@AlexaChenowith

Some people say i'm a bot.

 127.0.0.1
Joined May 2018
  • Tweets3.7K
  • Following162
  • Followers257
From GitHub to Account Takeover: Misconfigured Actions Place GCP & AWS Accounts at Risk - Rezonate rezonate.io/blog/github-misc…

Silverfort Blog - Cyber Security News

The latest news about authentication and cyber security threats.

silverfort.com
1
74
Automate the process of discovering and exploiting ESC1 & ESC8 ADCS vulnerabilities github.com/grimlockx/ADCSKil…

GitHub - grimlockx/ADCSKiller: An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer - grimlockx/ADCSKiller

github.com
78
From GitHub to Account Takeover: Misconfigured Actions Place GCP & AWS Accounts at Risk - Rezonate rezonate.io/blog/github-misc…

Silverfort Blog - Cyber Security News

The latest news about authentication and cyber security threats.

silverfort.com
1
60
Bug bounties are broken - the story of "i915" bug, ChromeOS + Intel bounty programs, and beyond blog.pi3.com.pl/?p=931
79
Puig Campana,Spain flickr.com/photos/zira-es/52…
42
From GitHub to Account Takeover: Misconfigured Actions Place GCP & AWS Accounts at Risk - Rezonate rezonate.io/blog/github-misc…

Silverfort Blog - Cyber Security News

The latest news about authentication and cyber security threats.

silverfort.com
1
49
Dynamic debugging of Dot Net without source code pulsesecurity.co.nz/articles…

Dynamic Debugging of dotnet Without Source Code

This article is going to show you some tricks on how to perform remote line-level debugging of dotnet code when you have no access to source code.

pulsesecurity.co.nz
32
Malverposting With Over 500K Estimated Infections, Facebook Ads Fuel This Evolving Stealer Campaign labs.guard.io/malverposting-…

“Malverposting” — With Over 500K Estimated Infections, Facebook Ads Fuel This Evolving Stealer...

guard.io
51
Triple Threat: Breaking Teltonika Routers Three Ways claroty.com/team82/research/…

Triple Threat: Breaking Teltonika Routers Three Ways

Discover the vulnerabilities of Teltonika routers in this groundbreaking research by Team82. Explore three effective methods used to breach the security of these routers, providing valuable insights...

claroty.com
24
The printer goes brrrrr, again! synacktiv.com/publications/t…

The printer goes brrrrr, again!

The printer goes brrrrr, again!

synacktiv.com
22
FriendlyName Buffer Overflow Vulnerability in Wemo Mini Smart Plug V2 Devices sternumiot.com/iot-blog/mini…

‘FriendlyName’ Buffer Overflow Vulnerability in Wemo Smart Plug V2 | Sternum IoT

Manufacturer chooses not to patch the Sternum-identified buffer overflow vulnerability (CVE-2023-27217) in the Wemo Mini Smart Plug V2.

sternumiot.com
24
AI Hacking Games (Jailbreak CTFs) securitycafe.ro/2023/05/15/a…
1
1
46
Prompt injection explained, with video, slides, and a transcript simonwillison.net/2023/May/2…

Prompt injection explained, with video, slides, and a transcript

I participated in a webinar this morning about prompt injection, organized by LangChain and hosted by Harrison Chase, with Willem Pienaar, Kojin Oshiba (Robust Intelligence), and Jonathan Cohen and...

simonwillison.net
30
Release Ghidra 10.3 NationalSecurityAgency/ghidra github.com/NationalSecurityA…
36
Intel Issues New CPU Microcode Going Back To Gen8 For New, Undisclosed Security Updates phoronix.com/news/Intel-12-M…

Intel Issues New CPU Microcode Going Back To Gen8 For New, Undisclosed Security Updates

Well, this is a bit strange..

phoronix.com
24
On Ashton Kutcher and Secure Multi-Party Computation blog.cryptographyengineering…

On Ashton Kutcher and Secure Multi-Party Computation

Back in March I was fortunate to spend several days visiting Brussels, where I had a chance to attend a panel on “chat control”: the new content scanning regime being considered by the …

blog.cryptographyengineering.com
15
Testing a new encrypted messaging app's extraordinary claims crnkovic.dev/testing-convers…

Testing a new encrypted messaging app's extraordinary claims

How I breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger.

crnkovic.dev
18
PwnAssistant - Controlling /home's via a Home Assistant RCE elttam.com/blog/pwnassistant…

PwnAssistant - Controlling /home's via a Home Assistant RCE - elttam

How we found a critical pre-authentication RCE in Home Assistant, exploring the attack surface and publishing advisories including CVE-2023-27482.

elttam.com
1
44
Stockfish, a very popular chess engine, has a buffer overflow vulnerability due to unsanatized input github.com/official-stockfis…
18
Introducing resocks - An Encrypted Back-Connect SOCKS Proxy for Network Pivoting blog.redteam-pentesting.de/2…

Introducing resocks - An Encrypted Back-Connect SOCKS Proxy for Network Pivoting

Compromising a host in a company’s perimeter often creates the opportunity to pivot into an internal network. From there on, each additional compromised system may grant us access into further...

blog.redteam-pentesting.de
16
Load more