bintelbot

Intel only

[bintelbot @bintelbot]

patrickwardle: RT @_xpn_: It's that time of the week again!! https://t.co/1whk7QmL41

[Adam Chester 🏴‍☠️ @_xpn_]

A now routine task for a Tuesday, pinging Apple until they reply. (Context: Bug disclosed and fixed by Apple, promised credit on multiple occasions.. nothing for 12 months+) 🤣

[bintelbot @bintelbot]

patrickwardle: @msuiche @eve_kilel @shehacks_ke @yubiguel @LukasHermannBFS @offensive_con Ah this would align really well w/ the focus & goals of @objective_see's "Objective-We" program: https://t.co/CgzNh0Lhil

I'll ping the Foundation's board members who run the program!

[bintelbot @bintelbot]

patrickwardle: RT @evacide: Oh look. It's Zoom playing Repression's Little Helper in China.

https://t.co/c77r30ueg7 https://t.co/IYJS4ygTDa

[bintelbot @bintelbot]

patrickwardle: RT @ClassicII_MrMac: Apple has released the details of the macOS Ventura 13.3.1 (a) RSR update.🔐 https://t.co/PK10O8ebgH

[Mr. Macintosh @ClassicII_MrMac]

🚨 Apple has not shared the security content of the latest iOS & macOS Rapid Security Response Updates.

IMO update details should be shared for any Mac or iOS update that requires a restart.🖥

If you agree, please file feedback with Apple.📝

[bintelbot @bintelbot]

patrickwardle: Ah, mahalo @DennisF 🙏🏽

(from 2018) "Cache Me Outside"
Apple's 'quicklook' cache may leak encrypted data: https://t.co/LQDiXdWl0p https://t.co/s4gGWMBfjt

[Dennis @DennisF]

What's the best security talk/blog post title you've seen? I think my favorite is @patrickwardle Cache Me Outside. Sick.
In the egomaniac category, I'm pretty proud of Lawyers, Bugs, and Money.
https://t.co/KJx2vTkPEE

[bintelbot @bintelbot]

patrickwardle: RT @DennisF: What's the best security talk/blog post title you've seen? I think my favorite is @patrickwardle Cache Me Outside. Sick.
In the egomaniac category, I'm pretty proud of Lawyers, Bugs, and Money.
https://t.co/fjwysSGzW5

[bintelbot @bintelbot]

patrickwardle: RT @objective_see: Stoked to support @Ekoparty's Hackademy by donating scholarships through our "Objective-We" program 🙌🏽

Our goal is to encourage & empower individuals from underrepresented communities to pursue careers in technology whi… https://t.co/UohGZUysdz

[Ekoparty | Hacking everything @ekoparty]

La Fundación Objective-See ha lanzado el programa Objective-We con la misión de hacer que la industria de seguridad sea más inclusiva y accesible. 💪

Como parte de este programa, se suma a Ekoparty Hackademy para donar becas para el curso " FUNDAMENTALS OF HACKING & DEFENSE " con el fin de empoderar y equipar a las personas para un futuro mejor. 🚀

Para saber más sobre Objective-See ingresá a ➡ https://t.co/eDOkVfVnyA

¡Conocé más sobre el programa de becas! ➡ https://t.co/5zDTkfxE8I

📲 Por cualquier duda o consulta, podés escribirnos a [email protected] o vía WhatsApp al 011-1534479336

[bintelbot @bintelbot]

patrickwardle: Packing for the🏖️ calls for: 🕶️ / 🍫 / 💻 / 📚

Given Apple's "all in" on Arm if you're an iOS/macOS security researcher Maria's (@Fox0x01) book "Arm Assembly" is a must!

And as a bonus the last chapter (written by yours truly 🤭) covers …

[bintelbot @bintelbot]

patrickwardle: RT @billpollock: The 2023 grant cycle for Hacker Initiative is underway with the aim of giving out at least $100,000 in grants of $10,000 each. Please share, encourage your brilliant friends or colleagues to apply, or apply yourself! https://t.co/xl6DwhkNQK

[bintelbot @bintelbot]

patrickwardle: RT @theevilbit: Filling in some knowledge gaps in macOS defense topics. 😊 #lifelonglearning

[bintelbot @bintelbot]

patrickwardle: @krzyzanowskim @PartyD0lphin @cedriclnx re:Transmission, maybe because of this? https://t.co/E2X1CB0SGP

[bintelbot @bintelbot]

patrickwardle: RT @jmtrivedi: What if the macOS dock and its icons were more dynamic and fluid?

Made a little demo that shows message previews, live music, download progress, and more.

Pretty happy with how this turned out!

[bintelbot @bintelbot]

patrickwardle: Seems so:

"The second paragraph of the comment is most likely bogus ...A quick peek at the lipo source confirms the size checks are actually against UINT32_MAX"

https://t.co/DvYRABn2mz

[bintelbot @bintelbot]

patrickwardle: Seeking clarification 🙋🏻‍♂️

In fat.h, Apple notes that the fat_arch_64 structure will be used for slices/offsets greater than 4mb.

I'm guessing they meant 4GB (not MB)? Or? 🤔

[bintelbot @bintelbot]

patrickwardle: @cedriclnx @PartyD0lphin Good question!
It's actually up to each app, which can either:

1️⃣ Add the quarantine attribute to its downloads manually

2️⃣ Specify that the OS should add the attribute to each of the app's downloads (by adding LSFileQuarnatineEnabled …

[bintelbot @bintelbot]

patrickwardle: Great research & writeup by @PartyD0lphin

Looks like you could fully bypass Gatekeeper by simply prefixing a Mach-O binary (within an archive) with "._" 😅🤦🏻‍♂️

Now fixed as CVE-2023-27951 🙌🏽 https://t.co/wsCYd5J3yN

[Red Canary, a Zscaler company @redcanary]

Apple recently patched CVE-2023-27951 and CVE-2023-2794: two Gatekeeper bypass vulnerabilities Red Canary’s @partyd0lphin disclosed with help from our new Mac Monitor collection tool. https://t.co/P28L5QS2LY

[bintelbot @bintelbot]

patrickwardle: RT @redcanary: Apple recently patched CVE-2023-27951 and CVE-2023-2794: two Gatekeeper bypass vulnerabilities Red Canary’s @partyd0lphin disclosed with help from our new Mac Monitor collection tool. https://t.co/TV41Yokjbu

[bintelbot @bintelbot]

patrickwardle: RT @ClassicII_MrMac: Study this image, and tell me what you think is going on.🧐

Might seem straightforward, but I think the user has have multiple things going on here.🔍

I will share my thoughts later in a 🧵 but want to hear from you…

[bintelbot @bintelbot]

patrickwardle: RT @malwrhunterteam: "Jump Crypto Investment Agreement\.zip": ba5e982596fd03bea98f5de96c1258e56327358e134ceecd1d68e54480533d92
"Internal PDF Viewer": c28e4031129f3e6e5c6fbd7b1cebd8dd21b6f87a8564b0fb9ee741a9b8bc0197
@ShadowChasing1 @h2jazi …

[bintelbot @bintelbot]

patrickwardle: RT @ESETresearch: #ESETResearch warns about a CPIO archive named “Jump Crypto Investment https://t.co/5Uv0owqxTq” uploaded to VirusTotal from the USA 🇺🇸. It is another malicious PDF viewer distributed by #Lazarus #APT for #macOS …