Blahalla

BLAHALLA

Last Week in Security (LWiS) - 2025-05-19

blog.badsectorlabs.com · 1 year, 2 months ago

Certipy 5 ( @ly4k ), MobileIron pwnage ( @chudyPB ), new CRTO pricing ( @ZeroPointSec ), Volatility 3 parity ( @volatility ), and more!
Firefox Security Response to pwn2own 2025

blog.mozilla.org · 1 year, 2 months ago

At Mozilla, we consider security to be a paramount aspect of the web. This is why not only does Firefox have a long running bug bounty program but also mature … Read more
Last Week in Security (LWiS) - 2025-05-12

blog.badsectorlabs.com · 1 year, 3 months ago

SysAid RCE ( @SinSinology + @watchtowrcyber ), defendnot ( @es3n1n ), iOS widget hacks ( @brycebostwick1 ), Sword of Secrets ( @GiliYankovitch ), and more!
Last Week in Security (LWiS) - 2025-05-05

blog.badsectorlabs.com · 1 year, 3 months ago

ProxyBlobing ( @atsika ), SonicWall n-days ( @SinSinology ), Drag and Pwnd ( @d4d89704243 ), Loki C2 2.0 ( @0xBoku ), GraphSpy 1.5.0 ( @RedByte1337 ), and more!
‘Source of data’: are electric cars vulnerable to cyber spies and hackers?

www.theguardian.com · 1 year, 3 months ago

British defence firms have reportedly warned staff not to connect their phones to Chinese-made EVs Mobile phones and desktop computers are longstanding targets for cyber spies, but how vulnerable are electric cars? On Monday the i newspaper claimed that British defence firms working for the UK government have warned staff against connecting or pairing their phones with Chinese-made electric cars, due to fears that Beijing could extract sensitive data from the devices. Continue reading
Last Week in Security (LWiS) - 2025-04-28

blog.badsectorlabs.com · 1 year, 3 months ago

TTTracer unmasks sleep obfs ( @felixmpw ), GitHub spoofing ( @pfiatde ), Synology RCE ( @ret2systems ), netify scraper ( @Jhaddix ), and more!
Ofcom closes technical loophole used by criminals to intercept mobile calls and texts

www.theguardian.com · 1 year, 3 months ago

Regulator acts on leasing of ‘global title’ numbers after industry efforts to tackle problem were ineffective The UK communications regulator Ofcom is banning mobile operators from leasing numbers that can be used by criminals to intercept and divert calls and messages, including security codes sent by banks to customers. Ofcom said it would stop the leasing of “global titles”, special types of phone numbers used by mobile networks to support services to make sure messages and calls reach the intended recipient. Continue reading
Last Week in Security (LWiS) - 2025-04-21

blog.badsectorlabs.com · 1 year, 3 months ago

CVE drama ( @MITREcorp ), Control Flow Hijacking w/Data Pointers ( @0xLegacyy ), Copilot in notepad ( @zux0x3a ).NET AOT in Ghidra ( @washidev ), CSWSH in 2025 ( @IncludeSecurity ), 300ms to Admin ( @compasssecurity ), and more!
Last Week in Security (LWiS) - 2025-04-14

blog.badsectorlabs.com · 1 year, 3 months ago

WinRMS relay ( @Defte ), plaintext Zip attacks ( @pfiatde ), SQL Server Crypto deep dive ( @xpn ), FindUnusualSessions ( @podalirius ), and more!
Last Week in Security (LWiS) - 2025-04-07

blog.badsectorlabs.com · 1 year, 4 months ago

2 weeks worth of news, techniques, tools and exploits!
Updated GPG key for signing Firefox Releases

blog.mozilla.org · 1 year, 4 months ago

The GPG key used to sign the Firefox release manifests is expiring soon, and so we’re going to be switching over to a new signing subkey shortly. The GPG fingerprint … Read more
Birthday freebies: how to cash in on UK retailers’ gifts and discounts

www.theguardian.com · 1 year, 4 months ago

Join a loyalty scheme and you often get a reward or discount on your special day, but it may have strings attached Celebrating your birthday isn’t just about getting presents and cards from family and friends. Signing up to loyalty schemes and newsletters can give you access to a host of freebies, deals and discounts from retailers to mark the big day. With my birthday on the horizon I decided to look at what was on offer, and see which gifts came with some small print. Continue reading
Last Week in Security (LWiS) - 2025-03-24

blog.badsectorlabs.com · 1 year, 4 months ago

Next.js auth bypass ( @zhero + @inzo ), ServiceNow for red teamers ( @invictus ), Veeam RCE - again! ( @chudyPB ), ArgFuscator ( @Wietze ), and more!
Last Week in Security (LWiS) - 2025-03-17

