Researchers Warn Free VPN Apps on Google Play and App Stores Could Leak US Data to China
Source: https://hackread.com/researchers-warn-free-vpns-leak-us-data-to-china/
Ex-student charged over hacking university for cheap parking, data breaches
Source: https://www.bleepingcomputer.com/news/security/ex-student-charged-over-hacking-university-for-cheap-parking-data-breaches/
Scanning Beyond the Patch: A Public-Interest Hunt for Hidden Shells
Source: https://disclosing.observer/2025/06/14/patching-is-not-enough-persistent-backdoors-after-the-fix.html
As red teamers, we often explore how attackers manipulate system components to achieve persistence, evade detection, or alter behavior. The Windows Registry, a critical configuration database, is a prime target for such operations. In this article, I’ll share a C++ program that demonstrates registry manipulation, explain its mechanics, and discuss its implications in offensive security all while emphasizing ethical use in authorized penetration testing. Whether you’re a red teamer, blue teamer,
Researchers Find Way to Shut Down Cryptominer Campaigns Using Bad Shares and XMRogue
Source: https://thehackernews.com/2025/06/researchers-find-way-to-shut-down.html
Kali Linux 2025.1c Fixes Key Issue, Adds New Tools and Interface Updates
Source: https://hackread.com/kali-linux-2025-1c-fix-issue-adds-tools-interface-update/
China-Linked Salt Typhoon Targets Telecoms via Router Flaws, Warn FBI and Canada
Source: https://hackread.com/salt-typhoon-targets-telecoms-router-flaws-fbi-canada/
Model Context Protocol is quickly becoming the default way for LLMs to call out to tools and APIs—but from a security standpoint, it’s been a little hand-wavy. This post fixes that.
It shows how five OAuth specs—including dynamic client registration and protected resource metadata—combine to form a secure, auditable, standards-based auth flow for MCP.
UMBRELLA STAND is a sophisticated malware targeting FortiGate 100D series firewalls produced by Fortinet. It contains remote shell execution functionality, configurable beacon frequency, and AES-encrypted C2 communications. The malware uses fake TLS on port 443 to beacon to its C2 server and has the ability to run shell commands. It employs various defense evasion techniques such as hidden folders, generic filenames, and string encryption. UMBRELLA STAND also has persistence mechanisms through reboot hooking and ldpreload. Associated tooling includes BusyBox, nbtscan, tcpdump, and openLDAP. The malware demonstrates operational security considerations and shares similarities with previously reported COATHANGER malware.
RAWPA helps security researchers and penetration testers with hierarchical methodologies for testing.
**This is not a "get bugs quick scheme"**. I fully encourage manual scouring through JS files and playing around in burp, RAWPA is just like a guided to rejuvenate your thinking.
Interested ? Join the testers now
[https://forms.gle/guLyrwLWWjQW61BK9](https://forms.gle/guLyrwLWWjQW61BK9)
Read more about RAWPA on my blog: [https://kuwguap.github.io/](https://kuwguap.github.io/)
New Cyber Detection Method Uses Hackers’ Own Jitter Patterns Against Them
Source: https://hackread.com/cyber-detection-hackers-jitter-patterns-against-them/
