the grugq's newsletter
Archives
Search...
Subscribe
August 29, 2025
August 29, 2025
August 29, 2025 I'm once again looking at the epic 20-part essay which Ian Lance Taylor wrote about linkers https://t.co/DKtvyCiP6r - did anyone ever write...
August 28, 2025
August 28, 2025
August 28, 2025 #ESETResearch has discovered the first known AI-powered ransomware, which we named #PromptLock. The PromptLock malware uses the gpt-oss:20b...
August27, 2025
August 27, 2025
August27, 2025 2025 State of the Internet Report: Summary and Conclusionshttps://t.co/rmgBK1198Q(Screenshot: PolarEdge infections as of 5 August 2025)...
August 26,2025
August 26, 2025
August 26,2025 excellent writeup that highlights how many 0-days are simply asking nicely for something. https://t.co/4GZmKR2wme pic.twitter.com/QfhZfZ2bSf—...
August 25, 2025
August 25, 2025
August 25, 2025 David Gerard: "latest hilarity: Perplexity, the AI search engin…" - GSV Sleeper Servicelatest hilarity: Perplexity, the AI search engine,...
August 24, 2025
August 24, 2025
August 24, 2025 daisy-chaining wifi networks to reach a hard target is 🆆🅸🅻🅳but operational "sophistication" is often the clean up 🧹 https://t.co/fHcIv8Q3mD...
August 23, 2025
August 23, 2025
August 23, 2025 Brief info and POC for this week's Apple 0click iOS 18.6.1 RCE bug CVE-2025-43300 https://t.co/EL3qg56N8X pic.twitter.com/j8yuv1CXU7—...
August 22, 2025
August 22, 2025
August 22, 2025 AWS CEO says using AI to replace junior staff is 'Dumbest thing I've ever heard' “I think the skills that should be emphasized are how do you...
August 21, 2025
August 22, 2025
August 21, 2025 Reading G-2 "#Counterintelligence Situation in China Theater" Report from 1946. "On the purpose of collecting information from the American...
August 20, 2025
August 20, 2025
August 20, 2025 Never considered it before until now.Abuse Microsoft AI copilot to "live off the land" and perform automated malicious tasks by simply...
August 18, 2025
August 19, 2025
August 18, 2025 At @defcon, I presented my research on client-side deanonymization attacks in @Google's Privacy Sandbox! Privacy research doesn't get as much...
August 16-17, 2025
August 17, 2025
August 16-17, 2025 The previous thread glossed over how our LLM Agents actually work.The truth is, it took us a long time to figure out how to get reliable...
August 15, 2025
August 15, 2025
August 15, 2025 Russian hackers seized control of Norwegian dam, spy chief says | Russia | The GuardianBeate Gangås says attack in April by Norway’s...
August 14, 2025
August 14, 2025
August 14, 2025 NewTaiwan’s New Naval Drones Could Strike Any Chinese Invasionhttps://t.co/vBKXtTZ5A5— H I Sutton (@CovertShores) August 13, 2025 Wrapped up...
August 13, 2025
August 13, 2025
August 13, 2025 If you missed this talk at BH/DC last week, it's worth a read: "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial...
August 12, 2025
August 12, 2025
August 12, 2025 ThinkstKeeping up with security research is near impossible. ThinkstScapes helps with this. We scour through thousands of blog posts, tweets...
August 11, 2025
August 11, 2025
August 11, 2025 Phrack #72 release reveals TTPs, backdoors and targets of a Chinese/North Korean state actor mimicking KimsukyA copy of his workstation data...
August 10, 2025
August 10, 2025
August 10, 2025 You can't bug hunt your way to security. AI doesn't change that.— Sean Heelan (@seanhn) August 7, 2025...
August 9, 2025
August 9, 2025
August 9, 2025 That time when @tehjh was just reviewing a new Linux kernel feature, found a security vuln, then went on a journey to see if he could exploit...
August 8, 2025
August 8, 2025
August 8, 2025 we got a persistent 0click on ChatGPT by sharing a docthat allowed us to exfiltrate sensitive data and creds from your connectors (google...
Newer archives
Older archives