blog.badsectorlabs.com · 1 year, 4 months ago

Evilginx Pro ( @mrgretzky ), Pre-auth RCE in a CMS ( @chudyPB ), GOAD ADCS ( @M4yFly ), YouTube email disclosure ( @brutecat ), SAML parser bug (@ulldma.bsky.social/@[email protected]), and more!
Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0

blog.mozilla.org · 1 year, 5 months ago

Mozilla remains committed to fostering a secure, agile, and transparent Web PKI ecosystem. The new Mozilla Root Store Policy (MRSP) v3.0, effective March 15, 2025, introduces critical updates to strengthen … Read more
Last Week in Security (LWiS) - 2025-03-10

blog.badsectorlabs.com · 1 year, 5 months ago

Detection Studio ( @sifex ), SCCM discovery account decryption ( @unsignedsh0rt ), FindProcessesWithNamedPipes ( @podalirius ), Windows LPE ( @MrAle98 ), and more!
Last Week in Security (LWiS) - 2025-03-03

blog.badsectorlabs.com · 1 year, 5 months ago

Ligolo-MP ( @ttpreport ), Bybit hack via CI ( @adnanthekhan ), FindGPPPasswords ( @podalirius ), ComDotNetExploit ( @T3nb3w ), and more!
Last Week in Security (LWiS) - 2025-02-25

blog.badsectorlabs.com · 1 year, 5 months ago

ADIDNS Parser ( @thebitdiddler ), Parallels LPE ( @patch1t ), PowerChell ( @itm4n ), SACL Scanner (Alexander DeMine of @SpecterOps ), and more!
‘The bot asked me four times a day how I was feeling’: is tracking everything actually good for us?

www.theguardian.com · 1 year, 5 months ago

Gathering data used to be a fringe pursuit of Silicon Valley nerds. Now we’re all at it, recording everything from menstrual cycles and mobility to toothbrushing and time spent in daylight. Is this just narcissism redesigned for the big tech age? I first heard about my friend Adam’s curious new habit in a busy pub. He said he’d been doing it for over a year, but had never spoken to anyone about it before. He had a furtive look around, then took out his phone and showed me the product of his burning obsession: a spreadsheet. This was not a record of his annual tax return or numbers he was crunching for work (Adam is a data scientist). Instead, it was a spreadsheet recording the minutiae of his life, with dozens of columns tracking every element of his daily routine. It all started, he told me, because of a recurring argument with his boyfriend. His partner didn’t think they spent enough time together, but Adam thought that they did. There was only one way to settle this, he decided: cold, hard data. So he began keeping a note of the days they saw each other and the days they didn’t. Continue reading
Apple removes advanced data protection tool in face of UK government request

www.theguardian.com · 1 year, 5 months ago

Apple says removal of tool after government asked for right to see data will make iCloud users more vulnerable Business live, latest updates Apple has taken the unprecedented step of removing its strongest data security tool from customers in the UK, after the government demanded “backdoor” access to user data. UK users will no longer have access to the advanced data protection (ADP) tool, which uses end-to-end encryption to allow only account holders to view items such as photos or documents they have stored online in the iCloud storage service. Continue reading
Last Week in Security (LWiS) - 2025-02-17

blog.badsectorlabs.com · 1 year, 5 months ago

PAN-OS auth bypass ( @hashkitten ), Outlook drafts as C2 ( @elasticseclabs ), Ludus powered SocGholish analysis ( @RussianPanda9xx ), kernel UAF ( @h0mbre ), and more!
Last Week in Security (LWiS) - 2025-02-10

blog.badsectorlabs.com · 1 year, 6 months ago

Mythic C/BOF support ( @itsafeature ), Ludus guide ( @sherifninja ), Window shadow stacks ( @33y0re ), Orbit scanner ( @BHinfoSecurity ), and more!
Global ransomware payments plunge by a third amid crackdown

www.theguardian.com · 1 year, 6 months ago

Money stolen falls from record $1.25bn to $813m as more victims refuse to pay off criminal gangs Ransomware payments fell by more than a third last year to $813m (£650m) as victims refused to pay cybercriminals and law enforcement cracked down on gangs, figures reveal. The decline in such cyber-attacks, where access to a computer or its data is blocked and money is then demanded to release it, came despite a number of high-profile cases in 2024, with victims including NHS trusts in the UK and the US doughnut firm Krispy Kreme. Continue reading
DeepSeek blocked from some app stores in Italy amid questions on data use

