March 27, 2025
March 27, 2025 grugq on cyber in Europe I spoke to Sven at Interface yesterday about some cyber issues with Europe. The video is online already: EXCLUSIVE:...
March 26, 2025
March 26, 2025 THC's memexec now supports x86_64, aarch64, arm6/7 and mips64. The perl version is a 1-liner (cat /usr/bin/id | memexec) :> Helps to overcome...
March 25, 2025
March 25, 2025 Attackers love poking around SSO dashboards, so we gave them something to find! Drop a Fake SAML IdP App Canarytoken in your IdP -- if anyone...
March 24, 2025
March 24, 2025 https://t.co/1CH1WoMwKfImplemented arbitrary webkit code execution on iPhone (not PAC devices).You can chaining other exploits if you want for...
March 23, 2025
March 23, 2025 Landrun Run any Linux process in a secure, unprivileged sandbox using Landlock LSM. Think firejail, but lightweight, user-friendly, and baked...
March 22, 2025
March 22, 2025 Farewell to one of the most important spies of the Cold War. Oleg Gordievsky has died. A KGB officer who spied for MI6, he supplied vital...
March 21, 2025
March 21, 2025 https://x.com/ethicalchaos/status/1902481711109214484 People seem to fear vulnerability discovering and exploiting AI, but I worry more about...
March 20, 2025
March 20, 2025 This has the potential to be either horrible or not: https://t.co/3x859Lb4e6BLUF: Despite the rise of 32-bit devices, a large number of legacy...
March 19, 2025
March 19, 2025 Secure Annex - Enterprise Browser Extension Security & Management PlatformAn investigation into buying access to browsers through extensions...
March 18, 2025
March 18, 2025 Big day for Chinese threat intelMSS outs 4 alleged members of Taiwan's Information, Communications & Electronic Force Command, links them to...
March 17, 2025
March 17, 2025 For those interested in the browser cache smuggling attack I presented yesterday, you will find the full blogpost here...
March 16, 2025
March 16, 2025 #SpyNews - week 11 (March 9-15):A summary of 71 espionage-related stories from week 11 coming from...
March 15, 2025
March 15, 2025 $55000[382291459][wasm]Arbitrary Wasm type confusion is now openhttps://t.co/EbwB5VJeedPoC(exploits the hash collision + type confusion,...
March 14, 2025
March 14, 2025 Some exciting research to share from Binarly REsearchers @cci_forensics and @pagabuc -- a novel approach to UEFI bootkit detection. 🔥Read the...
March 13, 2025
March 13, 2025 Is this memory safety here in the room with us?@halvarflake posted slides for his keynote talk about the recent trends to resolve the problem...
March 12, 2025
March 12, 2025 In-Depth Technical Analysis of the Bybit Hack #Lazarushttps://t.co/chfR1uQ7Wg pic.twitter.com/dqMCJEBpiK— blackorbird (@blackorbird) March 11,...
March 11, 2025
March 11, 2025 In Russia’s cyber ecosystem, even FSB officers aren’t untouchable. CSI fellow @jshermcyber dives into the sentencing of an officer who took...
March 10, 2025
March 10, 2025 Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the...
March 9, 2025
March 9, 2025 Using RDP without leaving traces: the MSTSC public mode https://t.co/TMf3YP5JVS— Nicolas Krassas (@Dinosn) March 7, 2025 Sadly, too many...
March 8, 2025
March 8, 2025 When you struggle with first year linear algebra https://t.co/jF1XzxTBVg— Martin Bauer (@martinmbauer) March 6, 2025 Their task, as assigned by...