Preface In October 2023 I learned about HTTP/2 Rapid Reset attack, dubbed “the largest DDoS attack to date”. I didn’t have deep knowledge of HTTP/2 back then. I knew its basics like frames or HPACK but I was focusing more on HTTP/1.1 protocol and programming…

TL;DR : I found a bug which allows negativizing or increasing or bricking the claps count of any article/comment, which has indirect…

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9...

"Engineers are optimistic they can find a way for the FDS to operate normally."

"I told a friend I was making a joke project, then explained. She said she wasn't sure when to laugh. I'm not sure either."

Code shines up nicely in production, says Chocolate Factory's Bergstrom

Cisco Talos discovered a new threat actor we’re calling “CoralRaider” that we believe is of Vietnamese origin and financially motivated. CoralRaider has been operating since at least 2023, targeting victims in several Asian and Southeast Asian countries.

FortiGuard Labs uncovered a threat actor using ScrubCrypt to spread VenomRAT along with multiple RATs. Learn more. …

Does your Interceptor.php keep getting infected? Attackers are using a new method for malware persistence on Magento servers. Sansec discovered a cleverly cr...

Exploiting file read vulnerabilities in Gradio to steal secrets from Hugging Face Spaces.

Reverse Tunnels in Go over HTTP/3 and QUIC. Contribute to flipt-io/reverst development by creating an account on GitHub.

At Anchor, we see certificate provisioning as table-stakes for any certificate management product, and we’re obsessive about solving these distribution problems. We want to change how developers think about internal CAs.

Introduction
Hello, I’m RyotaK ( @ryotkak
), a security engineer at Flatt Security Inc.
Recently, I reported multiple vulnerabilities to several programming languages that allowed an attacker to perform command injection on Windows when the specific conditions…

Cisco Talos is disclosing a new threat actor we deemed “Starry Addax” targeting mostly human rights activists, associated with the Sahrawi Arab Democratic Republic (SADR) cause with a novel mobile malware.

Last week, the Internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe that didn’t happen, so it won’t get much attention—but it should. There’s an important moral to the story…

Before I start, I want to give a shout to the Charles Schwab Threat Intelligence team and our leadership for giving me the opportunity, time, and opinions to give this some legs. As the new Unstructured Hunt lead, this was a thrilling find.

DLL code for testing CVE-2024-21378 in MS Outlook. GitHub Gist: instantly share code, notes, and snippets.