the grugq's newsletter
Archives
Search...
Subscribe
March 11, 2025
March 11, 2025
March 11, 2025 In Russia’s cyber ecosystem, even FSB officers aren’t untouchable. CSI fellow @jshermcyber dives into the sentencing of an officer who took...
March 10, 2025
March 10, 2025
March 10, 2025 Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the...
March 9, 2025
March 9, 2025
March 9, 2025 Using RDP without leaving traces: the MSTSC public mode https://t.co/TMf3YP5JVS— Nicolas Krassas (@Dinosn) March 7, 2025 Sadly, too many...
March 8, 2025
March 8, 2025
March 8, 2025 When you struggle with first year linear algebra https://t.co/jF1XzxTBVg— Martin Bauer (@martinmbauer) March 6, 2025 Their task, as assigned by...
March 7, 2025
March 7, 2025
March 7, 2025 Multi-factor authentication works. From the indictment: 1 of the Chinese hacking teams was unsuccessful in breaking into email accounts of...
March 6, 2025
March 6, 2025
March 6, 2025 Chinese Great Firewall (website access blockade and. content filter for internet traffic) was leaking data! It's a fascinating discovery of...
March 5, 2025
March 5, 2025
March 5, 2025 LAZARUS HAS NOW FULLY LAUNDERED THE PROCEEDS OF THE BYBIT HACKThey have transferred 500,000 ETH mainly to native BTC.Thorchain has processed...
March 4, 2025
March 4, 2025
March 4, 2025 My presentation slides "UEFI Bootkit Hunting: In-Depth Search for Unique Code Behavior" @REverseConf are available online...
March 3, 2025
March 3, 2025
March 3, 2025 I've just published a new blog post detailing how I developed a deterministic kernel exploit for iOS. Enjoy!https://t.co/ah8qtW0CG5— Alfie...
March 2, 2025
March 2, 2025
March 2, 2025 🚨 - The @RecordedFuture 2024 Malicious Infrastructure Report is here! I know many of you have been looking forward to this! Insikt Group...
March 1, 2025
March 1, 2025
March 1, 2025 ‼️ CISA employees have been told to stop tracking Russian cyber threats, according to The Guardian. A recent agency priorities memo "did not...
February 28, 2025
February 28, 2025
February 28, 2025 Overcoming State: Finding Baseband Vulnerabilities by Fuzzing Layer-2https://t.co/v69u7amI7Qhttps://t.co/fuNHl52m60Dyon Goos & Marius...
February 27, 2025
February 27, 2025
February 27, 2025 My slides from out of the box con https://strapi.ootb.net/uploads/28_months_later_final_1357291282.pdf All presentation slides from #OOTB...
February 26, 2025
February 26, 2025
February 26, 2025 PSA #BinDiff for IDA 9.1+ will happen: https://t.co/dIqw27h0is— Christian Blichmann 🇺🇦 (on bksy and Mastodon) (@AdmVonSchneider) February...
February 25, 2025
February 25, 2025
February 25, 2025 A Ukrainian company has developed an electronic module that uses time of flight (ToF) for navigation independent of GPS.Their system...
February 24, 2025
February 24, 2025
February 24, 2025 Looks like BlackHat have added the talks from USA 2024 to YouTube.Here's @robHerrera_ and my talk on Listen Up: Sonos Over-The-Air Remote...
February 23, 2025
February 23, 2025
February 23, 2025 Spyware as a service: Challenges in applying export controls to cloud-based cyber-surveillance software (17 February 2025)...
February 22, 2025
February 22, 2025
February 22, 2025 Spice86 - A PC emulator for real mode reverse engineering : https://t.co/otjFdgCCjo— Binni Shah (@binitamshah) February 21, 2025...
February 21, 2025
February 21, 2025
February 21, 2025 recommended reading: OK so I've been reading through the transcripts of the cases where the LLM apparently cheats and wins and, you're not...
February 20, 2025
February 20, 2025
February 20, 2025 Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger | Google Cloud Blog Signals of Trouble:...
Newer archives
Older archives