the grugq's newsletter

Subscribe
Archives
August 13, 2024

August 13, 2024

August 13, 2024

A quote from the launch of Google Project Zero in 2014:

“We’re really going to make a dent in this problem,” Evans says. “Now is a very good time to make a bet on putting a stop to zero-days.”https://t.co/kitIjEBibD https://t.co/x1BNMqqns6

— Ryan Naraine (@ryanaraine) August 12, 2024


BREAKING: 5th Circuit, splitting with 4th Circuit, rules that geofencing is a search and warrants to search for geofence records are inherently unconstitutional. It may be that *all* Internet warrants are unconstitutional by this reasoning. Lordy.https://t.co/6Yd5yyPLxi #N pic.twitter.com/WE909W2tgi

— Orin Kerr (@OrinKerr) August 13, 2024


While the real Trump-Musk Space on X does not appear to be working, there's currently a deepfake livestream of the Trump-Musk interview on a fake Tesla channel on YouTube, with 200,000 people watching.https://t.co/cTzd5PUPmk pic.twitter.com/Fudiy46uZK

— Shayan Sardarizadeh (@Shayan86) August 13, 2024

The channel is running a crypto scam. Do not scan the QR code, subscribe or join the channel.@TeamYouTube needs to suspend the channel.

— Shayan Sardarizadeh (@Shayan86) August 13, 2024

The future.


In Part 3 of our blog series _You Can't Spell WebRTC without RCE_, we conclude our Signal-iOS research with commentary by @__comedian and @m40282845 on exploit limitations and IOCs! https://t.co/KRBMFkxsZ1

— Margin Research (@Margin_Research) August 12, 2024


“40% of in-the-wild 0-day flaws are variants of existing flaws, meaning they are similar to flaws already fixed. This could indicate vendors are rushing fixes as a result of time constraints. As a result, they are producing incomplete fixes & aren’t addressing the root cause” https://t.co/07jrgYJvlu

— Katie🌻Moussouris (she/her/she-ra/she-hulk) 🪷 (@k8em0) August 12, 2024


Luke shared the URL from the original phishing email with me, so I'd like to showcase it a bit.

Planning to record a video to walk through it, but don't have a chance to record for the next few hours... so will roll with a Twitter/X thread for now 🧵 https://t.co/2c6trQCxSG pic.twitter.com/vDriUAGTLb

— John Hammond (@_JohnHammond) August 12, 2024


This is VERY interesting: https://t.co/FgYb7tYTm4

— Dave Aitel (@daveaitel) August 12, 2024


Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X