radu motspan retweeted
golang.org/doc/go1.14
"Go binaries on Windows now have DEP (Data Execution Prevention) enabled."
radu motspan retweeted
More on DCS security in our power plant automation research github.com/klsecservices/SPP… from #36c3 talk media.ccc.de/v/36c3-10689-on…. Now with DIY assessment, wordlists and awesome visuals.
tldr; learn to do basic assessment by yourself, ask uncomfortable questions, update your DCS
radu motspan retweeted
Turbines are everywhere, also on #36c3 at #dijkstra! Good thing, they are overcomplicated, with huge attack surface, hard coded credentials and weak hashing schemas. Oh, shi... Nice talk by @kl_secservices team. /cc:@repdet @_moradek_ @Alender911 @epotseluevskaya @zero_wf @574rz
Investigating Windows Graphics Vulnerabilities: A Reverse Engineering and Fuzzing Story ixiacom.com/company/blog/inv…
radu motspan retweeted
In a joint presentation at #KasperskyICS conference @repdet and @574rz talk about #CNC machines security: if there are fail compilations of something on YouTube, certainly some work has to be done
radu motspan retweeted
We've gathered some statistical data based on results of security assessment engagements performed in 2017 by Kaspersky Lab Security Services team. github.com/klsecservices/Pub…
radu motspan retweeted
cpu_rec - a tool that recognizes cpu instructions in an arbitrary binary file. It can be used as a standalone tool, or as a plugin for binwalk. github.com/airbus-seclab/cpu…
radu motspan retweeted
New Tool Alert: CMakerer is an open source tool that was created to deal with the problem of tricky-to-load C/C++ codebases
nccgroup.trust/us/about-us/n…
radu motspan retweeted
Security of Sarian OS whitepaper github.com/klsecservices/sar… by Danila Parnishchev (@zero_wf). From #reconbrx talk on #OTsecurity and industrial network devices recon.cx/2018/brussels/talks…. All acknowledged vulnerabilities were timely fixed by Digi forms.na1.netsuite.com/app/s…
radu motspan retweeted
GE fixes critical vulnerabilities in #digitalsubstation equipment D60 v7 series: CVE-2018-5475 and CVE-2018-5473 @k_v_nesterov. @ICSCERT advisory go.usa.gov/xnFCN. Releases from the same research available here github.com/rigmar/Recon2017 by @_rigmar_
radu motspan retweeted
BlueHat IL 2018 - Saar Amar - Linux Vulnerabilities Windows Exploits: Es... youtu.be/3deJvbBHET4
radu motspan retweeted
Google Chrome V8 Use-After-Free Vulnerability + Exploit by Zhao Qixun (CVE-2017-15399):
bugs.chromium.org/p/chromium…
radu motspan retweeted
I released some V8 vuls cases which they were fixed in about November 2017 to study.
github.com/xuechiyaobai/V8_N…
radu motspan retweeted
Finally got round to writing up a overview of few of my recent Apple macOS/ios priv esc vulns. labs.mwrinfosecurity.com/adv… and labs.mwrinfosecurity.com/adv… also labs.mwrinfosecurity.com/adv…
radu motspan retweeted
Figured for tweet #666, should post something 'naughty' 😈 like how Apple's AMDRadeonX4150 kext appears to suffer from a subtle kernel bug! Details: objective-see.com/blog/blog_… Bug is currently unpatched & affects latest version of macOS (10.13.2) 🍎🤒☠️ #ring0 #oops #tgif
radu motspan retweeted
Thanks for the generous of Google, it's a Pleasant cooperation with android security team, especially, Thanks @mayankjain747 for all your helps in the process of this submission. xitter.cf/mayankjain747/status/9…
radu motspan retweeted
A new vulnerability called AppleJPEGDriver-memleak found in iOS 11.2 Beta. It may contribute to future development of jailbreak for iOS 11.2. #RETWEET
radu motspan retweeted
An iOS kernel introspection tool.
github.com/bazad/memctl
