All posts in Uncategorized

■■■■□ ⚪️⚪️⚪️🔺🔺⚪️ ⚪️⚪️🔺⚪️🔺⚪️🔺 Exploit for Exynos devices to gain ACE in BootROM context. A length parameter left unchecked in the USB Control Request code allows iRAM to be dumped, modified and resent to the device, allowing for code execution. https://github.com/halal-beef/houston-pub

■■□□□ Why DMARC’s new “NP” tag can fail with DNSSEC. https://dmarcwise.io/blog/dmarc-np-incompatibility-with-dnssec

■■■■■ ☁️ ☁️ Floci – A Fast, Free & Open-Source AWS Local Emulator Floci is an open-source AWS emulator that lets developers run AWS services locally without an AWS account, authentication tokens, or feature restrictions. Designed as a lightweight alternative to LocalStack Community, it supports 68+ AWS services with real Docker-backed execution for higher fidelity.…

■■■■□ Exploring cross-domain & cross-forest RBCD: part 2 https://www.synacktiv.com/en/publications/exploring-cross-domain-cross-forest-rbcd-part-2

FROST side channel correlation attack.

■■■□□ Disinformation: Subtle but effective. https://www.linkedin.com/posts/tim-de-zitter_small-lie-but-still-useful-as-a-case-study-share-7476891210545192960-kCdo/

■■■■■ A new Linux kernel exploit (CVE-2026-46331) gets root without modifying a single file on disk. It poisons the cached copy of /bin/su in memory. The binary on disk stays untouched. File-integrity checks come back clean. The root shell is already open. https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html

■■□□□ The Art of the Query: Advanced Google Dorking Matrices for OSINT Investigators. https://preciousvincentct.medium.com/the-art-of-the-query-advanced-google-dorking-matrices-for-osint-investigators-ab129564af38

■■■■■ Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager. https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager

■■■□□ AnyDesk Unauthenticated Zero-Click RCE; a thread 🧵 https://x.com/i/status/2069178874118668364