the grugq's newsletter

Subscribe
Archives
June 20, 2023

June 20, 2023

June 20, 2023


Fake Security Researcher GitHub Repositories Deliver Malicious Implant | Blog | VulnCheck

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.


Victims of the #Pegasus spyware have filed a petition asking the Administrative Court to ban the use of the spyware on the victims, release information regarding its previous usage, and return the information that has been retrieved from the victims.#Thailand #Spyware #เพกาซัส pic.twitter.com/ELE7aiiVsI

— Thai Enquirer (@ThaiEnquirer) June 20, 2023

Following several evaluations in which we used binary-only fuzzing, we wrote a hands-on blogpost about our step-by-step approach to setup grammar-aware in-memory persistent fuzzing campaigns using AFL++-QEMU. Check it out here: https://t.co/tOtUI3CNj7!

— Airbus Security Lab (@AirbusSecLab) June 19, 2023

you wanna see someone’s career get destroyed by the way excel happens to serialize data into xml files? https://t.co/267rIXkDno

— badidea 🪐 (@0xabad1dea) June 20, 2023

I'm excited to present our paper about Fuzzing Loop Optimizations in Compilers for C++ and Data-Parallel Languages (co-authored by @DmitryBabokin and https://t.co/f97ump5Zfy) at #PLDI!
Join the stream (https://t.co/owKfulXHv1) or stop by Cypress 2 on June 19th at 3 pm EDT

— Vsevolod Livinskii (@VLivinskii) June 19, 2023

https://twitter.com/clearancejobs/status/1670751069129900033

part 2 of my latest blog post covering the heap overflow I found in MiniDLNA (CVE-2023-33476) is up! this one focuses on the exploit dev process used to get remote code execution and pop a shell. exploits included :D
https://t.co/0s8ENPMCUK

— hypr (find me on bluesky) (@hyprdude) June 20, 2023

So you think that OpenAI and others really want to be regulated out of generosity? Perhaps, but on their own terms. "OpenAI has lobbied for significant elements of the most comprehensive AI legislation in the world—the E.U.’s AI Act—to be watered down" https://t.co/5FCYGtxjtu pic.twitter.com/0QNQUOWqz8

— Lukasz Olejnik (@lukOlejnik) June 20, 2023

ChatGPT gives you free Windows 10 Pro keys! And it surprisingly works 😂 pic.twitter.com/T4Y90lfzoY

— sid (@immasiddx) June 16, 2023

Guys it works with Google Bard too 😭💀💀💀 pic.twitter.com/bpNbkHOz5V

— sid (@immasiddx) June 17, 2023

https://t.co/5KbtYdxn1H

— sid (@immasiddx) June 17, 2023

https://twitter.com/khoavuumn/status/1671069847231373316
https://twitter.com/halkyardo/status/1671000633845993473

"Russia’s Foreign Intelligence Service (SVR) has suggested that employees of Ukrainian diplomatic missions abroad flee to Moscow".

Sure Naryshkin, hun. I'm sensing desperation. https://t.co/Lgz2jOzbND pic.twitter.com/YkIubo2BFu

— Dr. Dan Lomas (@Sandbagger_01) June 20, 2023

https://twitter.com/aflplusplus/status/1671109802775150595

SPY NEWS: 2023 — Week 24. Summary of the espionage-related news… | by The Spy Collection | Medium

Summary of the espionage-related news stories for the Week 24 (June 11–17) of 2023.


Correctly handling file names and paths in shell

https://dwheeler.com/essays/filenames-in-shell.html
Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X