April 3, 2023
Our Q1 selection
OpenSSH Pre-Auth Double Free CVE-2023-25136 jfrog.com/blog/openssh-p…
Dota 2 Under Attack: How a V8 Bug Was Exploited in the Game decoded.avast.io/janvojtesek/do…
BlackLotus UEFI bootkit welivesecurity.com/2023/03/01/bla…
aCropalypse: Recovering Truncated PNGs
-
Wwow it's so cool and sustainable that the most annoying ppl now know how to make their posts even more algorithm friendly AND can generate text/pics with AI for free AND can pay to boost AND it's getting harder to determine whether or not info is coming from an official source
-
Lazarus Heist: The intercontinental ATM theft that netted $14m in two hours
Lazarus Heist: The intercontinental ATM theft that netted $14m in two hours
How criminals seemingly working for North Korea were able to plunder cashpoints in 28 countries.
-
“Landmark”, the product bought here, is not a hacking tool. It is a surveillance tool based on SS7 (see our coverage here vice.com/en/article/m7v…). Sounds pedantic, but it’s a key distinction when governments are clamping down on commercial spyware. Landmark is not that. https://t.co/VOCzvATL2W
Mark Mazzetti @MarkMazzettiNYT
-
EMT: Please try not to speak, sir.
