November 6, 2022
New Lazerpig. The ad is probably the greatest ever made.
-
-
european students in the '70s: bruh i got an essay due tomorrow and i gotta kidnap the prime minister and bomb a bank by friday 😭😭😭
-
Weekly analysis is out:
-🇻🇳 ops using hacked IoT
-🇷🇺 crime ops in 🇺🇦🇬🇧
- 30💸 ops net $30 mil - inc via SWIFT
-🇮🇳 ops use stolen code signing certs
-🇰🇵 🎣 ops
plus:
- scanning for 🇨🇳 C2
- root cause from 100 DeFi hacks
- SPARK exploitation
bluepurple.substack.com/p/bluepurple-p…
-
Interesting
Former NSA or Intel community? Come on back! We now have a vacancy listing to fast track former employees back in. Check it out.
apply.intelligencecareers.gov/job-descriptio…
-
-
Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities 🤦🤦♂️🤦♀️
// by @OctagonNetworks
octagon.net/blog/2022/10/2…
-
@AlexandraErin Listen, I don't have a crystal ball, and I haven't consulted the oracles.
But. 
Jonathan Steele in the Guardian repeats the damaging myth that the UK & US sabotaged a Russia-Ukraine deal in March. There’s no evidence for this claim, yet it has become an article of faith among certain people. https://t.co/i0ndsXTajz https://t.co/DYY3JSavEY
-
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html-
To reinforce @shashj - I went through the history of negotiations in this piece. samf.substack.com/p/getting-to-n… There was never an agreed deal and in his only public statement Johnson accepted that a deal might involve Ukraine abandoning idea of joining NATO.
Shashank Joshi @shashj
-
Crypto phones. Offensive cyber by states. A perspective. [NoScript, or Reader View to read]
In dit interview deel ik mijn onderzoek en inzichten naar de verzameling van inlichtingen door o.a. de politie in de cryptotelefoonzaken (EncroChat, Sky ECC, etc.): ftm.nl/artikelen/jan-… -> Niet de politie en het OM stellen de grens over wat wel en niet mag, maar de wetgever.
-
Sudo 1.8.0 through 1.9.12 contains an array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by local users with access to Sudo by entering a password of 7 chars or fewer. github.com/sudo-project/s…
-
-
Top officials tried to link protesters to an imaginary terrorist plot in an apparent effort to boost Trump’s reelection odds, raising concerns now about the ability of a sitting president to co-opt billions of dollars’ worth of domestic intelligence assets
-
check this story for the slides alone but also for quotes like this
"The greatest achievement to date of Project Merciless […] have come from successful penetration operations targeting vocal critics inside the FIFA organization."
swissinfo.ch/eng/business/-…
-
Glibc heap exploitation: House of IO technique
Blog post by @Dooflin5
maxwelldulin.com/BlogPost/House…
#glibc #heap #exploit #infosec #cybersecurity #learning
-
Don't miss what's next. Subscribe to the grugq's newsletter: