Danny

[Danny @Danny__Wei]

Version v0.10.1 has been released, supporting TLS MITM and API Key injection. Sensitive keys can now be stripped from containers to prevent leakage caused by prompt injection. https://t.co/QUAv2d2xof

[Mitko Vasilev @iotcoi]

vArmor on my dev Aibrix K8s. AppArmor + eBPF + Seccomp + Envoy sidecar.

Built-in AI Agent Protection because giving a random LLM unrestricted outbound is Rue with your admin password.

My kids made me watch Eurhoria and now I run TikTok's open source sec code lol

[Ronen Shustin @ronenshh]

Our findings highlight security issues that could occur in any Kubernetes environment, recommended read for Kubernetes users and defenders. Read the full technical details here: https://t.co/eou3skT2AX

[grsecurity @grsecurity]

Tetragone: A Lesson in Security Fundamentals
https://t.co/ZFljwZn4HV

[Linux Kernel Security @linkersec]

The Dirty Pipe Vulnerability

An article by Max Kellermann about Dirty Pipe — a logical bug in the memory subsystem. The provided proof-of-concept only works starting from Linux kernel version 5.8 released in August 2020.

https://t.co/U98yxYp8Ep

[WithSecure Labs @FSecureLabs]

I'm not Zelda, I'm root! https://t.co/chuViRwSKU

[Kev @kevin_backhouse]

First blog post in a short series about some vulnerabilities that I found in Ubuntu's crash reporter earlier this year. I learned a lot from working on the exploits, so I am going to share some of the tips and tricks that I learned. https://t.co/0BGOBwUpNc

[axi0mX @axi0mX]

"#checkm8: The iPhone Exploit That Hackers Use to Research Apple’s Most Sensitive Code"

This is what the title of this write-up would be if it was a VICE article. This is a detailed write-up of the vulnerability I found and how the exploit really works. https://t.co/B8VYUQiSKU

[Danny @Danny__Wei]

@Jay__743 @dankrutka @dmorey @TheSteinLine Maybe there are some bots, but I am not.

[Ange @angealbertini]

A fancy IDAPython cheat sheet, with SVG
https://t.co/AECWv9Nehy

[Danny @Danny__Wei]

@dankrutka @dmorey @TheSteinLine Take a look at other reports. Things happening in Hong Kong cannot be called freedom.

[Orange Tsai 🍊 @orange_8361]

The last part of our Attacking SSL VPN series is out - The Golden Pulse Secure SSL VPN RCE Chain, with Twitter as Case Study! https://t.co/fZge5pfH13
"If you have a nuclear level weapon, when is it ready for public disclosure?"

[Tavis Ormandy @taviso]

I'm publishing some 🔥 research today, a major design flaw in Windows that's existed for almost *two decades*. I wrote a blog post on the story of the discovery all the way through to exploitation.
https://t.co/1DFW2VGQRb

[Danny @Danny__Wei]

@Qab The Edge’s CORS policy is so different from other browsers so that it can read files from a local domain.

[Arthur "Gerhart" Khudyaev @gerhart_x]

Docker container with Hyper-V isolation has much less devices in compare with Windows Sandbox container (DbgKit extention for WinDBG was used - https://t.co/uQvt5Vw6pP)

[Danny @Danny__Wei]

@0patch @hyp3rlinx I remember that the broker will also add a Medium mandatory label for downloaded files. This can be abused in some cases.

[Matt Miller @epakskape]

Great post!

Re: the spraying technique used, since Windows 8, 64-bit apps that optin to high entropy ASLR (like Chrome) have ~2TB of variance in where bottom up allocations start from, hence why there is a need to spray so much (3.5TB mentioned in the blog)

[Luan Herrera @lbherrera_]

It's finally out! A detailed explanation on how I could've performed a XS-Search attack on Google's bug tracker to find out vulnerable source code

https://t.co/QpgjGr8yNo #BugBounty @GoogleVRP

[Ivan Fratric 💙💛 @ifsecure]

The default whitelist was fun and all, but here is an actual click2play bypass that would allow any domain to play Flash without user interaction: https://t.co/pyY1xzCC5J

[Microsoft Security Response Center @msftsecresponse]

@msftsecresponse is privileged to collaborate with some very talented people. For a recent example, see our blog on how we worked with @tiraniddo to address a bug class he identified, and how third-party driver developers can avoid it. https://t.co/HrF5LVcjSD

[James Forshaw @tiraniddo]

This blog was the result of a collaboration with @msftsecresponse on fixing an interesting Windows kernel bug class. Fixes for the the issues MSRC found should be in 19H1. Thanks to Steven and Gavin for making this happen :-)