b0ring retweeted
Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness -
Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack.
Check arxiv.org/abs/2604.20801
b0ring retweeted
TF is too mature for bug hunting, so we introduced a new surface for u guys.
V8 is leaving the Sea-of-Nodes Turbofan compiler for the shores of CFG, read all about it in my colleague's blog post: v8.dev/blog/leaving-the-sea-…
b0ring retweeted
virustotal.com/gui/file/9f18… "Desktop Window Manager local privilege escalation.docx"
We discovered a new zero-day in Microsoft Windows used in attacks with QakBot and other malware. It was just fixed as CVE-2024-30051, and this time it all started with a curious find on VirusTotal… @r00tten securelist.com/cve-2024-3005…
b0ring retweeted
That is actually a lot harder than people think. iOS updates or reinstalls or or have the habit to turn these features on again. Blame Apple for these dark patterns to make everyone use it
b0ring retweeted
A technical breakdown of #iOSTriangulation securelist.com/operation-tri… via @kucher1n @bzvr_ @2igosha @oct0xor & Valentin Pashkov #TheSAS2023
b0ring retweeted
We've talked about #iOSTriangulation's stealth previously, however in our latest article, we look in detail at TriangleDB - the main implant.
The level of stealth included using validators to ensure the exploits weren't delivered to security researchers.
securelist.com/triangulation…
b0ring retweeted
"𝐈𝐭 𝐢𝐬 𝐭𝐡𝐞 𝐦𝐨𝐬𝐭 𝐜𝐨𝐦𝐩𝐥𝐢𝐜𝐚𝐭𝐞𝐝 𝐚𝐭𝐭𝐚𝐜𝐤 𝐭𝐡𝐚𝐭 𝐜𝐚𝐧 𝐡𝐚𝐩𝐩𝐞𝐧 𝐭𝐨 𝐚 𝐝𝐞𝐯𝐢𝐜𝐞."
In this year's SAS we'll be going into further detail with #iOSTriangulation including how we discovered & much more.
Watch ⇒ youtu.be/BQzLgSNuZCc #TheSAS2023
b0ring retweeted
Kaspersky released a new blogpost today, documenting an iOS 0day + zero-click exploit used to target cybersecurity researchers. The scope and full victimology are still unknown.
securelist.com/operation-tri…
b0ring retweeted
My reproduction of the ITW CVE-2022-26485 exploit.
github.com/mistymntncop/CVE-…
b0ring retweeted
#ESETresearch uncovers new Mac malware DazzleSpy, delivered using watering hole on a pro-democracy Hong Kong radio station website. Payload was launched as root without user interaction, using exploits for Safari and macOS. @marc_etienne_ @cherepanov74 welivesecurity.com/2022/01/2… 1/7
b0ring retweeted
3 actively exploited 0-days in today's Patch Tuesday:
CVE-2021-33771 - Windows Kernel EoP (MSTIC/MSRC)
CVE-2021-34448 - Scripting engine (@dnpushme)
CVE-2021-31979 - Windows Kernel EoP
b0ring retweeted
Android has updated the May security with notes that 4 vulns were exploited in-the-wild.
Qualcomm GPU: CVE-2021-1905, CVE-2021-1906
ARM Mali GPU: CVE-2021-28663, CVE-2021-28664
source.android.com/security/…
b0ring retweeted
I don't usually engage in silly Twitter "debates", but: I taught myself security in large part by reading and analyzing exploit code others published. If you find any of my security work valuable, consider I likely wouldn't be doing it if not for public exploit sharing.
b0ring retweeted
Currently my favorite bug of the year. bugs.chromium.org/p/chromium…
b0ring retweeted
I'm excited to share our research in which we show that a 0-Day attributed to the Chinese APT31 was actually caught by the APT and replicated from Equation Group's 0-Day exploit for the same vulnerability. Here are some of the highlights — A long thread >>
research.checkpoint.com/2021…
b0ring retweeted
One 0-day from today's Microsoft Patch Tuesday is marked as exploited in the wild: CVE-2021-1647, a RCE in Microsoft Defender. msrc.microsoft.com/update-gu…