www.theguardian.com · 1 year, 6 months ago

Italian and Irish regulators want answers on how data harvested by chatbot could be used by Chinese government The Chinese AI platform DeepSeek has become unavailable for download from some app stores in Italy as regulators in Rome and in Ireland demanded answers from the company about its handling of citizens’ data. Amid growing concern on Wednesday about how data harvested by the new chatbot could be used by the Chinese government, the app disappeared from the Apple and Google app stores in Italy with customers seeing messages that said it was “currently not available in the country or area you are in” for Apple and the download “was not supported” for Google, Reuters reported. Continue reading
Threat of cyber-attacks on Whitehall ‘is severe and advancing quickly’, NAO says

www.theguardian.com · 1 year, 6 months ago

Audit watchdog finds 58 critical IT systems assessed in 2024 had ‘significant gaps in cyber-resilience’ The threat of potentially devastating cyber-attacks against UK government departments is “severe and advancing quickly”, with dozens of critical IT systems vulnerable to an expected regular pattern of significant strikes, ministers have been warned. The National Audit Office (NAO) found that 58 critical government IT systems independently assessed in 2024 had “significant gaps in cyber-resilience”, and the government did not know how vulnerable at least 228 ageing and outdated “legacy” IT systems were to cyber-attack. The NAO did not name the systems for fear of helping attackers choose targets. Continue reading
Last Week in Security (LWiS) - 2025-01-27

blog.badsectorlabs.com · 1 year, 6 months ago

0-click deanonymization ( @hackermondev ), Subaru hacks ( @samwcyo + @infosecau ), 🍪 sandwitch ( @d4d89704243 ), Entra Connect attacks ( @hotnops ), Kerberos relaying via HTTP ( @crocobyte ), and more!
Last Week in Security (LWiS) - 2025-01-20

blog.badsectorlabs.com · 1 year, 6 months ago

Windows LPE ( @MrAle98 ), CLR OPSEC ( @passthehashbrwn ), WinRM BOFs ( @falconforceteam ), Bitlocker bypass ( @Neodyme ), BloodHound CLI ( @cmaddalena ), and more!
Last Week in Security (LWiS) - 2025-01-13

blog.badsectorlabs.com · 1 year, 6 months ago

A Windows Rootkit ( @colehouston44 ), unholy PDFs ( @thomasrinsma ), more Ivanti RCE ( @SinSinology ), macOS exploits ( @patch1t + @MsftSecIntel + @wh1te4ever ), and more!
Last Week in Security (LWiS) - 2025-01-06

blog.badsectorlabs.com · 1 year, 7 months ago

Kick off 2025 with, fresh news, new exploits, techniques, tools, and more!
Last Week in Security (LWiS) - 2024-12-16

blog.badsectorlabs.com · 1 year, 7 months ago

LDAP RCE 😵, worst.fit ( @orange8361 + @splitline ) Grok AI vulns ( @wunderwuzzi23 ), automating exploits ( @FuzzySec + @chompie1337 ), and more!
Last Week in Security (LWiS) - 2024-12-09

blog.badsectorlabs.com · 1 year, 8 months ago

Vuln finding with graphs ( @two06 ), review of Postex kit ( @RastaMouse ), OpenWRT firmware upgrade vuln ( @ryotkak ), iOS decompilation tool ( @lauriewired ), and more!
Last Week in Security (LWiS) - 2024-12-02

blog.badsectorlabs.com · 1 year, 8 months ago

Windows LPE ( @SecuriTeamSSD ), Nighthawk 0.3.3 ( @MDSecLabs ), Advanced Cobalt Strike Usage ( @RastaMouse ), Webcam LED control ( @andreyknvl ), AI/ML attacks ( @olivierboschko ), and more!
Last Week in Security (LWiS) - 2024-11-25

blog.badsectorlabs.com · 1 year, 8 months ago

Sitecore Exploit ( @assetnote + @plopz0r ), CI/CD CTF ( @MagisterQuis ), new Mythic agent ( @silentwarble ), cmake based win32 shellcode template ( @ilove2pwn ), and more!
Last Week in Security (LWiS) - 2024-11-18

blog.badsectorlabs.com · 1 year, 8 months ago

Arc browser RCE ( @RenwaX23 ), more Fortinet woes ( @SinSinology ), PowerHuntShares v2 ( @nullbind ), maketokencert ( @freefirex2 ), BOFs without DFR ( @netbiosX ), and more!
Last Week in Security (LWiS) - 2024-11-12

blog.badsectorlabs.com · 1 year, 8 months ago

🕵️📱 Mysterious iPhone reboots, Tor under attack, Citrix Unauth RCE ( @SinSinology ), GitHub Actions attack ( @adnanthekhan ), and more!
Last Week in Security (LWiS) - 2024-11-04

blog.badsectorlabs.com · 1 year, 9 months ago

WAF bypasses ( @MDSecLabs ), sastsweep ( @chebuya ), Early Cascade injection ( @DaWouw ), and more!
Last Week in Security (LWiS) - 2024-10-28

