November 8, 2025 at 3:17 AM
Oracle is using very specific words to avoid responsibility for an Oracle Cloud breach, after a report on March 21 that a threat actor claimed responsibility (Kevin Beaumont/DoublePulsar)
Main Link | Techmeme Permalink
Main Link | Techmeme Permalink
March 31, 2025 at 2:05 PM
Oracle is using very specific words to avoid responsibility for an Oracle Cloud breach, after a report on March 21 that a threat actor claimed responsibility (Kevin Beaumont/DoublePulsar)
Main Link | Techmeme Permalink
Main Link | Techmeme Permalink
I sent Kevin Beaumont's DoublePulsar piece to a friend with a background in computer engineering. Now, it must be said that he's an 'Apple guy' & has been for decades, but he laughed & laughed (darkly).
"Microsoft... wants to make 2025 the year of Linux on the Desktop"
- pretty much what he said. 🤔
"Microsoft... wants to make 2025 the year of Linux on the Desktop"
- pretty much what he said. 🤔
June 5, 2024 at 9:50 AM
I sent Kevin Beaumont's DoublePulsar piece to a friend with a background in computer engineering. Now, it must be said that he's an 'Apple guy' & has been for decades, but he laughed & laughed (darkly).
"Microsoft... wants to make 2025 the year of Linux on the Desktop"
- pretty much what he said. 🤔
"Microsoft... wants to make 2025 the year of Linux on the Desktop"
- pretty much what he said. 🤔
A trojanized ad-tech script quietly swapped visitors' crypto wallet addresses in real time. https://intel.threadlinqs.com/threat/TL-2026-2656 #ThreatIntel #DoublePulsar #Adform #SupplyChainAttack
September 26, 2026 at 12:54 PM
A trojanized ad-tech script quietly swapped visitors' crypto wallet addresses in real time. https://intel.threadlinqs.com/threat/TL-2026-2656 #ThreatIntel #DoublePulsar #Adform #SupplyChainAttack
for those who don't know: EternalBlue, EternalRomance, and DoublePulsar are some of the leaked NSA exploits behind Not_Petya and WannaCry attacks. Eternal exploits make use of the vulnerabilities in Microsoft's SMB protocol.
October 16, 2025 at 9:00 PM
for those who don't know: EternalBlue, EternalRomance, and DoublePulsar are some of the leaked NSA exploits behind Not_Petya and WannaCry attacks. Eternal exploits make use of the vulnerabilities in Microsoft's SMB protocol.
Microsoft has improved Recall, but biometrics are only required for setup and users can open it with just a PIN, and sensitive data filtering is unreliable (Kevin Beaumont/DoublePulsar)
Main Link | Techmeme Permalink
Main Link | Techmeme Permalink
April 21, 2025 at 10:01 PM
Microsoft has improved Recall, but biometrics are only required for setup and users can open it with just a PIN, and sensitive data filtering is unreliable (Kevin Beaumont/DoublePulsar)
Main Link | Techmeme Permalink
Main Link | Techmeme Permalink
Oracle CloudのSSOログインサーバへの侵害で新報道 「Oracleが隠蔽を図った」と主張
https://www.itmedia.co.jp/enterprise/articles/2504/03/news072.html
https://www.itmedia.co.jp/enterprise/articles/2504/03/news072.html
Oracle CloudのSSOログインサーバへの侵害で新報道 「Oracleが隠蔽を図った」と主張
Oracle CloudのSSOログインサーバへの侵害を巡る一連の問題で、新たな報道があった。セキュリティニュースメディアの「DoublePulsar」はOracleがセキュリティインシデントを顧客に対して隠蔽しようとしていると報じた。
www.itmedia.co.jp
April 4, 2025 at 3:42 AM
Oracle CloudのSSOログインサーバへの侵害で新報道 「Oracleが隠蔽を図った」と主張
https://www.itmedia.co.jp/enterprise/articles/2504/03/news072.html
https://www.itmedia.co.jp/enterprise/articles/2504/03/news072.html
Kevin Beaumont asks: who was running React Server Components already? medium.com/doublepulsar...
