Hardware Security Exploit Research – Xbox 360
Article, Comments

Samsung Galaxy Tab S10 FE spotted with dual batteries on BIS certification
https://www.gizchina.com/2024/12/20/galaxy-tab-s10-fe-bis-certification-dual-batteries/

Samsung Fires Employees After Galaxy S25 Leak
https://www.gizchina.com/2024/12/20/samsung-fires-employees-after-galaxy-s25-leak/

Vivo Pad 4 Pro: What to Expect from Vivo’s Next-Gen Tablet
https://www.gizchina.com/2024/12/20/vivo-pad-4-pro-what-to-expect-from-vivos-next-gen-tablet/

Google’s New AI Feature Aims to Make Chrome Safer
https://www.gizchina.com/2024/12/20/googles-new-ai-feature-aims-to-make-chrome-safer/

DOOGEE Unveils S200X: Innovative technology to reshape the future smart experience
https://www.gizchina.com/2024/12/20/doogee-s200x-smartphone-launch/

🚨 CISA warns of an actively exploited critical flaw (CVE-2024-12356, CVSS: 9.8) in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) products.

Attackers can exploit this flaw to run arbitrary commands—no authentication required.

Read: https://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html

🛑 Attackers are exploiting Fortinet's CVE-2023-48788 (CVSS 9.3) to install remote desktop tools like AnyDesk and ScreenConnect.

They’ve already targeted companies across 12 countries, leveraging:

» SQL injection for unauthorized access
» Password recovery tools like Mimikatz
» PowerShell scripts for persistence

Don’t just patch vulnerabilities—assume attackers are already inside.

Find details here: https://thehackernews.com/2024/12/hackers-exploiting-critical-fortinet.html

🔔 Alert: Two critical vulnerabilities in Sophos Firewalls could grant attackers remote code execution and privileged access.

🔧 Action Plan:
✔️ Update to v21 MR1 or newer.
✔️ Restrict SSH access immediately.
✔️ Ensure user portals are not WAN-exposed.

🔗 Full advisory here: https://thehackernews.com/2024/12/sophos-fixes-3-critical-firewall-flaws.html

The notorious Lazarus Group is targeting nuclear engineers using trojanized VNC tools disguised as job assessments for aerospace roles.

They’ve introduced a new modular malware—CookiePlus—capable of evading top-tier detection systems.

🔗 Explore the full story here: https://thehackernews.com/2024/12/lazarus-group-spotted-targeting-nuclear.html

Here's a Quick Guide to Viewing SSH Logs on Linux. Troubleshooting and Monitoring SSH Access should be easy now!

https://linuxhandbook.com/view-ssh-logs/

Global Icon Pack

An Xposed module for applying icon packs globally. Some launchers support icon packs. However the icons are usually not consistent across the whole system.

🔗 Links:
- Downloads: GitHub
- Screenshots
- HowToSetup
- Source code
- Developer: RichardLuo0

🏷 Tags: #android #root #xposed

⚡️⚡️ TELEGRAM CENSORSHIP? MASSIVE SHADOW BAN ON DOZENS OF CHANNELS

Telegram seems to unprecedentedly limit the growth of some political and news channels, following Meta’s path—yet few noticed.

WHAT’S HAPPENING:
The "similar channels" feature has been disabled for many channels, cutting off a key source of new subscribers. Some shadowbanned channels are also missing from search results. Check if your channel is affected.

REASON:
A BBC article and "study" claim Telegram promotes "extremist content, such as anti-government conspiracies, antisemitism, or white nationalism" through "similar channels." Also, Telegram CEO Pavel Durov, under judicial supervision in France, may also face pressure to impose censorship.

ACTION REQUIRED NOW:
Demand answers from Telegram. The support team remains silent, but you can raise concerns on Telegram’s bug forum. Let’s stop Telegram from becoming another Meta.

Share this message to help preserve Telegram as a free speech platform.

📸 Google Photos is getting ready to roll out its new ‘Quick Edit’ sharing feature

The 'Quick Edit' page will appear before you share a photo, and it'll let you quickly 'enhance' or crop it before sharing.

Details + screenshots can be found in this article.

Ghost artists on Spotify
Article, Comments

Exploiting McDonald's APIs to hijack deliveries and order food for a penny
Article, Comments

The era of open voice assistants has arrived
Article, Comments

Show HN: Gribstream.com – Historical Weather Forecast API
Article, Comments

ByteDance's Recommendation System
Article, Comments