blog.badsectorlabs.com · 1 year, 9 months ago

Delta Sues Crowdstrike ( @CrowdStrike ), Jenkins Post-Exploitation ( @TrustedSec ), PE embedded within a PNG ( @MalDevAcademy ), Prompt Injection to C2 ( @wunderwuzzi23 ), and more!
Last Week in Security (LWiS) - 2024-10-21

blog.badsectorlabs.com · 1 year, 9 months ago

VNC-Like over SCCM ( @netero1010 ), Use LLMs to find CVEs ( @ProtectAICorp ), New process 💉 technique ( @OutflankNL ), 💰 Big acquisition ( @Sophos ), and more!
Last Week in Security (LWiS) - 2024-10-14

blog.badsectorlabs.com · 1 year, 9 months ago

FortiGate exploit ( @watchtowrcyber ), Azure admin approval bypass ( @PedroGabaldon ), dylib 💉 in Teams ( @Coiffeur0x90 ), Ivanti Connect Secure vuln ( @buffaloverflow ), and more!
Behind the Scenes: Fixing an In-the-Wild Firefox Exploit

blog.mozilla.org · 1 year, 10 months ago

At Mozilla, browser security is a critical mission, and part of that mission involves responding swiftly to new threats. Tuesday, around 8 AM Eastern time, we received a heads-up from … Read more
Last Week in Security (LWiS) - 2024-10-07

blog.badsectorlabs.com · 1 year, 10 months ago

I-XRAY doxxing 🕶️ ( @AnhPhuNguyen1 + @CaineArdayfio ), TeamViewer LPE ( @PedroGabaldon ), C source generators ( @DragoQcc ), ⏲️-based user enum ( @nyxgeek ), and more!
Last Week in Security (LWiS) - 2024-09-30

blog.badsectorlabs.com · 1 year, 10 months ago

CUPS RCE ( @evilsocket ), driver vulns ( @vinopaljiri ), NamelessC2 release ( @trickster012 ), liveness detection bypass ( @CaptMeelo ), Windows LPE ( @ricnar456 ), and more!
Last Week in Security (LWiS) - 2024-09-23

blog.badsectorlabs.com · 1 year, 10 months ago

0-click macOS RCE ( @Turmio ), sudo iptables LPE ( @suidpit + @smaury92 ), SkeletonCookie ☠️🍪 ( @buffaloverflow ), and more!
Last Week in Security (LWiS) - 2024-09-16

blog.badsectorlabs.com · 1 year, 10 months ago

MSSQL domain privesc ( @nullbind ).mobi whois takeover ( @watchtowrcyber ), LLM CTF ( @bishopfox ), mac filesystem 🪄 ( @gergelykalman ), AlcaWASM writeup ( @suidpit ), and more!
Last Week in Security (LWiS) - 2024-09-09

blog.badsectorlabs.com · 1 year, 11 months ago

Windows heap overflow ( @esj4y ), Linux TCP UAF ( @v4bel ), Goffloader ( @BouncyHat ), Intune lat-movement ( @h4wkst3r ), browser attack detection ( @megaspl0it ), and more!
Last Week in Security (LWiS) - 2024-09-03

blog.badsectorlabs.com · 1 year, 11 months ago

argv[0] tampering ( @Wietze ), Moodle eval() misuse ( @RedTeamPT ), ntoskrnl.exe PoC ( @b1thvn ), 4x wappd exploits ( @hyprdude ), and more!
Last Week in Security (LWiS) - 2024-08-26

blog.badsectorlabs.com · 1 year, 11 months ago

"USDoD" doxed, VEH research ( @passthehashbrwn ), Defender exclusions ( @dazzyddos ), CSS history leak ( @TheXC3LL ), Cobalt Strike DNS listeners ( @VirtualAllocEx ), and more!
Last Week in Security (LWiS) - 2024-08-19

blog.badsectorlabs.com · 1 year, 11 months ago

DEF CON 32 Tools and Talks, Apache confusion ( Orange Tsai ), private TLDs ( @N7WEra ), UDL 🎣 ( @Oddvarmoe ), crash analysis ( @patrickwardle ), and more!
Last Week in Security (LWiS) - 2024-07-29

blog.badsectorlabs.com · 2 years ago

Specula ( @Oddvarmoe + @freefirex2 ), 🧵 namecalling ( @hasherezade ), North Korean 🇰🇵 agents, Llama 3.1 ( @Meta ), GraphSpy updates ( @RedByte1337 ), and more!
Last Week in Security (LWiS) - 2024-07-22

blog.badsectorlabs.com · 2 years ago

REx ( @br0k3ns0und ), EV charger exploits ( @ret2systems ), CerealKiller ( @two06 ), payload encoding ( @MoritzLThomas ), responder honeypot ( @lawndoc ), and more!