Cybersecurity industry overreacts to React vulnerability, starts panic, burns own house down again
Panic In The Niche Vulnerability
medium.com
December 5, 2025 at 11:08 PM
Kevin Beaumont asks: who was running React Server Components already? medium.com/doublepulsar...
“How the new Microsoft Recall feature fundamentally undermines Windows security | by Kevin Beaumont | May, 2024 | DoublePulsar”
doublepulsar.com/how-the-new-...
doublepulsar.com/how-the-new-...
How the new Microsoft Recall feature fundamentally undermines Windows security
Microsoft ship a feature taking constant screenshots of PCs by design.
doublepulsar.com
May 24, 2024 at 10:51 AM
“How the new Microsoft Recall feature fundamentally undermines Windows security | by Kevin Beaumont | May, 2024 | DoublePulsar”
doublepulsar.com/how-the-new-...
doublepulsar.com/how-the-new-...
Copilot+ Recall은 2줄의 코드만으로 윈도우의 모든 입력과 보고 있는 것을 훔치는게 가능 | GeekNews bit.ly/3yCRCAs
Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. | by Kevin Beaumont | Jun, 2024 | DoublePulsar bit.ly/4ej26FN
Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. | by Kevin Beaumont | Jun, 2024 | DoublePulsar bit.ly/4ej26FN
Copilot+ Recall은 2줄의 코드만으로 윈도우의 모든 입력과 보고 있는 것을 훔치 | GeekNews
Copilot+ Recall: Microsoft Windows 11의 새로운 기능으로, 사용자의 PC 화면을 지속적으로 캡처하여 모든 활동을 검색 가능한 데이터베이스로 만듦.사용자가 이전에 본 모든 내용을 쉽게 검색할 수 있게 함.대부분의 사용자들이 이 기능에 대해 부정적인 반응을 보임. 개인 정보 보호에 대한 우려와 사용자의 사생활 침해 가능성 때문Cop
bit.ly
June 2, 2024 at 12:08 PM
Copilot+ Recall은 2줄의 코드만으로 윈도우의 모든 입력과 보고 있는 것을 훔치는게 가능 | GeekNews bit.ly/3yCRCAs
Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. | by Kevin Beaumont | Jun, 2024 | DoublePulsar bit.ly/4ej26FN
Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. | by Kevin Beaumont | Jun, 2024 | DoublePulsar bit.ly/4ej26FN
Oracle: Pricked by a Rose and Still Bleeding
How disappointing. DoublePulsar documents a senior tech giant’s duplicity in, “Oracle Attempt to Hide Serious Cybersecurity Incident from Customers in Oracle SaaS Service.” Blogger Kevin Beaumont cites reporting by Bleeping Computer as he tells us…
How disappointing. DoublePulsar documents a senior tech giant’s duplicity in, “Oracle Attempt to Hide Serious Cybersecurity Incident from Customers in Oracle SaaS Service.” Blogger Kevin Beaumont cites reporting by Bleeping Computer as he tells us…
Oracle: Pricked by a Rose and Still Bleeding
How disappointing. DoublePulsar documents a senior tech giant’s duplicity in, “Oracle Attempt to Hide Serious Cybersecurity Incident from Customers in Oracle SaaS Service.” Blogger Kevin Beaumont cites reporting by Bleeping Computer as he tells us someone going by rose87168 announced in March they had breached certain Oracle services. The hacker offered to remove individual companies’ data for a price.
arnoldit.com
April 15, 2025 at 1:42 PM
Oracle: Pricked by a Rose and Still Bleeding
How disappointing. DoublePulsar documents a senior tech giant’s duplicity in, “Oracle Attempt to Hide Serious Cybersecurity Incident from Customers in Oracle SaaS Service.” Blogger Kevin Beaumont cites reporting by Bleeping Computer as he tells us…
How disappointing. DoublePulsar documents a senior tech giant’s duplicity in, “Oracle Attempt to Hide Serious Cybersecurity Incident from Customers in Oracle SaaS Service.” Blogger Kevin Beaumont cites reporting by Bleeping Computer as he tells us…
Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service | by Kevin Beaumont | Mar, 2025 | DoublePulsar doublepulsar.com/oracle-attem...
Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service
Being a provider of cloud SaaS (Software-as-a-service) solutions requires certain cybersecurity responsibilities — including being…
doublepulsar.com
March 31, 2025 at 4:28 PM
Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service | by Kevin Beaumont | Mar, 2025 | DoublePulsar doublepulsar.com/oracle-attem...
📌 Oracle Attempts to Hide Serious Security Incident from Customers in Oracle SaaS Service https://www.cyberhub.blog/article/2820-oracle-attempts-to-hide-serious-security-incident-from-customers-in-oracle-saas-service
Oracle Attempts to Hide Serious Security Incident from Customers in Oracle SaaS Service
The Reddit post discusses a serious cybersecurity incident involving Oracle's SaaS service. Oracle is alleged to have attempted to hide this incident from its customers. The incident was revealed by an article on the DoublePulsar website.
www.cyberhub.blog
April 1, 2025 at 2:40 AM
📌 Oracle Attempts to Hide Serious Security Incident from Customers in Oracle SaaS Service https://www.cyberhub.blog/article/2820-oracle-attempts-to-hide-serious-security-incident-from-customers-in-oracle-saas-service
DoublePulsar: A User Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era in rust by MemN0ps
Blog:-
https://
memn0ps.github.io/doublepulsar-a
-user-defined-reflective-loader-in-the-crystal-pa…
🔁 RT @5mukx | reposted by @ipurple
https://x.com/5mukx/status/2076392924527591648
Blog:-
https://
memn0ps.github.io/doublepulsar-a
-user-defined-reflective-loader-in-the-crystal-pa…
🔁 RT @5mukx | reposted by @ipurple
https://x.com/5mukx/status/2076392924527591648
July 12, 2026 at 7:53 PM
DoublePulsar: A User Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era in rust by MemN0ps
Blog:-
https://
memn0ps.github.io/doublepulsar-a
-user-defined-reflective-loader-in-the-crystal-pa…
🔁 RT @5mukx | reposted by @ipurple
https://x.com/5mukx/status/2076392924527591648
Blog:-
https://
memn0ps.github.io/doublepulsar-a
-user-defined-reflective-loader-in-the-crystal-pa…
🔁 RT @5mukx | reposted by @ipurple
https://x.com/5mukx/status/2076392924527591648
It has doublepulsar right there in the name 🤭
December 4, 2025 at 12:54 AM
It has doublepulsar right there in the name 🤭
Notepad++ users face security issues as its tool updater is exploited for access, particularly impacting organizations in East Asia. The latest version, 8.8.8, forces downloads from GitHub to prevent such abuse. Users should monitor gup.exe for unusual activity relating to updates.
Small groups of Notepad ++ users report tool updater being abused for initial access
Shoutout to Kevin Beaumont for being the best and putting this out there.
Small numbers of Notepad++ users reporting security woes | by Kevin Beaumont | Dec, 2025 | DoublePulsar
How it is fixed
In ...
reddit.com
December 3, 2025 at 4:42 PM
Notepad++ users face security issues as its tool updater is exploited for access, particularly impacting organizations in East Asia. The latest version, 8.8.8, forces downloads from GitHub to prevent such abuse. Users should monitor gup.exe for unusual activity relating to updates.
Unusual traffic today. Rather than the usual bruteforce password attempts, we're seeing massive numbers of attempts to install the DoublePulsar backdoor. Someone is trying hard to beef up their botnet. https://loom.ly/ItBu3Jk #CyberWar #Iran #War
June 22, 2025 at 10:50 PM
Unusual traffic today. Rather than the usual bruteforce password attempts, we're seeing massive numbers of attempts to install the DoublePulsar backdoor. Someone is trying hard to beef up their botnet. https://loom.ly/ItBu3Jk #CyberWar #Iran #War
I had followed the Shadow Brokers thing closely and I knew that EternalBlue and DoublePulsar were the root of the problem but somehow my sense of dread watching these videos was extreme.
November 6, 2025 at 4:09 PM
I had followed the Shadow Brokers thing closely and I knew that EternalBlue and DoublePulsar were the root of the problem but somehow my sense of dread watching these videos was extreme.
DoublePulsar: A User-Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era
DoublePulsar: A User-Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era
memn0ps.github.io
May 16, 2026 at 2:54 PM
DoublePulsar: A User-Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era