Happy to share that some of my reports were fixed in the new macOS version :)
support.apple.com/en-us/1212…
Tal Lossos retweeted
Had an amazing experience at @1ns0mn1h4ck this year, talking about adding NVMe-of/TCP to syzkaller.
In case you want to check it out:
Here’s the recording - m.youtube.com/watch?v=Jc25CM…
And the slides - download.scrt.ch/insomnihack…
Quite a few people asked me if we’ve found more vulnerabilities in the NVMe Linux kernel driver. So, here is my answer!
Check out the blog post of my colleague Alon on his journey of fuzzing the driver with some lovely findings!
Be sure to check out my recent blog about my latest research “Your NVMe had Been Syz’ed”. In there I show how to add new subsystems to syzkaller, and how to use it to find new vulnerabilities.
cyberark.com/resources/threa…
Tal Lossos retweeted
Finally got around to publishing this post on a 𝙘𝙧𝙞𝙩𝙞𝙘𝙖𝙡 𝙫𝙪𝙡𝙣𝙚𝙧𝙖𝙗𝙞𝙡𝙞𝙩𝙮 𝙞𝙣 𝙖 #𝗖𝗼𝘀𝗺𝗼𝘀𝗦𝗗𝗞 𝙘𝙝𝙖𝙞𝙣!
Dive in if you're interested in the security of the #IBC protocol and the Cosmos in general 🪐✨
cyberark.com/resources/threa…
Tal Lossos retweeted
Interesting reading on how to use Static Code Analysis tools for finding vulnerabilities (with a NULL Pointer Dereference in the NVMe driver of the Linux kernel as practical example)
Credits @TalLossos (@TalLossos)
cyberark.com/resources/all-b…
#Linux #kernel #infosec
Tal Lossos retweeted
Check it out! Our resident expert reverse engineer @TalLossos giving his talk on at REcon Montreal.
Topic: Vulnerabilities in the NVMe (Non-Volatile Memory Express) protocol and its extension, NVMeoF (NVMe over Fabrics).
The recorded session of my talk at @reconmtl is live!
youtube.com/watch?v=szCZH6xz…
Tal Lossos retweeted
#HITB2023HKT
The blog post version of this talk is now available vul.360.net/archives/699 and the slides are here conference.hitb.org/hitbsecc…
I will share my findings of the rarely explored disk controller attack interface on VMware hypervisors @HITBSecConf this summer.
conference.hitb.org/hitbsecc…
#HITB2023HKT
Tal Lossos retweeted
Did you know that NVMe over TCP exists? I sure didn't, but it's a super interesting attack vector.
@TalLossos just put out an excellent blogpost of using CppCheck to find a null pointer deference in the Linux kernel’s NVMe driver. Check it out!
cyberark.com/resources/threa…
A deep dive into how we've found some cool low-hanging-fruits in the Linux kernel 🐞🔍cyberark.com/resources/threa…
Very excited to present my talk at @HITBSecConf !
Cya soon :)
conference.hitb.org/hitbsecc…
#HITB2023HKT
#HITB2023HKT NVMe: New Vulnerabilities Made Easy - Tal Lossos - conference.hitb.org/hitbsecc…
Tal Lossos retweeted
Recon 2023 Talk selection has been released, cfp.recon.cx/2023/featured/ The Conference schedule will be published soon. Register here: recon.cx/2023/index.html See you in June!
#cybersecurite #REcon2023 #ReverseEngineering
Tal Lossos retweeted
.@TalLossos explaining how he's exploiting 3rd party kernel modules.
In this case, OpenRazer...
#RSAC2023 #opensource #bufferoverlow #fuzzing
I'm excited to share that I will present one of my latest projects at @reconmtl !
Stay tuned and cya there :)
We are proud to announce Tal Lossos @TalLossos as a speaker for Recon 2023! Thanks a lot for your contribution!
See full talk description here:recon.cx/2023/presentations.… #ReverseEngineering #REcon2023 #cybersecurite
Had a blast.
You should definitely check it out if you wanna see how I've exploited it to a LPE, in a colorful way of course 🔴🔵🟢🟡
🔴🔵🟢🟡Colorful #vulnerabilities on your ⌨️keyboard!
💡Tal @TalLossos & Eran @EranShimony shared their analysis & investigation of Razer's #Linuxkernel module, followed by finding several #0day bugs with a live demo
🍿Enjoy the talk▶️youtu.be/jaAQcqLKdIA
#NullconDE2023
Lovely conference with lovely people.
Thanks @nullcon !
⌨️Colorful🔴🔵🟢#vulnerabilities on your 🕹️keyboard!
💡Tal @TalLossos & Eran @EranShimony sharing their fantastic analysis & investigation of Razer's #Linux #kernel module, followed by finding several #0day bugs with a live demo
#NullconDE2023 #Infosec #Conference
Tal Lossos retweeted
Your keyboard may not seem like a #cybersecurity threat… until you read what @TalLossos of @CyberArkLabs discovered. spr.ly/60113kjBR
Tal Lossos retweeted
@OmerTsarfati and I harnessed ChatGPT to create a #polymorphic #malware, which uses ChatGPT on runtime to load and mutate new code that easily bypasses the content-filter. We are looking forward to continuing and research the topic -:)
cyberark.com/resources/threa…
Stay tuned :)
CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe: Posted by Tal Lossos on Jan 12Hi all,
# Description
A NULL Pointer Dereference bug in nvmet_setup_auth
(drivers/nvme/target/auth.c) can be triggered remotely to cause a DoS.
Since the bug… dlvr.it/Sgn7qP