December 3, 2022
frycos @frycos My blog post "Pre-Auth RCE with CodeQL in Under 20 Minutes" Pre-Auth RCE with CodeQL in Under 20 Minutes This write-up won’t be an intense...
December 2, 2022
Folks, this is bad news. Very, very bad. Hackers and/or malicious insiders have leaked the platform certificates of several vendors. These are used to sign...
December 1, 2022
I started today’s newsletter by typing in “December 1” and then taking five to just repeat “WTF? December? How? WTF…” KT @koczkatamas We've disclosed two...
November 30, 2022
Dreadnought Holiday @TheDreadShips It's a well-known fact that steam engines can be bloody dangerous, what with being powered by water in its angriest phase...
November 28, 2022
Administrivia: Sorry everyone. I’m not sure what happened to make Google decide the November 27 newsletter was a phishing attack. If you didn’t get the...
November 27, 2022
New Perun! - - b1ack0wl @b1ack0wl I've finally completed part 1 (of 2) of my analysis and exploitation of an uninitialized pointer vulnerability affecting...
November 26, 2022
Eliot Higgins @EliotHiggins This week, a Russian couple living in Sweden for the past 20 years were arrested, with the husband detained under suspicion of...
November 25, 2022
I spent some time yesterday running #sudo through Facebook's Infer static analyzer. It seems much more strict about dead stores than other analyzers and...
November 24, 2022
Chad Loder @chadloder BREAKING: I have just received evidence of a massive Twitter data breach affecting millions of Twitter accounts in EU and US. I have...
November 23, 2022
The Swedes are rolling up a lot of Russian spies recently. Christo Grozev @christogrozev Swedish couple who immigrated from Russia more than 20 years ago...
November 22, 2022
Lukasz Olejnik on Cyber, Privacy and Tech Policy CritiqueTechLetters Insight. Why would anybody hack Electric Vehicle Charging Stations?A Russian zero-day...
November 21, 2022
- Subscribe now 0xor0ne @0xor0ne Kernel memory allocator hardening by @Apple kheap, data split, memory sequestering, kalloc_type, temporal safery......
November 20, 2022
Matthijs R. Koot @mrkoot Who's behind Rybar? The Bell unmasks one of Telegram's most widely-cited pro-Kremlin military analysis channels (Nov 18)...
November 19, 2022
Lukasz Olejnik @[email protected] @lukOlejnik When cybersecurity cross-sects with policy, defence, even warfare, this calls for additional...
Russian 0day thirst traps
Last month a Russian exploit company increased their price offer for Signal RCE exploits to three times the Zerodium rate. What, if anything, does this mean?...
November 18, 2022
Kylie Robison @kyliebytes What I’m hearing from Twitter employees; It looks like roughly 75% of the remaining 3,700ish Twitter employees have not opted to...
November 17, 2022
Donie O'Sullivan @donie NEW: Facebook sent a memo to its fact-checkers this afternoon telling them if Trump announces he's running for president tonight they...
November 16, 2022
Watching "Analysis of an in-the-wild Samsung exploit chain" by @maddiestone at #ekoparty pancake :radare2:: "Watching "Analysis of an in-the-wild Samsung...
November 15, 2022
This is insanity. Why can’t Europe fixate on information sharing and public private partnerships instead of banning security research? Lukasz Olejnik...
November 14, 2022
Administrivia: Sorry for the abbreviated newsletter today. I have a paper due and it’s crunch time. Will be back on schedule tomorrow. Subscribe now U.S....
