All posts by John Doe

■■■■□ A proof-of-concept program has been released to demonstrate a so-called monitoring “blind spot” in how some Linux antivirus and other endpoint protection tools use the kernel’s io_uring interface. That interface allows applications to make IO requests without using traditional system calls. That’s a problem for security tools that rely on syscall monitoring to detect…

■■■■■ Right-Click Execution – A Tale of Windows LNK NTLM Leak. https://zeifan.my/Right-Click-LNK/

■■■□□ After #PahalgamAttack, The Indian Army College of Nursing was hacked by the infamous cyber-hacktivist group, Team_Insane_PK. Since changing their team name in May 2023, they’ve been actively hacking websites every day. From critical infrastructure to military and intelligence agencies, they’ve been gathering sensitive data. https://www.linkedin.com/posts/louis-hur-87313019_pahalgamterrorattack-cybersecurity-hacktivism-ugcPost-7321580713974067200-WmMP

🌐 Pwning the Ladybird browser. https://jessie.cafe/posts/pwning-ladybirds-libjs/

■■■■■ Zero-Day: Wormable Zero-Click Remote Code Execution (RCE) in AirPlay Protocol Puts Apple & IoT Devices at Risk. https://www.oligo.security/blog/airborne

■■■■■ And another AMSI bypass with a different DLL/patch. 🔒 https://medium.com/@andreabocchetti88/ghosting-amsi-cutting-rpc-to-disarm-av-04c26d67bb80

■■■■□ USD 64,350 earned in bug-bounties for various organisations by scanning for deleted (or at least presumed) Git files. https://medium.com/@sharon.brizinov/how-i-made-64k-from-deleted-files-a-bug-bounty-story-c5bd3a6f5f9b

■■■□□ Researchers reveal a collection of bugs known as AirBorne that would allow any hacker on the same Wi-Fi network as a third-party AirPlay-enabled device to surreptitiously run their own code on it. https://www.wired.com/story/airborne-airplay-flaws/

■■■□□ Pwnagotchi, cheap wifi hacking device. 📹https://youtu.be/puOkriFPVtQ

■□□□□ Kali Linux warns of update failures after losing repo signing key. https://www.bleepingcomputer.com/news/linux/kali-linux-warns-of-update-failures-after-losing-repo-signing-key/