now’s the time to patch and lock it down.
Full story → https://thehackernews.com/2025/06/moveit-transfer-faces-increased-threats.html
Over 300 suspicious IPs hit in one day. Old ransomware bugs are being tested again.
If you use MOVEit, now’s the time to patch and lock it down.
Full story → https://thehackernews.com/2025/06/moveit-transfer-faces-increased-threats.html
Forwarded from Android Security & Malware
Insecure Local Storage of Sensitive Payment and User Data on external storage by Airtel Android App (com.myairtelapp) (CVE-2025-5154)
https://github.com/honestcorrupt/-CVE-Proof-of-Concept-Airtel-Android-App-Insecure-Local-Storage-of-Sensitive-Data
https://github.com/honestcorrupt/-CVE-Proof-of-Concept-Airtel-Android-App-Insecure-Local-Storage-of-Sensitive-Data
GitHub
GitHub - honestcorrupt/-CVE-Proof-of-Concept-Airtel-Android-App-Insecure-Local-Storage-of-Sensitive-Data
Contribute to honestcorrupt/-CVE-Proof-of-Concept-Airtel-Android-App-Insecure-Local-Storage-of-Sensitive-Data development by creating an account on GitHub.
Forwarded from Android Security & Malware
How to debug binaries using GDB in Android within Termux
https://ad2001.com/blog/gdb-inside-device
https://ad2001.com/blog/gdb-inside-device
Ajin Deepak
A Quick and Dirty Way to Debug Inside Android with GDB
This covers a quick and dirty way to debug inside a rooted AVD using GDB + GEF.
Forwarded from Android Security & Malware
A Tale of Breaking Android Decompilers and Unpackers
https://ad2001.com/blog/The%20Tale%20of%20Breaking%20Android%20Decompilers
https://ad2001.com/blog/The%20Tale%20of%20Breaking%20Android%20Decompilers
Ajin Deepak
A Tale of Breaking Android Decompilers and Unpackers.
We will explore how popular RATS like spynote used to / still breaking decompilers and Unpackers.
Forwarded from Gizchina.com
Japan Bans Pixel Phones: Is This Just the Start for Google?
https://www.gizchina.com/2025/06/26/japan-bans-pixel-phones-is-this-just-the-start-for-google/
https://www.gizchina.com/2025/06/26/japan-bans-pixel-phones-is-this-just-the-start-for-google/
Forwarded from Gizchina.com
Microsoft Replaces Blue Screen of Death After 40 Years
https://www.gizchina.com/2025/06/27/microsoft-replaces-blue-screen-of-death-after-40-years/
https://www.gizchina.com/2025/06/27/microsoft-replaces-blue-screen-of-death-after-40-years/
Forwarded from Gizchina.com
Xiaomi Unveils Watch S4 41mm with AMOLED Display
https://www.gizchina.com/2025/06/27/xiaomi-unveils-watch-s4-41mm-with-amoled-display/
https://www.gizchina.com/2025/06/27/xiaomi-unveils-watch-s4-41mm-with-amoled-display/
Forwarded from #TBOT: Take Back Our Tech
Media is too big
VIEW IN TELEGRAM
⚡ How Much Data Are Apple & Google Really Collecting?
In my interview with 7Sees, we broke down just how much data Big Tech is harvesting from your phone—even when you're not using it.
A study out of Trinity College in Dublin found that across U.S. users, Apple collects about 12GB of data every 12 hours—that’s like 6 full-length movies. But Google? They collect 20 times that. Over 1 terabyte.
This isn’t just background activity—it’s a billion-dollar spy industry disguised as convenience.
📺 Full interview: Big Tech's Billion Dollar Spy Industry
—
🫶 @takebackourtech
📩 WEBSITE & NEWSLETTER | 🎥 VIDEOS| XMPP | SUBSTACK
In my interview with 7Sees, we broke down just how much data Big Tech is harvesting from your phone—even when you're not using it.
A study out of Trinity College in Dublin found that across U.S. users, Apple collects about 12GB of data every 12 hours—that’s like 6 full-length movies. But Google? They collect 20 times that. Over 1 terabyte.
This isn’t just background activity—it’s a billion-dollar spy industry disguised as convenience.
📺 Full interview: Big Tech's Billion Dollar Spy Industry
—
🫶 @takebackourtech
📩 WEBSITE & NEWSLETTER | 🎥 VIDEOS| XMPP | SUBSTACK
Forwarded from Hacker News
TechCrunch
As AI kills search traffic, Google launches Offerwall to boost publisher revenue | TechCrunch
Offerwall lets publishers give their sites' readers a variety of ways to access their content, including through options like micropayments, taking surveys, watching ads, and more.
Forwarded from Hacker News
til.andrew-quinn.me
Save your disk, write files directly into RAM with /dev/shm
Given my interest in extending the life of my SD cards and hard drives
as much as possible,
I’m surprised I haven’t come across /dev/shm before.
In a word
it’s a world-accessible RAM scratchpad, which seems baked right into POSIX,
so that virtually every…
as much as possible,
I’m surprised I haven’t come across /dev/shm before.
In a word
it’s a world-accessible RAM scratchpad, which seems baked right into POSIX,
so that virtually every…
Forwarded from The Hacker News
🚨 Chinese users targeted with fake WPS Office & DeepSeek sites—delivering Sainbox RAT + Hidden rootkit.
It’s the same group behind past fake Chrome installers.
Stealthy, low-effort, and still active.
Details → https://thehackernews.com/2025/06/chinese-group-silver-fox-uses-fake.html
It’s the same group behind past fake Chrome installers.
Stealthy, low-effort, and still active.
Details → https://thehackernews.com/2025/06/chinese-group-silver-fox-uses-fake.html
#A16 #Unofficial #TD #GSI #VoltageOS #AOSP
Build Date: 2025 06 26
June Security Patch
VoltageOS 5.0 | A16 TREBLE GSI UNOFFICIAL-signed
Changelog
Notes
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
Maintainer: Doze-off
Download: LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
Build Date: 2025 06 26
June Security Patch
VoltageOS 5.0 | A16 TREBLE GSI UNOFFICIAL-signed
Changelog
More features for Powerhub
VoltageOS is now usable
removed Securize option on trebleapp
Notes
Build RW
FOD/UDFS needs to be tested, I need feedback for this
No service on some devices, something strange happened to me, I just restarted the device and the service came back.
Use AppStore for GMS - LINK
Bugs? Report to my group with logs
Other bugs you may encounter will depend especially on your vendor/kernel
SCREENSHOTS - LINK
SUPPORT GROUP - LINK
Maintainer: Doze-off
Download: LINK
@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel
Forwarded from Tech & Leaks Zone
The Glyph Mirror
Get one for yourself here - https://nothing.tech/glyph-mirror
About the privacy concerns, Nothing notes:
Follow @TechLeaksZone
Get one for yourself here - https://nothing.tech/glyph-mirror
About the privacy concerns, Nothing notes:
When you upload your photo, we do not collect any personal data that could identify you. The photo itself is used solely for the glyph mirror and discarded once you exit this website.
Follow @TechLeaksZone