the grugq's newsletter
Archives
Search...
Subscribe
May 31, 2025
May 31, 2025
May 31, 2025 Looks like @BlueHatIL talks are online now, so here’s my talk for anyone who wanted to learn about the latest episode of KASLR and couldn’t make...
May 29, 30 2025
May 30, 2025
May 29, 30 2025 you know, i can think of a few reasons why "in the intelligence world" you might want it to be difficult to transfer data off a computer...
May 28, 2025
May 28, 2025
May 28, 2025 Recent attacks on institutions in the Netherlands were the work of a previously unknown Russian hacking group that Dutch intelligence agencies...
May 27, 2025
May 27, 2025
May 27, 2025 This post from @s1guza should be mandatory reading for seceng. Playing whack-a-mole with first-order primitives or just patching vulnerabilities...
May 26, 2025
May 26, 2025
May 26, 2025 Since the discussion is going around again on the topic of disclosure i keep coming back to this blog post by @halvarflake...
May 25, 2025
May 25, 2025
May 25, 2025 NEW: More than a decade ago, Kaspersky discovered a mysterious "elite" hacking group it called Careto (“The Mask”), which then vanished and only...
May 24, 2025
May 24, 2025
May 24, 2025 GPT Honeypot: Finding the Needle in the Haystack / Coalition Research's Workspace | ObservableOver the past 9 months, the research team at...
May 23, 2025
May 23, 2025
May 23, 2025 Here’s the collection of the most significant exploits that I’ve published in the past three decades or so. Enjoy!https://t.co/FDPo4ydHTc—...
May 22, 2025
May 22, 2025
May 22, 2025 This is a wild story. SCOOP: In Feb, federal agencies "lost" many #FOIA requests but you probably had no idea. It turns out that the FOIAs...
May 21, 2025
May 21, 2025
May 21, 2025 My keynote at @offensive_con 2025, "How Offensive Security Made Me Better at Defense":Video: https://t.co/WM9GuW19cZSlides:...
May 20, 2025
May 20, 2025
May 20, 2025 The slides for my OffensiveCon talk "Finding and Exploiting 20-year-old bugs in Web Browsers" https://t.co/NAXPhs1xl5— Ivan Fratric 💙💛...
May 19, 2025
May 19, 2025
May 19, 2025 O2 VoLTE: locating any customer with a phone call | mastdatabase.co.ukPrivacy is dead: For multiple months, any O2 customer has had their...
May 18, 2025
May 18, 2025
May 18, 2025 There’s a lot of “VPN’s are snakeoil, just use HTTPS” discourse again, so here, I’ll sell the farm for the sake of demonstrating exactly how...
May 17, 2025
May 17, 2025
May 17, 2025 Analysis: Unpacking Iran’s counterintelligence apparatus - FDD's Long War Journal #intelligence #covert #CI #Iran https://t.co/1xDCYK2pDo—...
May 16, 2025
May 16, 2025
May 16, 2025 https://neal.fun/internet-artifacts/ Not that many impacted customers ( but 1% of monthly active transacting wallets), but the info that was...
May 15, 2025
May 15, 2025
May 15, 2025 https://swtch.com/~rsc/regexp/regexp2.html ok ok fine, for old time's sake https://t.co/eJnUdUcGzf pic.twitter.com/FeWCDAsX4U— blasty (@bl4sty)...
May 14, 2025
May 14, 2025
May 14, 2025 Happy to announce my new paper "The cryptoint library": https://t.co/Spc0eUGVdW Constant-time code is the main way that we avoid leaking secrets...
May 13, 2025
May 13, 2025
May 13, 2025 Florida bill requiring encryption backdoors for social media accounts has failed https://t.co/zpnWt5A3nj— switched (@switch_d) May 12, 2025 The...
May 12, 2025
May 12, 2025
May 12, 2025 https://fathom.lib.uchicago.edu/2/21701757/ While true that this was the greatest SIGINT prize of the war, it did not initiate reading of the...
May 11, 2025
May 11, 2025
May 11, 2025 ‘High levels of trust [in our secret agencies] based on low levels of knowledge’. That’s a fascinating conclusion which will, rightly, command...
Newer archives
Older archives