Skip to content
Drix10 Blog

ToolShell vulnerabilities exploited in fileless SharePoint breach

, 8 items in Tech VIPs, 3 min read

In this digest (8 items)

ToolShell vulnerabilities CVE-2025-53770 and CVE-2025-53771 were exploited in a fileless SharePoint breach on Christmas Eve 2025. Attackers hid a web-shell in IIS process memory, escalated privileges, and attempted to deploy Warlock ransomware, which Kaspersky Endpoint Security blocked.

Key points

  • CVE-2025-53770 and CVE-2025-53771 exploited.

  • Web-shell hidden in memory of an IIS process.

  • Warlock ransomware deployment blocked by Kaspersky Endpoint Security proactive protection module.

Sources

Nvidia tokenized stocks trade 24/7, Binance volume rank

Nvidia tokenized stocks trade 24/7, Binance NVDAUSDT hit a -4.2% low versus the last US close. Binance led NVIDIA perpetual volume in the past 24 hours.

Key points

  • Price: -4.2% low vs the last US close on Binance NVDAUSDT.

  • Rank: 1 in NVIDIA perpetual volume over the past 24 h.

Sources

Tesla built 35,000 in five years vs US 400

Tesla built 35,000 vehicles in five years, while the US Government built 400 in the same period. The post contrasts the two totals.

Key points

  • Tesla built 35,000 in five years

  • US Government built 400 over five years

Sources

Omarchy Secure boot coming - install OS without BIOS

Omarchy Secure boot is coming. It will let you install the best operating system without having to fiddle with the BIOS. OEMs will be able to pre-install it from the factory.

Key points

  • Secure boot is coming to Omarchy.

  • OEMs can preinstall it from the factory.

Sources

Omarchy 4.6 launch with Flash Next on AMD 495

Omarchy 4.6 will recommend the best model for your machine, running Flash Next on an AMD 495. The post calls the result shockingly capable.

Key points

  • Version: Omarchy 4.6

  • Model: Flash Next on AMD 495

Sources

Vocal synth models vocal tract with branching acoustic tubes

Vocal synth models the vocal tract as a network of branching acoustic tubes, unlike vocaloid which stitches together and pitch-shifts phoneme recordings. The creator is tuning it against recordings of real singers to improve naturalness.

Key points

  • Model uses a network of branching acoustic tubes to simulate the vocal tract.

  • Tuning is done against recordings of real singers to improve naturalness.

Sources

Specialist open-source hardware and data announced

Specialist is introduced as fully open-source hardware and data. The author and @t_k_233 documented every design choice and lesson while copying @GeneralistAI's gripper. The post contrasts a weekend project with a more detailed effort.

Key points

  • Specialist: fully open-source hardware, data

  • Documented every design choice and lesson with @t_k_233

Sources