the grugq's newsletter
Archives
Search...
Subscribe
April 6, 2025
April 6, 2025
April 6, 2025 EU: These are scary times – let's backdoor encryption! https://www.theregister.com/2025/04/03/eu_backdoor_encryption/?td=rt-3a One Bug to Rule...
April 5, 2025
April 5, 2025
April 5, 2025 No words pic.twitter.com/EyHtRLbIpq— Andy Yen (@andyyen) April 3, 2025 April is #SupplyChainIntegrityMonth! NCSCgov and its partners are asking...
April 4, 2025
April 4, 2025
April 4, 2025 Home | MIT Secure Hardware DesignMIT 6.5950/6.5951 Cracking the CrackersReversing the TNT team macOS crack library to understand if there is...
April 3, 2025
April 3, 2025
April 3, 2025 🎥 DistrictCon Year 0 recordings are now live on YouTube! Check out the AMAZING content from our Track 1 Speakers, Junkyard competitors, and...
April 2, 2025
April 2, 2025
April 2, 2025 I got 14 new Apple CVEs in this release😎 https://t.co/kut6EI5xdE pic.twitter.com/e0U2Khf3hv— Mickey Jin (@patch1t) April 1, 2025 A while back...
April 1, 2025
April 1, 2025
April 1, 2025 Synthetics Implemented Right @leveragesir has been hacked for $355kThis is a clever attack. In the vulnerable contract Vault...
March 31, 2025
March 31, 2025
March 31, 2025 What would you do if you could spy on SMS messages? @theredguild and @opsek_io have identified SLOVENLY COMET, a threat actor which has been...
March 30, 2025
March 30, 2025
March 30, 2025 A good read: The Security Conversation – Adversary Fan Fiction Writers GuildIs Offensive Security just security testing? No. Offensive...
March 29, 2025
March 29, 2025
March 29, 2025 BlackLock Ransomware Exposed After Researchers Exploit Leak Site VulnerabilityBlackLock's misconfigured leak site exposed internal commands,...
March 28, 2025
March 28, 2025
March 28, 2025 Status update For those of you who reached out about the earthquake, I’m fine thank you. I spent a few hours sitting outside with my dog....
March 27, 2025
March 27, 2025
March 27, 2025 grugq on cyber in Europe I spoke to Sven at Interface yesterday about some cyber issues with Europe. The video is online already: EXCLUSIVE:...
March 26, 2025
March 26, 2025
March 26, 2025 THC's memexec now supports x86_64, aarch64, arm6/7 and mips64. The perl version is a 1-liner (cat /usr/bin/id | memexec) :> Helps to overcome...
March 25, 2025
March 25, 2025
March 25, 2025 Attackers love poking around SSO dashboards, so we gave them something to find! Drop a Fake SAML IdP App Canarytoken in your IdP -- if anyone...
March 24, 2025
March 24, 2025
March 24, 2025 https://t.co/1CH1WoMwKfImplemented arbitrary webkit code execution on iPhone (not PAC devices).You can chaining other exploits if you want for...
March 23, 2025
March 23, 2025
March 23, 2025 Landrun Run any Linux process in a secure, unprivileged sandbox using Landlock LSM. Think firejail, but lightweight, user-friendly, and baked...
March 22, 2025
March 22, 2025
March 22, 2025 Farewell to one of the most important spies of the Cold War. Oleg Gordievsky has died. A KGB officer who spied for MI6, he supplied vital...
March 21, 2025
March 21, 2025
March 21, 2025 https://x.com/ethicalchaos/status/1902481711109214484 People seem to fear vulnerability discovering and exploiting AI, but I worry more about...
March 20, 2025
March 20, 2025
March 20, 2025 This has the potential to be either horrible or not: https://t.co/3x859Lb4e6BLUF: Despite the rise of 32-bit devices, a large number of legacy...
March 19, 2025
March 19, 2025
March 19, 2025 Secure Annex - Enterprise Browser Extension Security & Management PlatformAn investigation into buying access to browsers through extensions...
March 18, 2025
March 18, 2025
March 18, 2025 Big day for Chinese threat intelMSS outs 4 alleged members of Taiwan's Information, Communications & Electronic Force Command, links them to...
Newer archives
Older archives