Director's cut with a soundtrack: https://youtu.be/ZQnb8kRMkHg.

This video demonstrates the exploitation of a vulnerability in the custom Samsung Qmage image codec via MMS. The exploit proof-of-concept achieves remote code execution with no user interaction…

In this article, we will look at performing static security of iOS applications starting from jailbreaking an iOS device, installing a…

Use Frida and Objection! By now you should know how to install Burp Suite and set it up to proxy your iOS device. If this is all you do then you will come up against TLS errors. You have to use Frida and Objection to inject an SSL bypass into the app you're…

WeChat communications conducted entirely among non-China-registered accounts are subject to pervasive content surveillance that was previously thought to be exclusively reserved for China-registered accounts.

CTI, threat intelligence, OSINT, malware, APT, threat hunting, threat analysis, CTF, cybersecurity, security

近期奇安信病毒响应中心在日常监测中，发现了一批针对中国、越南、马来西亚等国用户的钓鱼APP。

Writeup for CVE-2020-11108 covering how I found the vulnerability and how it can be exploited for fun/profit.

At 22, Marcus Hutchins put a stop to the worst cyberattack the world had ever seen. Then he was arrested by the FBI. This is his untold story.

On May 1, 2020, a new version of Android BankBot (aka Anubis, Nautilus Bot) was spotted. The malware poses as an COVID-19 alert…

Extract endpoints from APK files. Contribute to ndelphit/apkurlgrep development by creating an account on GitHub.

Hey guys! Today we're taking a look at a project I've been working on recently - a kernel function tracing tool!

Hopefully you enjoy!

Follow me on Twitter - https://twitter.com/bellis1000

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the broader U.S. Government are providing this technical guidance to advise IT security professionals at public and private sector organizations to…

Criminals are using an old certificate to sign a malware that takes advantage of
the COVID-19 pandemic situation, preying on people’s need for information.

By Warren Mercer, Paul Rascagneres and Vitor Ventura.


News summary

* Thai Android devices and users are being targeted by a modified version of DenDroid we are calling "WolfRAT," now targeting messaging apps like WhatsApp, Facebook Messenger and Line.…

ESET researchers have analyzed an extremely dangerous Android app that can wipe out the victim’s bank account or cryptocurrency wallet and take over their email or social media accounts. Called "DEFENSOR ID", the banking trojan requires a single action from…

The new unc0ver jailbreak relies on a vulnerability that the researcher who found it says Apple is unaware of.

We will look into a few examples of suspicious-looking ad modules that we discovered in popular apps earlier this year.

Promon researchers have discovered a new elevation of privilege vulnerability in Android that allows hackers to gain access to almost all apps.